Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/ne7qsdOlLQR8_nG6p7MVEAshtxk.roa
File: ne7qsdOlLQR8_nG6p7MVEAshtxk.roa (raw, json)
Hash identifier: b2CjvPaYoVbJ4qHUSs8bzU5L8lkSjdW1w+FExaBaHqU=
Subject key identifier: 9D:EE:EA:B1:D3:A5:2D:04:7C:FE:71:BA:A7:B3:15:10:0B:21:B7:19
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 019426D94582BAEDA0FE24A79A79446F13AB
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/ne7qsdOlLQR8_nG6p7MVEAshtxk.roa
Signing time: Thu 02 Jan 2025 11:49:20 +0000
ROA not before: Thu 02 Jan 2025 11:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 194.149.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:45:82:ba:ed:a0:fe:24:a7:9a:79:44:6f:13:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9deeeab1d3a52d047cfe71baa7b315100b21b719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:13:7e:63:e9:44:0a:e9:c6:8a:42:8c:41:
a2:c7:4f:be:01:e5:b7:87:97:88:4c:c0:1b:07:3e:
d6:5d:49:a2:a6:93:17:c6:55:3c:cc:36:fc:f2:e4:
15:20:98:9d:55:d6:8d:f5:65:82:30:42:d0:52:83:
b8:ca:ff:a4:4b:87:62:a8:97:1b:13:0e:ca:e5:31:
4d:89:05:b2:fc:92:ca:6d:9c:16:9a:1d:6d:f5:59:
e1:e0:97:ff:c7:db:97:24:22:3a:d4:b9:db:40:ec:
bb:3e:d4:6a:81:00:bc:f5:dc:e5:1d:48:93:69:77:
9c:72:90:6d:92:11:4a:77:6b:3a:1e:2d:0d:07:38:
95:7e:30:d3:f9:46:53:9d:2b:e7:0e:fc:63:62:c7:
95:5d:cf:86:fc:cb:5f:d9:80:10:49:05:23:dc:88:
f4:ec:98:3f:d5:2a:a2:a7:69:7e:38:2c:3a:28:08:
1a:c3:b0:b0:61:87:ef:78:fc:28:71:d6:02:63:44:
3c:ff:b1:cf:57:11:73:7f:81:ec:9a:63:ab:02:d9:
ff:9c:03:4b:94:a7:b4:0b:f5:22:37:74:c0:fd:ab:
9e:76:53:f6:3a:f7:5b:e9:c9:8c:05:43:d0:99:b4:
35:8e:13:c2:49:70:2f:0e:f2:14:e6:33:38:b3:c4:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EE:EA:B1:D3:A5:2D:04:7C:FE:71:BA:A7:B3:15:10:0B:21:B7:19
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/ne7qsdOlLQR8_nG6p7MVEAshtxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.160.0/19
Signature Algorithm: sha256WithRSAEncryption
62:9b:75:0d:7c:8d:9e:df:4b:37:53:28:15:79:97:24:aa:86:
c3:8a:3e:51:dc:1a:b0:33:be:f2:2c:e7:c6:60:ea:c1:39:c3:
42:d0:37:e6:a8:d7:55:0c:4e:eb:9d:f9:51:d2:49:3c:a2:27:
81:fe:3a:02:5b:cd:65:dd:de:29:6a:1e:b3:0f:0e:e8:ef:9a:
3f:e7:b4:8d:4a:66:06:1d:c9:ee:7b:56:61:6c:c8:dd:2a:12:
38:19:ba:59:ee:79:9e:78:92:07:ef:42:f5:70:7e:0e:9b:12:
bf:56:52:8a:3e:c1:54:ff:c5:07:9b:15:10:85:b3:6e:40:b7:
28:a8:a1:02:35:89:7e:e5:84:50:57:77:45:86:5e:0f:fd:52:
66:3f:1b:e7:7f:bf:a0:26:08:9b:37:3f:e5:9b:ac:e9:a5:30:
67:3a:d1:9b:74:28:f5:46:42:d1:20:cd:8b:e7:9d:64:99:ed:
b2:d4:ce:4c:75:fe:bd:c8:e4:33:6a:ba:62:88:31:f9:79:13:
76:38:f8:e3:33:03:fe:70:59:09:69:b1:f2:f3:89:f4:09:81:
94:d6:7f:5e:c9:7b:be:06:74:69:f2:24:a7:98:cb:7a:04:f4:
db:f7:3e:7c:3d:bf:80:5e:b1:66:2d:2b:61:6a:b2:5b:19:91:
0b:84:23:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:15 2025 by rpki-client