Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/n3bBKfncJSw0BedT5BmrufOi-w4.roa
File: n3bBKfncJSw0BedT5BmrufOi-w4.roa (raw, json)
Hash identifier: payevUddDm69dVPoygf/tnvW3ppO/jdm5/2U7r6MPRg=
Subject key identifier: 9F:76:C1:29:F9:DC:25:2C:34:05:E7:53:E4:19:AB:B9:F3:A2:FB:0E
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 0194236A097BD9A90AA91A07812946E7D288
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/n3bBKfncJSw0BedT5BmrufOi-w4.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 192.76.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:09:7b:d9:a9:0a:a9:1a:07:81:29:46:e7:d2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f76c129f9dc252c3405e753e419abb9f3a2fb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:41:0b:7f:8b:74:79:94:2b:61:ec:9a:e3:
a5:24:4c:5a:bf:37:ae:9d:b9:6b:cf:88:73:7b:1d:
79:cf:05:f3:d2:1e:97:ac:c5:77:fa:a2:b0:7a:78:
0a:ac:74:ba:c0:26:b5:83:d1:72:5f:54:1d:af:cf:
ea:4a:e1:a2:33:66:d9:38:e5:5d:ff:41:79:b7:7f:
a4:c5:92:6b:b9:eb:40:5a:25:f9:ac:c9:95:20:5c:
e4:77:22:15:74:6f:7b:d5:6f:de:88:58:be:f9:4e:
49:e9:aa:d2:63:00:71:e2:e8:d9:53:85:c8:c7:3a:
51:df:5c:07:e3:9a:ae:06:ba:3a:2c:2a:6d:51:2c:
fd:9b:a4:ad:93:08:ac:7b:27:44:bf:5d:1d:39:e1:
8e:c4:d8:27:b2:a0:b6:c3:7a:c5:80:de:9c:62:29:
3c:62:14:2f:11:88:33:47:34:29:6d:54:e9:88:d4:
ff:62:ce:5a:ab:0b:3a:bd:bb:ac:8b:e4:53:7b:27:
92:b4:88:9f:8e:c0:4f:fd:4c:cf:c8:9f:c8:d3:c9:
7b:59:3a:bb:a0:72:b3:6e:fd:c9:04:43:a4:c8:fa:
eb:db:c3:da:ac:27:82:07:c6:2f:17:1b:e1:e7:b7:
34:92:16:82:66:a6:7b:04:06:b8:d0:b7:65:40:87:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:76:C1:29:F9:DC:25:2C:34:05:E7:53:E4:19:AB:B9:F3:A2:FB:0E
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/n3bBKfncJSw0BedT5BmrufOi-w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.76.154.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d1:2f:ce:de:77:d2:49:50:28:00:d4:96:e6:01:34:0f:a5:
3d:14:ae:ce:b5:4d:20:f0:7c:b6:03:a2:1b:2c:89:82:a2:e3:
7a:8f:51:f9:e9:98:91:44:14:2e:39:15:31:64:10:81:a5:cc:
83:53:64:64:b6:6c:dc:51:87:e4:eb:f0:d0:68:45:ab:19:e5:
4c:8a:9f:28:59:26:24:67:53:29:2d:b2:7e:1d:17:89:47:34:
5f:e6:73:f1:e7:ed:94:ea:67:ba:b4:25:8d:8c:26:79:74:95:
2e:88:14:cc:6a:f0:ea:93:3e:7c:5f:60:8d:1f:39:ec:88:72:
15:c2:45:57:88:61:33:14:70:02:ae:ae:c5:82:1c:74:48:1c:
ac:97:49:c5:dd:19:87:b3:4e:ca:0d:70:9d:d5:d0:88:59:a5:
45:69:8d:a0:d4:16:24:3e:49:df:eb:61:68:17:18:21:18:ea:
72:0b:d5:33:d3:63:74:52:f2:17:0e:c7:c3:49:c3:c8:1d:cd:
08:c7:dc:a4:ec:79:22:1c:45:5a:ce:9e:2e:d3:44:14:58:f0:
c8:7f:cb:44:19:ae:f5:a4:d8:7f:56:84:65:bd:0d:1b:71:1a:
ce:7d:7b:53:51:fa:98:b9:4f:c4:5c:e9:31:b8:b2:54:19:0f:
c6:f2:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:24:56 2025 by rpki-client