Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/NbSoMWFGWBCHoJlGwWivjFTCFBY.roa
File: NbSoMWFGWBCHoJlGwWivjFTCFBY.roa (raw, json)
Hash identifier: k5rJPB0kkBNvDa1kkQgwmYoySN8P077TC//BMQ29qA0=
Subject key identifier: 35:B4:A8:31:61:46:58:10:87:A0:99:46:C1:68:AF:8C:54:C2:14:16
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01969FCBB969D242BA5F213ACFAD570757D3
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/NbSoMWFGWBCHoJlGwWivjFTCFBY.roa
Signing time: Mon 05 May 2025 09:34:10 +0000
ROA not before: Mon 05 May 2025 09:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212520
IP address blocks: 217.154.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:cb:b9:69:d2:42:ba:5f:21:3a:cf:ad:57:07:57:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: May 5 09:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35b4a8316146581087a09946c168af8c54c21416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:c0:73:06:40:8a:a6:11:54:fb:fa:41:b4:
4f:b9:17:66:09:ce:f9:d4:ac:a4:d0:1b:13:ad:bd:
13:a7:e7:85:96:3d:a0:9d:80:d0:17:f0:90:69:29:
19:66:2c:2c:8c:30:23:22:c2:8c:62:cf:f7:1e:e6:
a7:5e:fb:cb:74:30:23:f7:ad:ad:30:35:af:ed:49:
52:37:d6:3b:bf:9f:a4:3e:bd:08:b5:cd:5e:3e:d4:
b9:05:cb:59:61:e3:71:7b:d6:d3:16:aa:07:96:0c:
07:02:dd:5f:12:a5:bb:6b:16:92:d6:78:7b:cc:03:
ab:19:c9:32:fb:25:c0:18:1d:1a:ea:49:2d:a8:d4:
cf:ce:a5:ac:f6:c2:be:ea:cc:c4:df:b0:6c:4e:f6:
fb:77:ee:b4:1c:d6:95:7f:11:bc:16:5e:de:c8:ad:
d1:3b:02:45:0c:1e:4c:f3:0d:3e:d8:88:96:18:7f:
fc:67:61:dc:9e:5b:dc:ea:2c:4d:56:e8:77:91:a3:
56:98:cc:08:e8:e6:3a:e9:97:e4:af:22:5a:04:b9:
51:6c:7d:e2:fd:b0:55:92:a3:ec:cb:d6:3e:dc:27:
d6:7d:f4:9c:a8:c0:05:c3:88:13:8e:d6:af:7c:5e:
32:60:13:25:c6:43:22:af:7c:c9:2b:aa:85:75:1e:
b7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B4:A8:31:61:46:58:10:87:A0:99:46:C1:68:AF:8C:54:C2:14:16
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/NbSoMWFGWBCHoJlGwWivjFTCFBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.154.247.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4d:30:8c:24:18:28:c5:84:39:bf:31:e4:5f:c0:2b:91:b0:
3a:c0:47:9b:53:8d:ab:19:c8:78:88:9e:79:f4:df:38:3e:4e:
3e:2d:94:1e:f9:5d:62:2c:7f:65:a6:ec:70:27:b0:dc:21:4a:
9b:22:2a:8a:a8:c9:02:87:26:d9:cb:6b:16:6a:73:c0:0d:05:
f8:86:8f:ab:9c:64:de:30:06:8e:34:32:b0:9c:0c:b4:b6:41:
21:67:c8:ee:a8:b8:e0:1b:ba:0b:21:6d:f7:ff:f9:b8:ac:6a:
ae:af:ae:33:4f:51:30:56:b6:4b:45:a5:8a:bb:e2:46:d0:12:
88:2a:55:ee:e4:56:2a:c1:6f:20:e0:3b:86:82:3a:2d:ec:b2:
51:70:3e:cd:d5:74:f1:91:14:b6:f3:83:50:b4:f9:c7:0a:25:
39:16:ba:db:59:5b:a3:a1:11:ad:8c:9a:c2:8f:25:66:e9:15:
67:f9:62:de:d3:d9:50:e0:78:1e:04:e8:21:f1:6f:92:f2:4b:
c8:2d:96:34:b8:14:16:30:e8:c5:35:5f:d4:61:a1:ec:4c:c9:
a6:83:d0:98:39:72:b8:04:70:05:76:4f:d3:a0:a2:68:d4:18:
48:92:dc:16:ce:72:05:c7:a8:22:bc:aa:44:c3:3c:c3:0c:5e:
13:6a:50:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:41:02 2025 by rpki-client