Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/nT6cYZNimuwQSQ0spLUfPdAvG_c.roa
File: nT6cYZNimuwQSQ0spLUfPdAvG_c.roa (raw, json)
Hash identifier: RXCLvceNdyFUUHa8O5Frk1m2KbC77KxLuqoxF+fn+bI=
Subject key identifier: 9D:3E:9C:61:93:62:9A:EC:10:49:0D:2C:A4:B5:1F:3D:D0:2F:1B:F7
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01941F8C941E7BC9551F60C8753E65AE39C4
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/nT6cYZNimuwQSQ0spLUfPdAvG_c.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51500
IP address blocks: 5.59.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:94:1e:7b:c9:55:1f:60:c8:75:3e:65:ae:39:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d3e9c6193629aec10490d2ca4b51f3dd02f1bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:a2:92:d7:86:b3:ff:33:0f:4a:16:a2:87:
28:4f:c7:25:db:60:b5:fe:bb:6b:fc:4b:d2:18:92:
72:4c:95:f7:f1:8b:14:07:bd:44:e9:fa:24:a1:9b:
ec:45:d8:db:f0:cf:42:40:f6:77:35:e9:16:f9:54:
54:31:37:ef:af:3e:52:1e:46:3f:40:47:b9:0a:a9:
ea:19:27:2d:3f:11:e2:7d:b1:61:80:38:ee:44:68:
26:6e:15:18:80:be:67:81:f9:ca:7e:1c:8f:d7:9f:
57:3d:90:62:3c:a1:71:e0:ec:80:07:5a:bb:5c:83:
37:95:af:4d:80:4b:4b:9b:c5:b9:d0:58:f5:aa:14:
51:ce:aa:7b:fe:96:78:16:09:b2:4f:ef:9e:cd:dc:
ac:9a:1e:88:82:16:b6:17:8e:bb:d9:d4:ad:ef:90:
ee:82:65:fe:66:aa:f9:e0:1c:c4:63:f1:5a:e5:fc:
86:2e:a9:ed:56:c9:5d:3b:21:94:ff:06:3d:0b:cc:
43:0d:f7:20:a3:b6:90:be:fd:75:14:8b:7e:e0:dc:
75:aa:56:51:d5:8b:69:21:a8:6a:f9:f8:1c:22:16:
eb:78:37:95:54:dc:ad:22:ef:c7:6e:88:27:f2:a6:
4c:f5:82:a0:2b:b4:8b:73:bb:08:d2:4f:9b:dd:37:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3E:9C:61:93:62:9A:EC:10:49:0D:2C:A4:B5:1F:3D:D0:2F:1B:F7
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/nT6cYZNimuwQSQ0spLUfPdAvG_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.198.0/24
Signature Algorithm: sha256WithRSAEncryption
44:8b:a5:d6:3d:51:3c:cc:4c:15:55:4a:c7:ae:80:cb:a4:27:
3e:d1:c7:e0:a6:b5:5a:b6:a1:73:07:40:b9:b4:0e:4c:f7:56:
b5:19:d5:5e:13:be:f6:6a:9b:a3:25:20:02:61:c8:52:af:ac:
b9:8d:42:2f:8d:1e:cf:1e:39:19:c1:e7:8b:13:72:94:23:85:
fb:ec:c6:96:24:5e:53:47:79:97:65:e5:c9:4c:83:85:e5:08:
51:f9:7b:a5:b6:46:45:c4:47:15:b6:70:0a:31:45:68:15:81:
a5:74:f4:8d:aa:e9:8e:70:0d:6e:47:43:2b:41:15:4f:36:48:
9e:54:a4:75:1c:a5:83:e1:83:03:65:e8:e4:1d:69:e7:69:e9:
07:4c:ed:93:7d:b1:0c:9b:1b:e6:43:eb:b5:c3:8b:8a:9a:8e:
17:db:c1:ee:7b:9b:d7:6d:d4:27:b2:4f:b0:e0:9c:55:f1:f7:
ea:2c:09:4a:ce:53:be:b9:e4:41:d3:e2:c6:52:ee:95:72:c2:
26:7e:0c:a3:c3:30:92:6c:46:68:72:9b:f2:1f:c5:69:aa:56:
7d:51:35:7f:ad:78:52:ad:8b:dd:cd:ca:f5:f0:44:62:d4:e9:
5e:a1:0b:ac:5c:23:2a:16:f6:75:41:9b:23:c0:95:7c:4a:1b:
06:bd:e6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:33:54 2025 by rpki-client