Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa
File: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (raw, json)
Hash identifier: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=
Subject key identifier: 9D:BE:30:7D:0E:C5:CC:48:14:40:D0:EC:4D:04:F5:AC:8E:82:D4:FD
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01941F8C0AD855D071881C2050EF49FBBE36
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211936
IP address blocks: 45.66.92.0/24 maxlen: 24
45.66.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0a:d8:55:d0:71:88:1c:20:50:ef:49:fb:be:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dbe307d0ec5cc481440d0ec4d04f5ac8e82d4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e9:9b:c9:88:aa:82:cb:44:8d:09:70:2d:06:
7c:56:46:54:1f:18:43:f0:62:95:80:c5:10:1e:a7:
f3:a8:38:2f:38:e1:b2:85:95:bc:c7:48:6f:09:36:
5b:d8:cf:34:13:ab:85:80:cf:94:f5:4e:17:d3:b1:
17:f6:e7:2b:bb:64:ac:73:e4:51:60:ba:af:59:ff:
86:fd:a6:56:a9:52:43:d0:90:08:b1:ec:2b:fe:f0:
24:bf:2e:7f:bc:2b:ca:31:85:28:9c:17:7d:ac:60:
e2:0f:47:18:6d:c0:1d:a3:b6:06:d9:b8:26:19:07:
3f:6d:35:b7:6b:3e:b1:33:f4:7c:4d:e1:ad:b4:83:
cb:f9:54:47:ae:26:68:94:54:25:44:2b:1a:d4:60:
8f:91:00:f1:19:c7:54:38:ee:e8:a3:df:9f:a6:5c:
8a:e5:15:c7:f8:26:f9:2c:f2:f8:88:f6:a0:b0:19:
88:4b:be:b1:51:a6:f5:fa:c4:d1:67:ff:13:e0:d2:
8f:7a:c3:b3:45:7a:83:ad:c1:ae:94:81:3e:f7:1a:
3b:b1:fb:52:ba:45:e6:ac:9f:5c:97:9d:63:cf:64:
7c:a5:87:2d:4c:a2:5e:ec:34:c8:f1:64:15:e2:0d:
fb:26:35:ec:cc:9a:20:40:6e:66:3e:3f:64:ac:f6:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BE:30:7D:0E:C5:CC:48:14:40:D0:EC:4D:04:F5:AC:8E:82:D4:FD
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.92.0/23
Signature Algorithm: sha256WithRSAEncryption
59:3a:ad:0c:37:c5:9f:a8:d4:a9:33:ce:e1:51:cf:5d:7f:1b:
40:d7:36:c4:38:7c:9d:98:78:c7:10:18:ee:9d:9e:52:19:7b:
4b:c7:46:10:b5:12:3f:6f:11:75:76:c2:f6:ac:e4:af:34:25:
9e:c1:f3:f6:cb:97:1c:c7:0d:1a:08:b3:90:e5:4f:92:53:f2:
f3:5e:77:3f:2f:53:6c:de:68:8c:75:bf:b2:d8:48:36:b5:93:
16:df:4c:ce:9e:78:88:f4:33:c2:a0:8a:ee:8e:a4:4a:42:e9:
08:48:06:bc:26:c2:20:59:f5:ed:68:d5:a8:28:fc:b4:4c:73:
33:90:21:14:90:b4:69:b3:f1:aa:c0:b1:d7:a0:c0:75:3d:cc:
7b:29:c0:85:47:84:bb:5a:c8:f6:ec:dc:8c:6f:7f:24:c7:5e:
76:99:26:a6:b0:9b:7b:7b:f6:6b:01:98:71:e5:da:fc:54:1c:
26:30:9f:aa:1c:c4:77:ac:f6:3b:9e:b0:e2:ec:d3:e4:e8:c9:
9d:fc:7f:4f:de:19:b2:94:36:47:cd:27:20:e2:78:00:0e:87:
98:b8:ae:6b:22:f1:c1:c4:ef:70:60:dc:ee:3e:44:3a:45:c0:
d3:73:8b:02:b8:ed:5a:77:f5:e8:f2:33:12:22:e4:72:38:dc:
2f:99:94:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:47:34 2025 by rpki-client