Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/nvT_HNaheF7AuMYSBVzSYd3DVGE.roa
File: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (raw, json)
Hash identifier: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=
Subject key identifier: 9E:F4:FF:1C:D6:A1:78:5E:C0:B8:C6:12:05:5C:D2:61:DD:C3:54:61
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 019422FB3ABF88BFC311824B38EB787DE5E8
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/nvT_HNaheF7AuMYSBVzSYd3DVGE.roa
Signing time: Wed 01 Jan 2025 17:47:57 +0000
ROA not before: Wed 01 Jan 2025 17:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42405
IP address blocks: 91.213.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:3a:bf:88:bf:c3:11:82:4b:38:eb:78:7d:e5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: Jan 1 17:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ef4ff1cd6a1785ec0b8c612055cd261ddc35461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:9d:fc:f0:97:72:00:ee:4d:96:7c:9e:58:
c2:d2:1d:24:c7:90:45:c5:47:88:1d:26:8b:12:63:
8b:dd:65:03:c9:f6:61:65:6c:82:69:49:ea:50:05:
d1:93:23:e1:51:48:37:e4:87:0e:4f:31:85:14:6d:
ba:d9:c5:cd:9c:95:50:1f:1e:0c:15:2f:29:ef:35:
8a:0d:b7:a7:c1:4d:03:7b:fa:e3:40:9a:1c:92:81:
83:9c:eb:9c:91:18:2f:da:ca:90:18:5d:30:4e:f1:
e2:c8:86:bc:08:08:10:51:56:73:8f:c9:22:e2:44:
e3:19:60:1a:33:0a:91:20:ae:c9:c1:da:43:64:59:
fe:e1:6d:2e:94:2b:d8:61:ea:fe:8b:3c:b4:7f:d1:
bc:be:c6:97:d0:76:78:b6:00:b9:d9:63:2b:54:9f:
d9:a2:9a:d9:76:e4:30:ee:e3:5f:f4:bc:3b:86:ba:
1a:ff:ff:ed:11:2a:29:89:9e:0b:09:24:09:7a:32:
7f:a1:f2:5b:bb:33:96:ea:71:9c:1f:9a:96:57:ad:
da:75:64:7b:ce:81:1d:7f:ef:19:a2:ea:07:91:47:
1f:35:51:76:98:e0:e2:c9:7c:80:a2:fd:e4:1b:be:
f2:54:02:f9:02:cd:9b:8a:52:22:a8:63:6f:4e:11:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F4:FF:1C:D6:A1:78:5E:C0:B8:C6:12:05:5C:D2:61:DD:C3:54:61
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/nvT_HNaheF7AuMYSBVzSYd3DVGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.135.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2e:fe:41:60:c0:ed:d7:b3:60:0d:d6:c3:c1:13:ac:37:18:
12:01:96:02:96:29:34:42:6a:4b:c7:14:6b:dd:68:23:af:33:
3b:7c:17:86:ee:e6:05:f2:02:8c:81:c9:af:8f:c5:58:14:0e:
e7:24:b3:a1:3b:9e:ac:5e:4b:92:ce:67:5f:5a:ff:6f:44:e4:
93:f3:4a:6b:5d:58:b6:90:c3:d2:85:1c:6e:92:43:98:83:58:
7b:8b:4f:db:f8:e0:bd:b0:ce:53:13:48:a2:c0:cd:05:59:79:
11:29:fb:37:05:1d:c4:31:84:b4:6b:b3:70:c6:32:63:04:02:
8f:95:9a:f7:43:d5:1c:e9:0d:e4:2a:69:42:bb:61:f5:35:50:
36:dd:cd:d8:0c:4a:f1:e3:1a:a8:4a:15:69:9d:d0:ec:b7:f7:
30:4c:1d:8b:96:bf:a1:d3:68:25:e0:ce:b5:10:11:1b:eb:49:
21:7f:d7:c6:5d:a9:4d:9f:73:db:33:c4:05:f2:22:9f:78:aa:
b1:68:af:00:17:24:25:8f:a3:29:fa:04:7c:82:09:38:1d:9a:
81:44:1e:ac:23:a7:e1:08:23:d6:67:51:11:82:f6:35:1a:7b:
bc:11:17:db:ea:52:d2:43:9e:73:50:78:5f:49:7e:60:13:df:
d6:8c:fb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:03:27 2025 by rpki-client