Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa
File: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (raw, json)
Hash identifier: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=
Subject key identifier: 35:7F:00:83:4A:40:EF:82:C6:85:42:FF:A1:A1:34:2B:3C:7B:68:05
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 01941F8CA46D715E03C48265F15DAFE7DE27
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15557
IP address blocks: 129.104.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a4:6d:71:5e:03:c4:82:65:f1:5d:af:e7:de:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=357f00834a40ef82c68542ffa1a1342b3c7b6805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3c:9a:c9:bc:fa:c0:4a:c6:ba:5b:15:e7:91:
46:71:91:e9:2d:1a:99:b1:4e:18:6e:16:37:bb:af:
3e:50:d6:8b:ba:85:35:b0:58:90:bc:d7:fd:1e:b3:
8c:5c:1a:24:41:e4:30:5d:a3:31:76:c7:2b:ae:12:
ba:58:bb:24:7f:3d:31:85:92:40:04:23:57:e1:c7:
ab:a9:44:3c:43:b4:81:1a:d9:93:e0:8f:4d:5b:20:
57:02:e2:9e:93:f5:a3:8e:78:71:f2:1f:1f:9e:ec:
e1:5a:29:35:93:6d:3e:b9:bb:55:53:2a:f7:78:b2:
15:18:43:18:64:e9:63:65:2f:b5:d0:0d:44:63:ff:
54:7a:b8:c1:7a:64:33:96:d1:a0:ae:f3:fd:4f:f3:
01:f8:20:b9:f8:44:ba:2b:3f:fa:bb:90:75:9c:21:
4e:96:92:06:91:2f:0b:0c:0b:fe:25:8e:6a:af:ed:
da:b2:66:20:b8:14:d7:61:43:45:36:22:43:f4:96:
e6:b0:dd:18:a5:9c:59:87:5f:b4:e3:37:b0:56:f4:
74:7e:3f:33:26:8e:05:a9:25:14:d3:92:5d:d1:44:
df:e1:61:c9:2a:97:8c:cd:55:57:2d:2a:22:dd:a8:
6e:bf:08:fe:a6:98:c8:aa:90:86:a9:43:06:11:9b:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7F:00:83:4A:40:EF:82:C6:85:42:FF:A1:A1:34:2B:3C:7B:68:05
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:80:52:40:0c:a4:33:2a:bd:70:2a:03:80:67:ff:3a:e3:98:
70:2d:79:0e:52:2c:b6:bb:6f:fe:d1:44:be:8b:65:9c:aa:0b:
d2:1b:ce:2f:de:21:2c:26:75:db:cd:1d:a2:ee:6f:d6:34:e0:
93:ad:32:93:0f:19:c6:3a:a4:f0:a9:ce:3d:f3:96:4b:79:65:
ec:26:20:78:8b:b4:52:4f:eb:1f:b8:80:0e:e7:e3:6a:b8:86:
ee:db:41:5f:55:10:ad:f9:28:3b:c9:71:ef:9e:7f:09:a3:97:
72:47:76:1f:93:9f:bc:31:3c:2a:02:01:bd:ba:1d:6d:b3:98:
13:ae:b6:92:56:89:a9:b7:43:d0:19:d8:cd:c2:b8:ce:c6:6e:
ca:1d:b3:e4:2b:77:c9:25:bd:88:15:4e:3a:ee:b8:ac:c0:35:
61:73:67:35:06:06:d1:6c:db:3c:de:28:4b:a2:5e:9b:3a:4d:
3d:3b:af:0e:44:a1:a8:a5:8c:46:fc:aa:3c:ab:71:45:37:b7:
4b:9b:c7:41:eb:85:47:bc:92:90:a2:68:0f:af:00:be:4d:f8:
c4:bb:43:50:b5:bd:64:d8:cd:b4:4e:67:fc:2f:c9:a4:73:f5:
21:08:b6:c8:5a:07:63:80:a4:eb:65:48:f8:9c:24:aa:fd:93:
64:be:0c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:33:31 2025 by rpki-client