Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/nMhyX7boXa--DjLfLdE1CijBszU.roa
File: nMhyX7boXa--DjLfLdE1CijBszU.roa (raw, json)
Hash identifier: s95e1FJb6EuRsUkazwo7HJhOqZW3W1mabgyeLhjUIIo=
Subject key identifier: 9C:C8:72:5F:B6:E8:5D:AF:BE:0E:32:DF:2D:D1:35:0A:28:C1:B3:35
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01942748930ACEC2154A40B72C75A848287C
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/nMhyX7boXa--DjLfLdE1CijBszU.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 80.93.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:93:0a:ce:c2:15:4a:40:b7:2c:75:a8:48:28:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cc8725fb6e85dafbe0e32df2dd1350a28c1b335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:92:b2:e6:be:6c:04:8d:64:e9:47:aa:6d:
07:14:a3:67:9d:b0:60:49:94:a5:92:f3:b6:ba:1c:
43:ca:4f:ec:50:fb:ca:5b:33:2f:82:2b:a5:58:54:
8f:d0:3c:79:96:8f:bc:78:40:a8:30:94:24:b8:9b:
92:a0:e8:ae:0f:ec:44:83:b0:92:7c:9e:0b:92:62:
a8:14:5b:0c:37:54:32:a2:38:47:b9:76:16:cf:6b:
95:14:ef:58:63:4f:a7:43:88:e4:cc:4f:8a:f9:79:
6e:d2:91:64:be:43:e5:68:92:09:2f:ed:f2:b7:ef:
13:7a:cb:fc:a2:a6:cc:b4:d0:f7:90:f6:a0:dd:b6:
a2:c3:3c:06:e9:ef:84:60:1b:b3:3e:52:57:5b:d6:
30:cf:a0:08:1c:b4:1a:7e:de:35:63:05:a1:c2:3d:
97:ca:8a:8a:fa:21:f9:c5:f7:e1:84:7d:4f:a6:d3:
e8:5e:61:bd:2c:a8:38:d4:b7:13:29:2e:74:fe:b3:
f9:04:c9:8b:7b:ea:ef:0a:c5:57:86:a3:b0:ac:22:
d4:c1:bd:d4:08:ce:77:f6:3b:0c:fb:ab:26:18:bf:
2a:ce:30:c3:9d:47:1a:64:cf:3e:37:f2:c7:78:8c:
32:47:7e:f5:1a:14:fd:0e:70:04:b0:27:7d:96:ab:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C8:72:5F:B6:E8:5D:AF:BE:0E:32:DF:2D:D1:35:0A:28:C1:B3:35
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/nMhyX7boXa--DjLfLdE1CijBszU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.206.0/24
Signature Algorithm: sha256WithRSAEncryption
08:89:2b:6b:c9:96:fd:e8:4a:76:dd:f0:3f:05:89:fa:24:ca:
57:5f:da:6c:b4:d2:0a:ce:e0:81:cf:14:ef:5e:48:bb:ff:e7:
b7:d3:44:2b:ea:be:24:99:48:aa:ff:b9:31:6c:41:0a:2c:0c:
46:b1:21:0c:d4:6d:4d:82:63:f7:b9:af:22:4a:ca:9c:53:5f:
21:b1:20:45:c1:b5:02:db:54:9d:43:94:c0:51:18:79:57:b3:
92:a5:a6:52:e3:5e:4b:b4:a7:cb:29:b7:f9:48:d2:4f:4d:20:
aa:95:47:35:d7:6b:fd:94:0a:a8:ac:80:f1:53:81:70:60:f5:
e7:03:b5:32:d9:63:e6:c6:f6:d9:6f:1d:cf:77:4a:9c:ad:06:
5f:3e:e5:43:c2:ff:eb:8d:a1:be:c5:33:7b:ac:b1:9e:f3:f5:
a1:8e:8a:e1:38:9e:1f:0f:88:d8:61:e8:87:8c:6d:e5:50:af:
62:57:a7:46:4d:ce:e6:dc:b3:ba:0f:34:ac:14:6b:99:85:bd:
6e:55:4a:f0:75:c9:6d:97:3c:e7:6e:94:8c:c3:7d:4e:25:6f:
41:87:05:58:17:49:fb:52:18:da:00:8c:d0:61:55:9c:f3:a6:
d4:9d:bf:7e:52:fa:dd:de:1e:ba:66:ec:d8:28:96:30:94:66:
c6:f2:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:00:20 2025 by rpki-client