Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/nIzC6awjA7_y1vLiscg-NRhvbds.roa
File: nIzC6awjA7_y1vLiscg-NRhvbds.roa (raw, json)
Hash identifier: 6T78Tu5by6VMvsB9uTgSy1rBgEymtWKPvocz26uGATU=
Subject key identifier: 9C:8C:C2:E9:AC:23:03:BF:F2:D6:F2:E2:B1:C8:3E:35:18:6F:6D:DB
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FBA670CEA783D1183C16A3E49031F7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/nIzC6awjA7_y1vLiscg-NRhvbds.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400529
IP address blocks: 88.209.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a6:70:ce:a7:83:d1:18:3c:16:a3:e4:90:31:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c8cc2e9ac2303bff2d6f2e2b1c83e35186f6ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:68:48:3f:9e:72:ff:4b:30:32:6f:1c:f8:
1c:37:b0:0a:2c:08:c5:ad:75:58:f8:47:10:e4:97:
0f:4a:32:39:66:75:94:91:fb:92:a0:9f:da:4c:9d:
5b:62:8e:b8:f9:a4:1a:62:97:44:5c:89:27:88:2d:
9c:2d:95:3d:ee:83:bc:d3:6a:3f:e2:df:7b:df:7d:
03:9e:ae:71:36:92:19:db:6a:d7:55:9b:28:51:59:
15:2c:19:c2:f9:db:c7:e7:c9:96:5e:34:44:8e:0d:
52:72:60:cb:db:f3:a1:c2:c9:8e:39:2e:10:c1:49:
ac:93:62:58:c1:d3:d0:97:e8:95:ec:9b:31:13:12:
cd:92:88:2d:79:d7:c4:c9:55:91:ef:d8:f8:f7:7b:
0a:66:8c:6d:47:a2:6b:a4:a3:94:af:84:ff:0a:fc:
e2:b3:07:69:49:96:59:de:20:4f:79:82:4a:28:cb:
20:ae:16:71:d3:49:0f:8e:bb:73:34:bd:ae:6b:ec:
39:9a:12:f8:e8:f5:16:31:c0:0a:b5:9a:00:90:ae:
3f:98:12:ae:25:d2:66:82:70:e9:d3:a2:87:f1:a4:
3a:ab:10:36:72:54:ac:70:ac:15:ad:89:87:a4:b7:
6a:6c:74:6a:78:0d:d3:7c:3f:7b:98:03:88:ae:e6:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8C:C2:E9:AC:23:03:BF:F2:D6:F2:E2:B1:C8:3E:35:18:6F:6D:DB
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/nIzC6awjA7_y1vLiscg-NRhvbds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.197.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ea:3e:a0:07:bb:6f:7f:d8:58:19:58:13:3e:34:ed:76:cf:
ff:c3:97:0c:4c:1b:d7:dc:d6:bc:91:68:dc:8e:28:7c:f8:80:
ee:09:78:4f:79:83:45:ef:9c:12:6a:b3:ff:e2:1c:39:fd:ac:
3a:ab:33:b3:b7:31:2e:9c:df:20:0f:a7:3c:a1:25:c7:ef:41:
70:e2:ac:a8:ce:c5:df:bd:67:42:4e:93:0c:13:56:47:eb:b8:
d0:d8:60:38:90:38:ce:b1:a6:a4:1d:dd:f7:dd:5f:4c:0f:ab:
35:03:da:df:cd:8d:57:37:8f:f4:d6:31:f6:72:de:b5:b1:28:
86:73:32:82:4c:f1:bf:46:5c:fd:f7:cf:e9:22:3c:ec:f1:73:
4d:9f:02:7e:5e:6c:63:34:79:7d:10:ac:94:cf:f1:0d:b5:f7:
65:24:4f:c6:05:6e:1f:a3:ba:38:6a:e2:65:ac:66:c9:ed:f6:
62:86:c0:b2:11:40:18:f2:f0:86:c4:01:fb:7a:15:6d:2f:11:
9a:55:b4:5f:c8:59:0b:e6:6c:aa:9f:84:3e:5f:6a:b5:fc:37:
34:80:e3:0c:af:11:fa:58:32:dd:85:30:46:91:50:b0:45:f4:
15:39:5e:68:4e:02:2c:43:b2:b5:93:9a:67:59:94:a8:f2:2e:
33:55:d0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:37 2025 by rpki-client