Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa
File: nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa (raw, json)
Hash identifier: IlnUSzXgTeo7Aecj19DyZcjG2TpAU9jXATfOU6kk97U=
Subject key identifier: 9C:A4:EF:64:F2:4F:A9:D0:97:89:2C:33:C8:0F:63:E4:88:E0:CD:78
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 019424459F22F8F3B33378CFF28FA3B3E7BC
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa
Signing time: Wed 01 Jan 2025 23:48:49 +0000
ROA not before: Wed 01 Jan 2025 23:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213909
IP address blocks: 188.211.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9f:22:f8:f3:b3:33:78:cf:f2:8f:a3:b3:e7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ca4ef64f24fa9d097892c33c80f63e488e0cd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:75:c7:e5:48:cf:bf:c4:1f:7b:bf:c3:fb:
18:5f:3e:fa:2e:46:ae:94:bf:18:63:91:b5:c9:d1:
55:f6:39:6a:f1:f6:11:07:64:09:98:a2:95:11:0d:
3e:35:a1:d8:21:4c:b7:f0:bc:d6:db:12:c6:eb:77:
0e:a6:07:aa:3e:27:60:8a:8d:98:0b:b0:21:97:ec:
88:9d:d5:bd:09:c1:1a:37:df:8a:45:53:b5:a2:79:
99:cb:2e:25:37:c5:1d:31:fc:81:80:03:21:f7:1e:
8a:5c:f3:ae:ee:b3:40:15:74:2e:bd:c9:47:3b:73:
42:33:bb:7b:43:55:fd:b8:11:74:f6:38:12:19:1c:
2e:38:ad:12:d9:d9:9d:88:c3:0b:09:32:4d:e4:a9:
c4:34:81:a0:7a:8e:40:c6:7c:5f:03:df:46:a0:b7:
49:07:fe:53:88:3e:ba:6e:b6:9b:e2:4d:7a:d8:69:
e4:a8:55:e0:bc:87:0b:e5:9c:fc:c1:45:1f:cf:e1:
5f:77:fa:d3:59:9e:b5:89:46:df:56:d8:55:ab:b9:
e7:cc:3e:ea:73:dd:75:0c:39:da:f9:12:9d:68:c8:
c9:e2:1f:f1:11:49:c8:c5:0a:e4:e5:49:3b:b5:0b:
61:61:56:2a:79:79:35:84:30:46:19:96:47:6f:ae:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A4:EF:64:F2:4F:A9:D0:97:89:2C:33:C8:0F:63:E4:88:E0:CD:78
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.211.169.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3c:64:2f:e1:e8:39:d6:d1:7a:bb:dc:be:21:5c:29:19:45:
49:26:20:db:d2:a5:08:c6:a8:58:1d:69:c6:39:53:a5:15:41:
17:1e:8c:68:e9:66:6b:b7:10:04:01:26:38:eb:9e:7f:29:33:
73:6a:eb:c0:18:47:ed:ca:fa:a9:fa:9f:e7:85:a9:8d:66:05:
86:e0:46:a7:4c:23:7c:aa:dd:e4:d7:94:21:f4:7e:c5:6d:ef:
98:30:af:28:b9:8b:28:83:6b:b3:79:f2:d8:3d:81:45:09:4d:
93:fe:87:6b:bc:ba:4a:26:8b:dc:83:4f:97:c3:62:4b:55:17:
a2:8a:88:f1:1d:94:59:ab:9a:3f:a8:f6:cc:20:59:8d:99:75:
10:f2:33:37:9c:47:1f:b5:5d:f3:94:49:04:cd:1a:93:3d:c4:
3b:a3:5b:2f:6a:80:39:63:4f:af:61:97:19:e3:1c:0c:7e:f0:
7a:2e:e4:c8:35:61:11:81:11:1e:d9:e7:fb:34:56:c3:fc:2f:
a8:f4:2e:eb:6e:c5:9b:2e:6d:ec:15:97:2b:e3:c5:15:4c:99:
59:bc:9f:77:fc:74:c2:bd:02:69:3c:60:be:7f:ea:1d:21:3a:
5e:1f:d3:04:0d:9a:10:f0:77:c8:e9:bd:a2:84:21:5b:b1:47:
7b:f4:95:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:22:10 2025 by rpki-client