Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa
File: 8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa (raw, json)
Hash identifier: /wW2Zq1BGMLL48zxl/CKfKIe0NCGNYrdHYCS8/4pGYw=
Subject key identifier: F0:DA:13:BB:7A:BC:22:37:32:15:E4:88:79:D6:78:22:18:FE:34:35
Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial: 019428259F0354B6CAF8B7EB4CB37906F2CF
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa
Signing time: Thu 02 Jan 2025 17:52:21 +0000
ROA not before: Thu 02 Jan 2025 17:52:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36998
IP address blocks: 151.248.99.240/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 21:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:9f:03:54:b6:ca:f8:b7:eb:4c:b3:79:06:f2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Validity
Not Before: Jan 2 17:52:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0da13bb7abc22373215e48879d6782218fe3435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c8:21:03:a0:9b:48:15:48:cc:6f:bb:86:b1:
c7:e5:a5:92:8a:cc:47:b4:a6:f5:3d:a4:88:b3:70:
5c:82:e6:f3:7f:4b:7f:44:5a:b5:c9:fd:d8:8e:47:
1a:ed:27:26:46:a8:90:23:c3:c5:27:b6:8e:95:de:
d4:a0:e5:71:5e:77:86:7d:63:21:82:36:a9:1e:19:
38:04:8f:e6:1d:00:00:99:16:e3:68:76:1d:48:14:
8d:b2:a7:28:57:e3:5b:59:6a:7c:25:82:40:35:8c:
dd:a6:64:de:61:06:d3:fe:42:b8:ff:3f:ba:91:94:
db:e3:6b:93:06:84:1b:08:cb:ff:8f:ec:a7:6d:da:
1f:0b:bd:44:2e:c5:5d:bd:3b:78:24:c1:1c:9d:f1:
20:3e:5a:b2:2c:5a:3f:52:6b:78:50:bd:78:24:8a:
60:27:58:2d:10:4f:30:03:cc:7e:50:d6:d3:65:df:
07:51:a5:7e:d6:7f:e6:ca:a6:55:33:77:31:c7:38:
4c:65:fb:24:5b:a9:2e:b1:a1:0f:51:4d:ea:3d:89:
e1:00:89:d5:c3:37:93:6e:f3:ba:76:a4:6f:5c:e8:
82:6a:e2:c8:42:0f:45:a2:d2:f4:2c:fa:8b:c2:f4:
4a:e5:b4:25:3b:98:0a:72:b8:bf:17:0b:d4:cc:d0:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DA:13:BB:7A:BC:22:37:32:15:E4:88:79:D6:78:22:18:FE:34:35
X509v3 Authority Key Identifier:
keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.99.240/29
Signature Algorithm: sha256WithRSAEncryption
a6:8c:56:c4:a0:69:97:a2:2c:fa:fe:1a:44:0a:74:92:c8:b0:
b1:63:65:b1:22:48:1c:55:fb:6a:10:c0:01:4c:ec:51:79:ed:
71:74:24:35:d6:cf:c7:91:ff:76:61:4d:bc:7d:f0:e8:d9:58:
4a:4a:45:44:d7:ac:9e:6a:75:5d:e8:5b:3c:8f:b8:19:c6:44:
23:3a:76:46:29:de:a5:ea:9a:56:aa:53:92:00:04:60:f2:3b:
b5:da:da:0b:75:71:17:92:5d:a0:83:0c:95:c3:67:03:ff:ea:
4a:7f:ae:a2:a7:f9:d8:2e:ee:33:e2:1b:03:66:ce:10:96:a7:
e4:a8:2a:59:3f:07:1d:c7:d7:7f:66:fa:bc:af:f4:c4:0d:62:
ac:49:46:31:97:99:64:0b:4e:bc:74:e9:54:75:5a:e2:a1:98:
94:0e:30:05:c2:eb:ae:e1:76:96:fa:75:f5:94:04:e4:e0:68:
b4:d7:f3:2a:6c:0a:e2:06:24:59:29:66:34:f2:5a:e4:be:5c:
fa:cb:9a:b4:d8:24:80:35:dc:82:07:1e:9e:f6:d9:89:6a:95:
22:0a:e8:18:75:64:af:05:cf:70:3a:7d:28:70:61:91:1d:7b:
fe:7c:b6:5f:ec:d2:07:13:95:89:a0:db:ba:2c:56:6d:f7:cd:
d8:93:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:29:51 2025 by rpki-client