Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nA8oOjCDHjrni4z0N4byCGk1W1Q.roa
File: nA8oOjCDHjrni4z0N4byCGk1W1Q.roa (raw, json)
Hash identifier: vjHnVoUdLBLdjIfXE05A/kGFcrnXeEmZw3o9biaMVe8=
Subject key identifier: 9C:0F:28:3A:30:83:1E:3A:E7:8B:8C:F4:37:86:F2:08:69:35:5B:54
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427488430B5FCEE707D6BBED7583C1FDB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nA8oOjCDHjrni4z0N4byCGk1W1Q.roa
Signing time: Thu 02 Jan 2025 13:50:51 +0000
ROA not before: Thu 02 Jan 2025 13:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213923
IP address blocks: 193.183.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:84:30:b5:fc:ee:70:7d:6b:be:d7:58:3c:1f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c0f283a30831e3ae78b8cf43786f20869355b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:06:a3:10:18:a9:3c:da:f0:36:74:86:aa:ec:
d1:02:fc:26:f0:41:db:17:dd:21:76:04:e6:e2:ed:
84:43:62:64:ff:47:67:11:ef:4c:77:31:53:d8:00:
fd:ad:06:54:ab:b2:8d:93:24:2e:28:7c:64:f7:fc:
81:ee:13:5d:4c:8a:99:e6:43:e2:6e:9f:5e:64:df:
1c:57:53:e5:c4:ae:08:ff:ed:58:e5:36:10:3f:76:
6f:66:0e:d8:31:6f:22:f6:44:ee:08:ac:fa:b7:f3:
d8:66:fb:cd:ff:e5:20:9f:aa:fb:9e:04:29:2e:b6:
1a:fb:91:d5:93:79:df:4f:8d:d3:61:b5:34:86:ba:
68:fa:72:b7:02:f3:bd:c6:56:e8:35:69:91:d0:e1:
7b:8f:ca:76:87:47:1a:94:97:ce:34:7a:11:81:6a:
8a:f8:95:3f:db:bd:c0:d8:c5:f1:65:0d:8e:c8:9d:
2f:4e:d6:ed:14:44:db:38:c9:f8:12:f0:82:73:4f:
ba:52:b9:8a:28:02:f6:6d:2f:42:01:cb:7e:73:60:
b3:12:8f:6e:aa:e8:63:85:49:e5:29:9c:1f:fb:45:
66:bc:1c:b0:4b:5d:0c:eb:b2:1d:ca:7a:9d:e7:4f:
45:f7:f7:f2:34:d8:33:1c:56:9e:a9:f8:b5:78:01:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0F:28:3A:30:83:1E:3A:E7:8B:8C:F4:37:86:F2:08:69:35:5B:54
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nA8oOjCDHjrni4z0N4byCGk1W1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.71.0/24
Signature Algorithm: sha256WithRSAEncryption
63:30:59:cc:b7:c4:c8:d5:cc:f2:2f:5f:77:92:d1:82:08:26:
ed:aa:68:a2:5a:f3:02:3d:6d:f9:dd:86:b9:77:4f:f6:1d:59:
40:a5:89:31:f3:25:47:f5:1b:9e:75:1a:ff:6d:7f:65:5a:b5:
46:0a:25:59:13:ce:63:58:fd:db:0f:08:6c:56:55:a0:d5:b4:
af:fc:9d:6d:49:1f:0e:a9:c6:4f:df:0f:2d:01:cb:88:01:2a:
fd:9b:cc:70:3c:b6:56:75:03:00:58:f3:15:cc:1b:07:aa:92:
3c:f6:21:73:4b:f8:10:f6:4b:e4:af:ad:23:e9:71:2c:3c:45:
8e:ae:26:86:cd:4a:6e:74:b6:8d:f2:de:c1:0c:dc:cd:94:e9:
fe:67:18:1b:8e:56:4f:82:95:fb:f8:31:29:f6:36:05:a5:09:
a2:df:af:40:29:df:3c:b5:23:b7:46:16:f1:fa:b6:28:f2:9a:
f3:c4:a4:37:b1:cd:3d:65:4b:60:61:e1:c6:93:21:35:bf:c1:
6a:ff:57:7e:1b:02:3e:b3:08:67:48:25:fc:87:27:78:97:0c:
0f:bd:0f:41:fb:3b:27:57:45:fa:36:9c:14:2f:e9:d5:98:1d:
8f:a2:20:1e:a2:27:33:13:46:7c:5f:1f:e1:d6:35:d0:61:5d:
4f:52:23:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:31 2025 by rpki-client