Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/Nnh8TxyMB33fgGngdO7IhueAOsU.roa
File: Nnh8TxyMB33fgGngdO7IhueAOsU.roa (raw, json)
Hash identifier: R28y5tSNBK4A6wEp0RdvkAdrsGgoMExqmSzBUnD9C9E=
Subject key identifier: 36:78:7C:4F:1C:8C:07:7D:DF:80:69:E0:74:EE:C8:86:E7:80:3A:C5
Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial: 019420D633BD2C05DEE20659CA2940B8B2F2
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/Nnh8TxyMB33fgGngdO7IhueAOsU.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200533
IP address blocks: 2001:67c:21bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:33:bd:2c:05:de:e2:06:59:ca:29:40:b8:b2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36787c4f1c8c077ddf8069e074eec886e7803ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:88:1f:0b:0e:54:df:b1:63:ad:93:06:9a:
82:79:77:3e:0d:19:00:76:9d:c8:2b:3a:57:a9:ec:
3e:21:dd:d5:b2:58:71:97:7f:16:1f:e0:81:06:d8:
22:14:2f:a7:27:36:48:9c:de:36:59:a4:8a:d3:7f:
bc:1f:0b:0a:5c:bf:43:89:2e:90:b3:89:56:04:fa:
fe:4a:47:b5:bf:f2:03:8d:ab:69:c1:25:23:b2:ab:
52:21:f2:1f:17:2f:70:f3:5c:a0:2c:5f:4b:bd:95:
d5:19:2d:24:c9:ec:5f:42:ae:46:3f:c7:b8:c0:73:
62:97:e6:87:cc:19:5e:df:e1:e2:1e:50:3c:9d:00:
f8:f2:bd:1a:7a:d9:51:4a:ef:f4:c2:b6:32:7e:24:
9f:a3:11:33:30:b0:1c:0f:80:ca:6f:8e:45:70:cf:
85:d0:32:49:79:3b:d0:9a:cd:2e:9e:86:47:24:48:
cd:e7:9e:7a:29:b7:e6:b4:e7:5c:6a:26:48:80:c2:
77:1d:67:80:49:b5:c5:27:d5:c3:56:93:43:bc:ac:
57:0c:3c:6c:68:9e:6b:85:a2:9a:8b:e8:ce:a7:87:
d0:00:04:ca:a9:c2:89:ae:a7:5f:e7:e9:13:9c:e2:
9b:b5:d7:d4:61:ca:f0:8f:60:60:68:6f:21:af:bc:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:78:7C:4F:1C:8C:07:7D:DF:80:69:E0:74:EE:C8:86:E7:80:3A:C5
X509v3 Authority Key Identifier:
keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/Nnh8TxyMB33fgGngdO7IhueAOsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:21bc::/48
Signature Algorithm: sha256WithRSAEncryption
5c:ab:19:ce:3b:7e:8c:df:13:ef:fb:c5:4c:da:75:b7:d2:b4:
7e:8e:e9:48:db:87:26:46:40:a6:46:9e:42:51:57:fc:aa:9b:
e0:29:d6:22:e3:fc:93:cc:5a:64:c8:10:e9:a2:c2:a9:61:3f:
cb:e6:07:73:f8:63:6b:b9:a1:7f:8c:b0:3d:dc:57:d4:ad:04:
a6:90:b9:ee:21:9e:52:83:81:7a:c8:43:5d:d2:1c:b7:23:a5:
d6:6a:54:33:16:6d:d5:ca:fb:74:a8:f1:32:fb:b9:f8:35:fe:
7e:14:9e:f3:48:c2:3a:29:57:8c:4b:20:e4:69:80:c1:d8:a8:
fc:e9:f3:48:fb:3c:4d:7f:92:c8:3f:91:c7:87:dc:09:c5:53:
0c:a7:69:8a:95:d9:2d:02:15:b4:29:d4:b1:3a:b0:46:ca:24:
f3:7b:60:54:e2:a4:b1:ea:55:d0:a4:5a:3e:74:6d:fd:5d:4b:
50:42:f7:c9:07:e4:1a:be:12:48:82:c4:10:90:5e:91:77:90:
ed:0a:79:ef:11:8d:36:d6:80:b8:9d:c7:1e:50:37:c6:3e:42:
44:94:61:9f:95:9d:7d:7b:90:b6:3c:54:e9:f0:79:7b:34:40:
13:91:21:1a:0b:a3:f8:46:4f:51:88:0f:1d:b3:37:a8:c0:03:
c7:0f:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:18:38 2025 by rpki-client