Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/nFnXzGX9x8WjQH0WTEkYEV58ntE.roa
File: nFnXzGX9x8WjQH0WTEkYEV58ntE.roa (raw, json)
Hash identifier: qp697Wbqn7eonfV2epdNmLzMoHnyKSRFdJF1JaKpdqs=
Subject key identifier: 9C:59:D7:CC:65:FD:C7:C5:A3:40:7D:16:4C:49:18:11:5E:7C:9E:D1
Certificate issuer: /CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Certificate serial: 019425215977DFDE0C4801288F4770F97474
Authority key identifier: 99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/nFnXzGX9x8WjQH0WTEkYEV58ntE.roa
Signing time: Thu 02 Jan 2025 03:48:50 +0000
ROA not before: Thu 02 Jan 2025 03:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48893
IP address blocks: 195.114.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:59:77:df:de:0c:48:01:28:8f:47:70:f9:74:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Validity
Not Before: Jan 2 03:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c59d7cc65fdc7c5a3407d164c4918115e7c9ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:51:b7:fa:5e:79:1c:f0:19:49:e9:52:35:
2c:2f:d6:87:c9:4c:7b:d0:fd:dd:13:01:f5:76:97:
5e:5c:4f:c4:7e:a1:18:25:75:fe:68:29:c5:19:88:
08:5f:81:ce:b1:69:78:1a:e5:f3:ab:86:67:11:70:
50:b4:6c:b6:36:70:53:4c:b6:52:cd:dc:7f:5b:bb:
4f:62:01:d8:5a:25:5b:f1:78:ba:91:34:a1:06:1b:
37:8a:f6:81:43:29:f5:91:d9:aa:b7:f7:25:03:76:
a5:f3:17:f2:88:29:54:5c:8a:bc:e1:25:a9:d6:8c:
d0:1a:9a:19:78:03:c7:ee:08:19:3a:bd:7b:5d:0b:
86:7a:59:39:c8:ef:28:72:50:22:37:a4:35:ff:aa:
8f:ad:a0:f4:86:11:dc:3e:6f:56:06:f3:e0:9a:0d:
a4:c6:77:d3:bf:94:93:51:b0:3f:a0:bc:57:23:e5:
8a:96:66:b7:32:c8:24:78:01:10:ae:9b:2a:69:c0:
e6:66:8d:74:6b:ee:84:c7:c8:1e:a8:f2:8e:e1:39:
cb:3d:bb:b3:e7:16:24:95:ed:b4:a3:ab:88:36:99:
95:b6:96:e6:6e:b4:7c:fb:ef:70:82:62:86:fb:40:
83:b5:7e:89:f9:49:01:c2:b0:30:9b:38:c6:b2:5a:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:59:D7:CC:65:FD:C7:C5:A3:40:7D:16:4C:49:18:11:5E:7C:9E:D1
X509v3 Authority Key Identifier:
keyid:99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/nFnXzGX9x8WjQH0WTEkYEV58ntE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.16.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:fa:9e:5b:e9:00:b8:58:ed:cc:7d:1b:ca:87:01:44:ea:17:
9e:0f:08:3c:57:2e:bf:d2:f5:b3:d4:90:bc:5e:16:2a:26:41:
97:51:db:a9:0c:37:42:8c:68:e9:88:4e:06:d6:5e:0b:00:1b:
1b:a2:e0:24:63:87:3c:cd:b4:c1:85:34:70:79:ea:91:91:14:
64:bd:a7:c0:83:20:a8:f1:36:3a:9a:5b:8f:61:d8:8d:1a:2b:
f9:d0:6e:53:c2:7f:b1:34:df:8e:5a:2c:c8:ed:20:75:f4:d8:
e6:b6:c4:b1:56:78:4d:a0:6a:2d:94:3f:f9:49:de:7b:01:85:
17:a5:ba:fb:94:3e:df:3e:5b:46:24:aa:6c:2b:8e:2d:1f:8e:
64:6d:51:17:ca:d9:22:b7:51:45:c3:ed:8a:54:7c:a6:f1:a7:
52:06:a9:57:63:51:2f:41:99:52:a3:ad:a2:d5:e6:90:94:78:
f7:7d:bd:5d:e0:16:ff:44:e1:88:7d:81:86:57:ce:76:97:fb:
36:ed:4c:17:61:a6:a2:41:14:71:75:a0:24:8f:d3:0c:ff:f0:
44:99:89:2f:39:b2:18:92:c7:f3:d1:31:be:0c:5e:70:08:1e:
b2:d1:48:ea:3d:4f:84:df:6d:16:63:d4:b9:98:73:f0:8f:8f:
0e:81:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:43:14 2025 by rpki-client