Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa
File: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (raw, json)
Hash identifier: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=
Subject key identifier: 9C:35:79:34:B9:40:26:55:7B:21:77:42:35:12:AE:C2:16:3C:C8:88
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 019420D62AA6D4CA12451CB81B0DD64E26AD
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197107
IP address blocks: 88.151.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2a:a6:d4:ca:12:45:1c:b8:1b:0d:d6:4e:26:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c357934b94026557b2177423512aec2163cc888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:9a:b4:b4:48:bd:4a:1b:e6:a4:80:32:99:
cb:5c:1c:af:1c:a5:fb:cf:30:8f:17:b1:3e:a1:ad:
7e:19:18:ac:02:3f:f3:7c:74:a3:fb:5c:17:89:27:
13:7f:c5:cd:91:97:35:7c:e8:48:15:89:25:ef:54:
1a:39:1c:0a:07:35:5b:b6:5b:ad:d2:07:5c:ec:67:
17:30:8a:0d:ea:59:71:77:83:9d:89:56:c1:12:b5:
44:bc:d7:55:82:27:37:ca:fd:50:a6:cf:33:13:f6:
30:e0:83:bc:54:f9:5e:76:85:fc:23:41:2d:d6:e4:
eb:d0:e5:0f:a0:61:c4:22:ff:53:8d:67:80:16:df:
ff:a2:a6:c3:23:e1:26:65:47:d9:b2:29:20:6b:34:
e0:e1:ef:ac:ad:bb:cb:d7:88:31:23:0e:8c:fd:f1:
41:0f:d9:8a:27:22:7b:08:cd:77:1c:f8:03:77:8d:
c4:0b:4f:02:10:70:cd:18:3c:98:a0:35:f2:78:d1:
27:41:81:04:90:5e:ec:52:33:17:63:5e:54:b8:a7:
eb:34:f5:8f:38:02:bb:d7:f3:a3:ae:82:28:08:90:
66:4a:76:af:32:46:ba:d4:47:20:7f:39:0e:fd:aa:
9f:d9:6f:ea:f0:a9:fd:ee:32:42:28:6f:42:2b:f0:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:35:79:34:B9:40:26:55:7B:21:77:42:35:12:AE:C2:16:3C:C8:88
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:fd:44:a4:f4:16:36:e7:23:0d:30:f5:37:21:7b:6a:31:aa:
d5:59:0d:ed:0f:9a:45:2a:95:05:d4:a7:05:3a:46:84:c7:93:
43:3d:2f:cb:f6:f9:cd:a5:19:78:5b:e6:28:c1:9e:ad:d9:d8:
82:e3:14:c2:14:77:10:94:12:a6:4c:05:24:b0:04:1f:2a:8f:
ab:d5:56:37:b0:a4:5f:cf:4f:55:9c:7f:40:95:13:2d:69:25:
06:3d:6a:18:11:77:1c:1c:9b:00:a4:ae:93:82:aa:fb:2c:72:
8a:6a:e2:ca:ef:95:40:e4:14:fb:a8:2f:cd:99:d6:40:06:25:
a9:3b:99:be:65:d7:92:bb:63:d2:f9:3e:64:25:33:25:b0:52:
78:0d:5f:03:5f:34:9d:f4:0b:33:f8:0e:55:6f:25:d8:00:af:
ca:84:f6:36:f4:3d:ea:e8:6a:29:00:22:5e:dd:67:78:dc:58:
46:fd:d9:97:8e:1c:eb:e0:d8:c3:e0:a3:4b:12:62:d5:46:e6:
01:af:37:79:82:d8:56:ff:e4:50:3c:5d:f1:bc:f2:9a:b9:54:
6f:d9:04:7a:53:51:de:62:97:a5:23:06:3e:01:27:8a:5a:73:
1c:9f:e3:0c:07:57:c6:86:f2:02:78:a5:01:53:db:38:67:d5:
f4:db:7a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:33:31 2025 by rpki-client