Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa
File: nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa (raw, json)
Hash identifier: XhxPnrvDqx0alyntNHd6QEfUT7v4BfXJpEnK8r6nu/w=
Subject key identifier: 9D:7F:5E:F9:8F:01:4D:D0:A8:10:CE:BF:04:93:42:EA:5E:92:76:B9
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 0194214393EBFAEE2F7A5032F8C9A57B2E1C
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa
Signing time: Wed 01 Jan 2025 09:47:44 +0000
ROA not before: Wed 01 Jan 2025 09:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.130.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:93:eb:fa:ee:2f:7a:50:32:f8:c9:a5:7b:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Jan 1 09:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d7f5ef98f014dd0a810cebf049342ea5e9276b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:f7:08:50:cf:f9:7f:91:eb:cc:42:41:23:
78:33:4a:a8:1f:24:0f:70:52:04:9c:85:e2:5f:28:
26:89:ae:ab:8a:81:d0:3a:69:c6:7c:da:90:03:7f:
a5:53:17:c8:d3:df:cc:fa:e1:cd:e5:57:43:39:dd:
4a:13:3c:86:ad:8d:7d:b7:eb:d6:ac:2a:78:1e:b1:
c1:e0:04:11:bb:e8:a8:ee:9b:09:e2:95:21:41:ad:
98:02:66:88:4d:ee:01:eb:11:84:d1:aa:f1:68:9d:
a9:1e:f9:5b:a7:6e:80:b4:79:79:05:a7:34:35:db:
f4:16:c0:f6:ec:c0:cd:8b:de:0e:fa:80:4a:ee:38:
b3:5e:de:5f:c0:68:52:c9:74:bb:9b:1c:8a:3f:2d:
f7:15:7c:db:9b:10:77:aa:db:80:a7:54:56:79:b4:
6d:b2:9e:fe:74:9e:0e:ec:c4:5a:cd:0a:2a:18:65:
fe:84:81:ef:8a:69:3b:e6:69:26:cf:53:a3:61:94:
6a:89:f8:42:1b:64:2c:3e:2b:47:79:91:83:32:5b:
7d:99:59:54:79:99:b4:eb:26:9c:f7:4e:70:d5:e8:
05:65:38:98:8a:de:53:4d:23:19:aa:19:db:55:48:
fc:7b:da:18:f1:f8:f6:67:ab:d6:2e:44:af:b6:16:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:5E:F9:8F:01:4D:D0:A8:10:CE:BF:04:93:42:EA:5E:92:76:B9
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.46.0/24
Signature Algorithm: sha256WithRSAEncryption
af:f1:0e:2b:4b:bd:01:2b:d7:1b:aa:f0:ee:72:a0:51:fd:a3:
e5:94:b4:5c:64:b7:3e:f6:f2:f7:a3:f2:1a:3b:40:85:92:1f:
df:35:ad:4f:0e:ab:71:53:05:0c:ca:e7:10:e5:eb:ca:43:e3:
9e:d1:00:3d:db:b1:0e:c8:2e:07:bb:c6:a8:e7:73:c9:85:7a:
9b:49:4c:d8:26:a5:42:f5:f9:ba:d7:48:24:15:db:4b:d3:7b:
e1:1a:54:29:b7:56:18:cb:f9:5a:07:93:43:f4:ee:d6:da:8d:
2f:cc:f1:da:b6:36:aa:e5:f0:2a:51:c7:4e:42:af:89:b3:23:
ee:4b:f1:03:9c:f6:c6:0b:cb:5a:b4:fd:29:91:01:f4:79:a0:
12:0d:15:ec:93:06:66:75:a0:b0:0e:57:4b:e2:fb:75:cb:9c:
94:9b:65:09:f4:dc:0b:74:9e:f0:85:61:61:8e:c5:76:89:a4:
5e:c9:31:e3:13:ff:5a:5a:5c:70:de:b0:18:5b:7c:e3:80:e1:
ae:b6:40:4b:db:d7:49:60:d2:f0:bf:e4:ac:25:7d:00:4a:ff:
71:90:bd:29:cd:f0:8c:73:c0:ab:47:c9:dc:f9:71:88:1e:21:
88:88:dd:4d:dd:56:62:c7:ca:58:26:d4:f4:54:69:2a:de:bb:
3b:d3:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:06:28 2025 by rpki-client