Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa
File: nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa (raw, json)
Hash identifier: WhQZd4QXzL2/tYEwZWSw0W3wudhwSA0fhANQFT8pmNY=
Subject key identifier: 9C:6D:E4:47:4E:0F:27:8A:6F:9C:D2:EE:AA:F3:1C:F5:A4:8E:E4:8A
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BC910B8E857456459AA4AFDB166F2
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49135
IP address blocks: 80.123.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c9:10:b8:e8:57:45:64:59:aa:4a:fd:b1:66:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c6de4474e0f278a6f9cd2eeaaf31cf5a48ee48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:2d:c3:64:9b:9c:d4:ec:a2:79:e0:5a:b8:
00:b7:5b:eb:c1:1f:fa:73:b2:9e:f9:7d:2c:e3:f9:
7e:a9:86:92:d4:94:ca:97:2b:2c:4b:ea:bf:96:22:
67:00:ea:9b:23:76:f1:23:a2:2e:0f:a9:a1:02:ed:
96:80:b8:14:b4:90:67:05:11:ab:c8:58:5d:7b:45:
07:99:c1:b8:d9:67:06:11:38:5d:8b:fa:f3:8b:77:
8c:45:56:72:f1:4f:39:dc:cb:8a:20:6d:40:6f:7c:
f9:ea:50:d7:66:55:6b:66:bf:62:1c:f5:31:b5:4b:
a6:84:0e:3b:43:21:a5:ca:d5:a5:fb:19:c1:d4:da:
22:a7:b4:98:43:df:c2:7f:a5:b8:c6:6f:0a:06:5d:
6b:57:25:12:24:93:ce:e4:ed:d2:87:35:d2:e6:0e:
ff:42:13:57:5d:40:68:92:f5:4f:81:0b:f5:e4:37:
dc:2d:9e:ec:56:56:74:73:f0:5d:bd:52:3d:e3:c2:
b8:bd:5e:74:b9:8c:21:be:90:ef:e5:0f:c5:00:21:
74:b8:35:25:67:93:02:a3:a3:4d:e0:73:90:4d:7e:
7f:c3:ed:a8:0f:e7:64:91:0b:6c:88:1a:dc:8a:4b:
02:60:ff:02:af:99:19:02:59:61:b4:63:b3:35:ab:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6D:E4:47:4E:0F:27:8A:6F:9C:D2:EE:AA:F3:1C:F5:A4:8E:E4:8A
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.123.153.0/24
Signature Algorithm: sha256WithRSAEncryption
51:16:7b:10:20:4b:9b:1b:b4:22:74:5f:5e:a4:b0:1f:b4:cf:
88:23:5e:1a:41:3e:b7:55:25:a8:27:7f:5f:3e:56:81:f3:9c:
50:e5:71:6a:9f:ad:86:81:93:66:2e:cb:3c:b0:4d:70:35:32:
17:e2:3e:89:f5:0b:fc:dd:e5:e4:bf:29:a2:70:9e:83:84:47:
5c:6d:de:61:8e:f9:1c:16:6d:65:f1:37:30:70:1d:40:2d:da:
89:4a:40:e8:6f:8f:5e:e2:80:b5:37:a4:0a:8d:88:a0:e7:e9:
a8:98:5f:cc:1e:1b:59:8c:49:80:e7:ff:fa:ee:06:67:71:07:
1f:68:eb:2c:79:8f:99:de:a0:3b:ca:c3:9b:89:65:78:d9:eb:
77:56:db:c3:58:b5:38:0b:a4:d2:0a:e9:00:9f:59:bc:32:fc:
72:94:da:e0:93:af:9a:12:4d:74:f8:ed:d4:d4:e4:d9:95:b3:
33:d3:fa:4c:0d:e8:da:70:b1:03:af:2c:a3:dc:5d:81:b2:43:
35:80:d0:dc:3e:c2:76:22:8b:11:22:a9:99:ca:a4:e2:db:84:
fd:fa:77:10:c3:be:ad:5c:62:fa:f6:46:c6:33:dd:a1:04:f1:
00:32:0b:ee:c3:96:16:be:8b:6d:25:ea:ae:22:ee:ba:6f:72:
6f:8e:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:04 2025 by rpki-client