Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/nPLIjH6A9Mvf1F8HtLDzWb8jIMc.roa
File: nPLIjH6A9Mvf1F8HtLDzWb8jIMc.roa (raw, json)
Hash identifier: Kkbt3awiC7wXEdfElBvXbg7tTE4YJO5Q0eMabJjQuQ0=
Subject key identifier: 9C:F2:C8:8C:7E:80:F4:CB:DF:D4:5F:07:B4:B0:F3:59:BF:23:20:C7
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019424456FD63E7498CD0C8F1746DB57F51A
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/nPLIjH6A9Mvf1F8HtLDzWb8jIMc.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215298
IP address blocks: 195.76.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6f:d6:3e:74:98:cd:0c:8f:17:46:db:57:f5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cf2c88c7e80f4cbdfd45f07b4b0f359bf2320c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:79:07:c7:1c:75:12:6e:d7:01:56:88:08:
10:4c:1a:2c:ba:13:21:6e:e4:b1:50:b2:4d:4c:2b:
35:48:0e:37:5b:06:e8:11:cd:f9:ec:a8:44:3f:88:
99:9c:59:16:47:8b:ae:6a:93:06:ad:f4:1e:33:f8:
44:17:18:5c:43:ee:3f:e9:07:ef:64:95:c3:ab:03:
f9:67:49:cd:ef:f1:e2:66:29:87:3c:44:44:d0:77:
ba:93:0a:24:c6:7b:43:7a:36:3f:1e:64:7a:6c:4d:
69:ee:6b:87:86:64:d9:66:5c:00:f8:25:6c:46:d6:
74:3e:a6:be:11:17:1b:94:f8:4b:26:92:1c:57:aa:
11:8e:b9:74:d8:0f:4e:fa:7e:9f:7d:4a:97:94:a3:
2d:34:ec:f2:56:30:87:e4:f2:28:0a:0a:73:5c:e3:
5c:b1:a0:1e:3c:85:3c:f3:41:a4:0f:10:cd:9b:7a:
f6:d0:ba:21:d3:ec:ff:7a:4c:77:7e:b3:ad:4d:26:
20:06:85:75:aa:27:f4:13:d4:85:52:0c:9d:e7:65:
da:9f:e5:ab:c0:33:1d:58:95:79:dc:82:8e:a5:e9:
cd:26:b6:92:9c:04:ae:3e:6b:1f:b8:00:52:a2:a3:
23:f0:6a:41:d6:e7:b3:83:84:93:e3:bc:23:29:21:
3d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F2:C8:8C:7E:80:F4:CB:DF:D4:5F:07:B4:B0:F3:59:BF:23:20:C7
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/nPLIjH6A9Mvf1F8HtLDzWb8jIMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.76.120.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:01:69:56:c6:cf:49:a7:4b:e8:5c:c0:af:ce:36:30:df:cf:
e6:2a:0f:97:fc:7c:19:a3:19:55:72:6c:df:28:77:95:53:79:
06:24:5a:af:f2:f2:cc:de:e1:50:fc:a9:ff:c9:6c:5d:f1:9e:
91:14:43:67:3f:a4:e5:09:b6:dd:e3:9d:25:a1:7b:e0:ea:e7:
ab:cb:fb:ff:78:03:0b:7a:f2:8d:b9:c7:5f:d0:4a:dd:ab:3b:
21:39:99:24:d6:7b:ad:64:b4:c0:39:f3:5a:ee:15:b8:61:99:
30:b7:71:8e:be:04:c1:30:22:ae:59:5e:a4:9e:24:5a:87:33:
aa:f0:cc:c3:a7:83:cc:02:97:1e:49:fa:de:06:2f:c9:f4:b1:
18:3b:1e:5e:85:a1:b1:27:78:02:2d:b3:7c:d2:de:d0:1e:ba:
d5:6d:b6:8c:fd:a4:7e:bd:b9:f2:ae:c5:96:99:3b:82:46:cf:
a1:f1:06:83:6f:b0:e4:d9:19:fe:59:6a:2f:24:68:6f:93:a6:
78:08:6c:94:15:1f:58:99:56:c7:c4:10:41:01:b8:49:f8:ac:
6b:b7:bf:64:04:81:e4:cd:2c:e2:d6:6b:73:c7:2c:e9:8d:f1:
81:0b:62:12:b4:4c:aa:95:53:6e:70:76:92:ee:6b:57:d4:33:
4f:68:78:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:23:10 2025 by rpki-client