Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/nLlnLzhBW0q3Q45Kky0hHNKYV40.roa
File: nLlnLzhBW0q3Q45Kky0hHNKYV40.roa (raw, json)
Hash identifier: RNNKG+Zuzj9PpdwsoSPFqXxYXZoCjXiQJtMmCaWRm20=
Subject key identifier: 9C:B9:67:2F:38:41:5B:4A:B7:43:8E:4A:93:2D:21:1C:D2:98:57:8D
Certificate issuer: /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Certificate serial: 01942445087F7A8569ECE6F8D82E4672B087
Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/nLlnLzhBW0q3Q45Kky0hHNKYV40.roa
Signing time: Wed 01 Jan 2025 23:48:11 +0000
ROA not before: Wed 01 Jan 2025 23:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199663
IP address blocks: 91.245.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:08:7f:7a:85:69:ec:e6:f8:d8:2e:46:72:b0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Validity
Not Before: Jan 1 23:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cb9672f38415b4ab7438e4a932d211cd298578d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:03:56:53:a4:24:ec:a1:6e:5e:07:47:a6:
aa:5b:65:51:c5:53:f8:21:ae:b5:62:61:c8:00:28:
d0:37:fc:1d:c7:90:55:e8:59:0a:9e:dd:3b:c4:a2:
fd:34:49:5a:81:64:55:87:b8:09:19:23:bd:c9:c7:
26:1e:2f:81:1c:7d:22:72:41:42:a9:1d:23:6d:29:
fe:0f:ef:79:03:68:9c:7b:a3:95:bd:73:02:ab:79:
91:84:59:8f:b1:5d:fb:0d:1f:6d:e2:0d:04:d3:8c:
e8:d2:85:7f:b2:38:09:d3:bc:4d:50:83:1a:2b:10:
15:59:6d:da:ed:37:2d:82:05:bc:b9:0d:a5:78:65:
15:c2:47:73:9b:a7:5d:0e:d6:a5:4a:b4:b8:5e:6b:
ae:19:38:be:b7:58:a7:c4:78:d6:93:a0:52:c9:b2:
78:c8:25:f6:61:9d:c3:f4:0c:20:40:13:ca:41:d6:
b8:3c:a7:7c:ab:cc:78:c1:0d:9c:31:1a:cf:4e:32:
df:06:d4:7e:dd:f4:8d:21:b0:51:a7:4c:93:e9:9b:
64:e3:c6:90:85:99:2b:3b:c1:f2:e9:a7:1b:70:ee:
99:da:a0:27:db:91:20:b4:cf:fc:f8:72:40:90:74:
d8:31:b5:2c:f7:f4:a6:b8:5c:2e:e5:ff:49:e8:91:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B9:67:2F:38:41:5B:4A:B7:43:8E:4A:93:2D:21:1C:D2:98:57:8D
X509v3 Authority Key Identifier:
keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/nLlnLzhBW0q3Q45Kky0hHNKYV40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.194.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:50:3a:28:3c:1a:05:48:ef:6c:cd:15:0e:7c:f4:2a:02:b4:
b9:9c:4e:ab:42:7c:df:cb:8c:76:7c:80:70:c6:8d:96:ce:35:
eb:c6:cc:10:2e:a7:65:02:c2:db:1c:7a:ef:0d:ca:4b:8b:93:
3e:5d:fa:73:4d:04:73:39:86:04:ae:a2:73:ca:8d:61:e1:71:
3d:e1:51:3d:5d:6e:b0:82:5c:96:e1:b1:09:a4:23:e1:18:c6:
54:00:fa:02:48:15:4a:0f:df:27:01:e2:29:fe:94:2f:3c:a4:
34:a7:eb:86:d3:2f:2e:f8:54:4a:cb:65:2f:9a:58:80:c2:b9:
89:34:1b:ec:80:c9:4a:6a:bc:c4:3e:99:c0:7e:e1:13:83:34:
7f:d7:73:d2:52:98:1a:ea:99:31:27:46:30:bd:35:9c:51:b3:
cc:06:96:45:a3:f8:c5:d2:0d:9f:f8:81:a2:2e:1e:45:bd:4f:
75:75:49:d0:ea:61:a8:de:b6:fb:a8:dd:22:5a:3c:b8:19:8c:
e5:32:29:fc:8f:88:7d:c5:71:7a:c1:af:65:6c:95:90:cd:5e:
14:6c:38:10:5c:e7:96:b5:60:26:34:0a:75:6a:72:a4:a1:73:
66:82:ae:d2:0b:3b:59:8e:4c:7c:bb:58:95:63:c6:7d:02:fa:
96:0a:98:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:58:44 2025 by rpki-client