Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/nKXRC9NUlEgavRczr20Fd3QUFbg.roa
File: nKXRC9NUlEgavRczr20Fd3QUFbg.roa (raw, json)
Hash identifier: OalBK1MOuAYl+k92ndjaYk1jljs83aLhrbEyE88Tedc=
Subject key identifier: 9C:A5:D1:0B:D3:54:94:48:1A:BD:17:33:AF:6D:05:77:74:14:15:B8
Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial: 01972F40F21605DB746ECE693B9E339A9E43
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/nKXRC9NUlEgavRczr20Fd3QUFbg.roa
Signing time: Mon 02 Jun 2025 06:07:54 +0000
ROA not before: Mon 02 Jun 2025 06:07:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62412
IP address blocks: 192.140.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:40:f2:16:05:db:74:6e:ce:69:3b:9e:33:9a:9e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Validity
Not Before: Jun 2 06:07:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ca5d10bd35494481abd1733af6d0577741415b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:a8:f2:84:4b:86:21:32:c1:f3:68:9b:7c:
4d:6f:71:2a:33:24:d0:9f:a4:1b:ab:53:46:a7:b6:
48:e4:a7:65:ba:db:b7:26:91:67:31:77:4a:78:a5:
fa:0a:4b:7f:fa:ff:5f:82:ce:62:0a:e6:c3:f9:ef:
bd:74:8f:18:2c:b6:98:0d:c6:89:12:6e:a8:ef:0c:
b0:9f:16:8c:70:59:74:6f:8f:b1:76:9f:79:5f:7f:
93:08:e9:48:0d:31:85:ec:d2:65:ec:83:72:53:86:
fe:81:57:3d:2e:3b:48:a1:24:d6:53:0c:41:3f:12:
64:c2:fe:88:6a:53:dc:b1:c1:d0:07:c3:f6:0d:1d:
8b:09:3e:ea:9c:53:88:b1:3a:2f:c2:62:95:65:4c:
69:e2:85:51:0b:0e:15:29:43:b2:44:66:3d:2b:bf:
75:10:e1:64:73:cf:5f:31:02:aa:3a:0c:d1:06:73:
0b:31:24:35:a8:15:55:52:eb:69:e1:b9:16:c7:13:
28:31:3c:a7:86:fc:1b:31:87:b7:ad:04:ef:f4:85:
86:4d:74:b6:76:43:6e:31:2c:2e:ac:d5:53:cf:02:
03:1a:e6:dc:d8:89:62:f5:cb:32:77:16:e1:99:5b:
8f:c3:57:bd:fb:9e:8c:b0:b6:b7:8d:55:b2:ea:a5:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A5:D1:0B:D3:54:94:48:1A:BD:17:33:AF:6D:05:77:74:14:15:B8
X509v3 Authority Key Identifier:
keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/nKXRC9NUlEgavRczr20Fd3QUFbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.228.0/24
Signature Algorithm: sha256WithRSAEncryption
83:28:a6:f4:d9:c8:bc:a1:1b:73:75:03:6d:c5:9d:37:6b:68:
a5:6b:8f:7e:df:c3:e0:85:c1:12:df:79:3f:09:29:3a:13:e6:
67:08:25:2c:b8:4f:8e:20:25:f4:75:7c:dc:64:54:32:42:5f:
88:9c:19:ee:ce:07:8b:fc:2c:10:b4:44:d8:57:9a:0a:c1:d9:
e1:5d:c7:80:a2:8e:f0:03:01:b2:64:0f:3a:4d:2f:b2:72:f9:
ff:7d:59:2e:6d:47:2c:e0:21:63:a8:93:3c:e4:11:00:3f:b9:
2c:1f:83:2c:c5:77:08:9a:7f:50:0f:88:b8:f7:f0:ce:62:aa:
c9:bb:05:10:39:31:e1:90:13:ed:a4:fd:4c:d8:79:21:25:e4:
40:45:0e:5d:2f:76:88:4b:19:46:d4:00:f3:12:d5:84:da:67:
1f:2a:a5:d7:f2:0c:98:fe:66:42:e0:a5:fd:75:39:02:50:4f:
32:8b:1d:29:0f:f5:8e:07:3f:4d:8f:f9:77:0d:cc:e6:95:ec:
4d:97:0c:d7:7a:0f:5b:23:fd:60:ce:58:c2:16:b0:e7:4d:43:
90:ff:96:0c:7a:33:f2:f3:5b:b2:8b:1f:34:1e:47:27:ec:19:
ce:ed:df:f1:f1:2c:99:44:a7:86:03:22:d0:fb:5d:9e:ee:5b:
87:2a:a5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:46:30 2025 by rpki-client