Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/nvx0QRZQO1QzuvMN00Bva6hTGZw.roa
File: nvx0QRZQO1QzuvMN00Bva6hTGZw.roa (raw, json)
Hash identifier: Gw59i4bicuVuHEY8V6dHsuW9MPHvsYhnw1rq0LLdv8I=
Subject key identifier: 9E:FC:74:41:16:50:3B:54:33:BA:F3:0D:D3:40:6F:6B:A8:53:19:9C
Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Certificate serial: 01949E189E2119200520152A0F1BC3E65C14
Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/nvx0QRZQO1QzuvMN00Bva6hTGZw.roa
Signing time: Sat 25 Jan 2025 15:33:20 +0000
ROA not before: Sat 25 Jan 2025 15:33:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 194.29.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9e:18:9e:21:19:20:05:20:15:2a:0f:1b:c3:e6:5c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Validity
Not Before: Jan 25 15:33:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9efc744116503b5433baf30dd3406f6ba853199c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:30:71:5a:82:5a:9b:df:af:f7:1e:d3:d0:
46:35:73:6d:50:4d:20:5c:56:53:27:c5:a9:19:dd:
f8:36:71:dc:51:a1:d0:e6:75:2b:9c:87:d9:9a:d1:
7a:d8:a3:8a:39:01:86:c9:8d:ae:2b:e9:67:06:c8:
bc:fa:ef:5e:67:0d:72:73:62:c4:bf:9d:90:03:e4:
05:e1:dd:08:50:85:85:dd:c0:ed:0b:7f:6d:a4:5a:
aa:6a:d6:80:ba:a2:26:14:c4:3c:c7:b9:6e:a8:16:
f0:84:c7:0f:6a:59:59:66:08:da:dd:0d:4e:3c:32:
8f:c6:c2:bc:d2:c9:e6:b4:7a:2f:da:44:ec:ce:07:
3c:79:07:24:22:6a:26:2a:40:89:e6:2a:e8:df:ab:
f6:54:1f:d4:a7:a5:c6:1c:e9:d3:23:cf:0c:10:01:
d0:8e:9c:98:6c:6c:65:b8:2a:1d:80:bf:b5:3a:8c:
7e:b4:6c:63:a4:2e:dc:08:60:9f:08:2b:ab:1f:c8:
d7:4f:6c:86:20:11:09:90:6b:c7:62:fc:e2:60:77:
55:ca:34:27:0a:94:e0:e5:9e:d8:ae:7d:23:27:91:
39:11:cc:30:ae:b2:58:b6:8b:fb:3a:51:7f:05:85:
62:d3:5c:0a:be:94:52:23:fc:a6:8d:cb:9c:ff:cc:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FC:74:41:16:50:3B:54:33:BA:F3:0D:D3:40:6F:6B:A8:53:19:9C
X509v3 Authority Key Identifier:
keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/nvx0QRZQO1QzuvMN00Bva6hTGZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:31:88:e7:3d:51:c6:3c:87:5a:2b:b7:71:05:dc:f1:c5:7c:
4c:ba:97:76:9e:72:c1:3d:d3:04:55:b8:22:a4:1b:4a:d9:4b:
d9:02:5e:da:ee:a2:4f:fb:3e:95:59:fa:78:1b:96:91:ec:64:
74:cd:f9:d9:5e:cb:09:78:24:8f:1b:ae:35:8c:5e:84:6b:55:
5f:b1:26:c7:3c:dd:0a:0b:07:93:c9:aa:4e:8c:d3:24:d0:8c:
34:7a:00:b3:b1:4d:d9:ad:01:7f:a5:97:f9:fd:d8:a4:cd:03:
3d:a8:8e:11:df:41:48:ae:97:ad:e6:9b:f6:9f:d6:d3:0e:48:
b7:78:ff:19:df:0e:c3:ee:6b:0b:7b:5b:7e:56:1a:a3:05:56:
cc:2b:40:22:76:2f:eb:ad:6f:14:72:c0:35:aa:bc:39:44:1b:
cc:27:09:94:32:5b:f2:f5:74:36:75:16:e7:0b:69:4e:92:e7:
21:06:87:e4:36:4a:fa:1f:d4:63:4b:2e:47:e5:07:6f:b0:f3:
cf:8c:e9:8c:c2:fa:d6:8c:d6:76:35:25:99:c5:03:87:ec:a3:
f9:5c:da:3c:53:68:08:53:38:d2:73:eb:d3:b9:48:b6:fa:ed:
fa:34:49:13:4e:a5:75:95:8b:51:02:ff:d8:de:86:33:d8:6b:
85:72:ef:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:49 2025 by rpki-client