Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa
File: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (raw, json)
Hash identifier: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=
Subject key identifier: DF:B3:4D:FE:A1:59:F6:84:F9:BA:54:FF:D0:CF:FD:04:5D:58:08:2B
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D62AC928EC840E13E59E90D3F96C34
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199982
IP address blocks: 195.5.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2a:c9:28:ec:84:0e:13:e5:9e:90:d3:f9:6c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfb34dfea159f684f9ba54ffd0cffd045d58082b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:e8:c2:8a:ce:c5:48:5a:ab:65:ed:dd:db:
b2:5a:6f:24:d4:8b:22:21:6d:ff:7f:9d:41:46:d7:
48:cf:68:da:f7:93:dc:3a:0b:a3:af:30:a7:00:27:
67:c1:c5:f7:02:1c:0b:20:ca:c0:e3:ac:01:52:23:
b0:03:65:66:a0:c6:60:71:ee:8d:d7:f0:98:56:bb:
60:78:1f:8e:5d:04:d6:b9:7b:f0:18:eb:68:a2:2c:
de:98:04:ad:63:1c:2c:d4:fc:ec:cb:5d:32:3d:66:
91:f8:54:5d:ef:55:f3:66:eb:b6:85:1d:bd:b6:9e:
fc:bf:d0:ad:d9:02:b1:9c:20:8e:7d:ca:60:50:ec:
93:98:df:65:78:bd:5d:01:c0:63:68:5a:2d:04:c0:
f8:0d:43:92:df:87:9f:f2:32:40:83:94:55:7e:ef:
58:cd:7c:35:3d:81:a4:73:03:d5:41:25:72:80:12:
8c:71:24:c8:35:e6:71:3d:fe:94:8f:a6:ca:1e:45:
98:f6:78:be:69:f4:6c:40:69:96:49:2e:d7:17:99:
2f:0e:73:cf:56:d4:18:64:23:bf:81:c9:97:65:59:
1d:61:fd:dc:7c:e6:c6:93:e9:89:ac:ba:30:7b:ce:
4e:9c:08:d4:32:40:89:c6:a1:7c:74:6f:54:17:1e:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B3:4D:FE:A1:59:F6:84:F9:BA:54:FF:D0:CF:FD:04:5D:58:08:2B
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c7:6c:c6:db:c0:95:3a:84:30:81:12:ed:40:51:18:3b:48:
3f:0a:23:20:6b:c4:1a:8f:00:ab:3c:a1:f8:70:3b:57:c8:1c:
b2:85:38:e1:4d:34:ae:05:e3:e6:8a:91:8a:3c:98:22:50:0c:
13:25:de:1d:4d:d3:e9:ba:b0:9b:9b:8f:bf:92:3d:6e:14:7c:
94:98:b4:ee:69:fb:c7:79:27:a6:a8:7b:3d:19:c0:f4:a7:3e:
ad:05:92:a8:34:17:52:9b:f3:74:96:7c:a2:1c:ca:15:3c:de:
0b:26:7b:38:b6:f6:cc:92:e1:b5:0b:34:82:41:29:36:38:2b:
ce:b5:ef:0a:01:14:aa:a1:a7:c3:1f:dc:14:bb:ab:8a:1c:e6:
ba:ab:8b:53:de:d7:18:8f:b7:48:53:ac:57:94:53:84:56:f0:
6f:3e:a6:ef:41:97:3e:c7:c2:ec:96:f2:4c:6e:ce:0a:d2:cd:
ba:53:7e:ba:80:44:30:33:38:ec:14:64:b4:01:07:32:92:69:
c8:3c:0a:ca:95:5d:a2:54:d5:e1:66:1e:e6:25:a4:6a:0f:84:
f9:28:47:49:78:14:57:b2:87:b4:bb:97:10:bb:a6:2b:3a:72:
51:fd:5b:47:91:71:63:08:ec:48:6a:57:be:38:ef:b6:a8:eb:
55:5f:30:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:35 2025 by rpki-client