Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Nl9p7fLmdvM3EzUOp4avcUhEZxw.roa
File: Nl9p7fLmdvM3EzUOp4avcUhEZxw.roa (raw, json)
Hash identifier: hLRWc5NF+XtH+dxtht7hFHCTvnXgIzhMBrr3MHh3PSU=
Subject key identifier: 36:5F:69:ED:F2:E6:76:F3:37:13:35:0E:A7:86:AF:71:48:44:67:1C
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D72245B8697E1540B0FBEA9CD1FFA0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Nl9p7fLmdvM3EzUOp4avcUhEZxw.roa
Signing time: Wed 01 Jan 2025 21:48:09 +0000
ROA not before: Wed 01 Jan 2025 21:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205135
IP address blocks: 185.229.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:22:45:b8:69:7e:15:40:b0:fb:ea:9c:d1:ff:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=365f69edf2e676f33713350ea786af714844671c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:5d:e2:77:ff:1a:78:28:f2:c5:fc:84:77:
d2:85:26:29:33:89:ff:9e:b1:57:dd:d6:8e:ac:da:
1e:14:42:29:c7:2e:c3:03:b8:3c:55:5c:85:20:c0:
ab:45:81:17:5b:a0:3c:5a:16:dc:71:38:f7:ba:0f:
60:cd:c4:f5:b8:81:0a:6f:fa:6a:fd:9f:34:2d:9b:
1a:83:9b:0b:c7:22:19:26:55:4b:ff:09:9f:32:d1:
19:9b:7a:ec:b1:4e:0d:e1:71:35:09:a8:c8:05:ba:
1d:3a:71:05:c9:99:ee:5d:41:15:2e:2a:7f:79:4c:
ef:37:b5:21:55:5b:3f:ca:40:ed:91:70:78:39:0b:
73:7c:54:6d:34:d5:dd:aa:93:a0:ff:0b:05:23:21:
48:35:8c:2b:f1:98:95:74:2c:98:af:17:47:de:64:
fe:7c:e3:5a:29:d0:d0:08:e2:cf:23:ad:4b:2c:1a:
34:74:87:30:72:9f:6d:67:fc:c4:1a:6f:e9:5b:37:
c7:e6:aa:8e:28:b5:e5:cc:dd:b9:ab:a2:8e:36:4b:
a5:3f:95:25:2c:bc:15:fa:29:42:1c:37:26:de:d3:
1f:d9:c9:91:a6:38:d9:1f:b9:58:01:f9:03:b7:52:
c3:d2:d3:7f:71:40:6b:63:a0:d4:c4:d4:44:9c:83:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5F:69:ED:F2:E6:76:F3:37:13:35:0E:A7:86:AF:71:48:44:67:1C
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Nl9p7fLmdvM3EzUOp4avcUhEZxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.67.0/24
Signature Algorithm: sha256WithRSAEncryption
93:2d:96:72:4f:6c:23:69:6a:8f:6a:1f:c8:a2:a2:00:cb:dd:
7f:9a:c1:a7:ba:8a:df:5b:c7:de:be:98:72:ff:23:dc:b8:2a:
ca:a1:14:f1:07:cd:45:49:3e:09:0c:27:26:7d:af:16:cc:c4:
9d:5c:71:95:96:2a:27:91:eb:80:f8:ed:86:9d:5f:a0:09:a2:
10:77:12:09:9a:03:e3:6c:4d:46:7f:ab:7d:29:5a:63:7a:37:
0e:3c:b7:53:4c:cf:e2:9b:c1:ca:84:d8:93:96:da:3f:45:91:
e3:58:fa:c3:dd:57:7c:d9:90:3e:f0:74:2b:57:58:8d:97:3d:
1e:fb:c0:22:09:f7:3c:64:f2:aa:5b:ff:30:d8:16:cc:7d:cd:
7a:89:5d:a3:76:97:72:aa:fc:d5:81:82:50:be:a0:2f:5e:39:
83:82:5a:50:73:35:23:ce:ea:bc:a5:35:7e:76:c1:f7:1c:4d:
78:d9:94:2a:43:49:79:a1:6d:37:0f:90:5c:02:f1:ff:ff:b6:
0a:c1:b6:75:51:f4:6d:b7:32:5e:db:04:49:ee:d5:0f:1d:4a:
ce:95:b4:ab:d0:2c:cf:6b:9d:d9:f9:62:4e:7e:1f:f6:79:82:
24:75:ff:c2:70:b1:88:b4:32:94:d5:f0:da:75:78:5b:f5:1c:
7b:4d:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:06 2025 by rpki-client