Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nYCJ-KTjsjR4FcW0QdYIpCAFGg8.roa
File: nYCJ-KTjsjR4FcW0QdYIpCAFGg8.roa (raw, json)
Hash identifier: IMmCvdVPVUI2ThhQZfhRma1l4/Z0xUSgZfkqqaUAn+w=
Subject key identifier: 9D:80:89:F8:A4:E3:B2:34:78:15:C5:B4:41:D6:08:A4:20:05:1A:0F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274865B5FF9943EABEEC97201D3E517A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nYCJ-KTjsjR4FcW0QdYIpCAFGg8.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62313
IP address blocks: 192.165.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:65:b5:ff:99:43:ea:be:ec:97:20:1d:3e:51:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d8089f8a4e3b2347815c5b441d608a420051a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:1c:89:36:ff:0e:1d:89:7e:c8:be:ad:60:
53:64:dd:f6:f5:1a:c0:70:f3:a7:b9:7e:42:6b:e2:
5e:27:62:61:3a:6a:e9:be:77:4e:87:6e:a6:db:c8:
64:a6:e3:bb:05:89:c2:af:bc:b8:5d:10:04:19:38:
76:7b:18:33:50:f8:4a:c5:95:44:a3:c1:fc:2e:d5:
37:47:f5:42:b2:90:4e:01:70:43:92:fb:40:16:7d:
04:65:7f:65:0f:66:e2:ae:b6:14:5d:a4:09:ac:3e:
4c:b5:eb:86:9a:af:31:37:66:8a:ef:1e:15:1e:24:
a3:1e:2e:38:b6:34:56:03:0c:b7:50:90:09:29:0a:
90:bc:58:89:6c:ee:ac:51:04:79:93:53:aa:f8:e4:
ce:e6:0c:53:77:eb:cc:6a:3c:b3:e0:1d:05:e1:eb:
d9:cf:86:b6:00:da:f8:01:22:e0:95:dd:71:34:d9:
8b:7e:36:1b:91:fd:7e:c5:68:01:8a:f0:af:5c:34:
c7:6e:20:5b:46:23:eb:74:ee:54:c7:00:a1:c6:1d:
96:22:9e:99:79:6b:17:40:77:75:d1:4d:1c:fe:09:
44:ce:97:cd:b4:6a:a8:03:19:51:1e:ef:7f:0f:a3:
5f:15:ea:f5:9b:3b:95:a0:cb:98:b1:88:55:5c:09:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:80:89:F8:A4:E3:B2:34:78:15:C5:B4:41:D6:08:A4:20:05:1A:0F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nYCJ-KTjsjR4FcW0QdYIpCAFGg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.83.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:15:3d:32:2a:df:26:2c:f2:b7:d0:49:8f:cd:cf:fb:1d:14:
96:6f:09:1d:72:19:d0:dd:33:d8:ff:0e:8b:80:8b:da:09:36:
24:8f:82:4a:a7:fb:83:98:71:8b:32:bb:3f:14:fa:e1:e7:0b:
48:70:9a:4d:a6:b6:d8:c3:a7:35:9c:8c:d0:93:9a:cd:d5:e7:
b0:79:a9:ff:34:05:2e:41:4b:38:17:d7:39:72:6b:82:58:b1:
32:b1:0e:5a:ee:0e:b8:58:8a:28:d2:97:26:c6:57:35:05:7c:
2d:50:1d:a4:4b:2e:35:19:ce:01:8c:25:0c:43:60:19:81:76:
9a:c4:d0:11:ee:a9:1d:06:67:7e:f5:f0:9d:dc:db:65:89:9b:
6f:58:c8:8b:e7:21:db:b2:a2:99:7a:1d:4e:97:e5:84:0f:8d:
51:aa:13:a6:e6:f0:93:b0:75:ff:b7:e4:04:c6:3a:75:ad:87:
72:2c:f1:6e:61:6b:35:d8:ce:b0:3e:e8:a7:65:86:51:ef:ce:
62:00:a8:13:ab:7f:32:d4:02:b7:52:0c:f3:d0:da:fe:c7:82:
6c:63:fc:48:7f:f0:4d:72:c1:9e:91:9f:4e:4f:eb:14:88:1a:
53:5b:2b:43:fb:fc:52:3c:38:65:2d:b4:ac:97:63:be:74:88:
01:8b:e5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:59:50 2025 by rpki-client