Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/nJ3bZDTF3klediLdsGzrGEizejI.roa
File: nJ3bZDTF3klediLdsGzrGEizejI.roa (raw, json)
Hash identifier: XOv5pl5Y0ikBc3XP047Nh+8GGnppEmfe5vg+dWr14YI=
Subject key identifier: 9C:9D:DB:64:34:C5:DE:49:5E:76:22:DD:B0:6C:EB:18:48:B3:7A:32
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 019424B3C666B4808292EE1B62015342FF6D
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/nJ3bZDTF3klediLdsGzrGEizejI.roa
Signing time: Thu 02 Jan 2025 01:49:08 +0000
ROA not before: Thu 02 Jan 2025 01:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62343
IP address blocks: 94.139.36.0/23 maxlen: 24
2a13:ac40::/29 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c6:66:b4:80:82:92:ee:1b:62:01:53:42:ff:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c9ddb6434c5de495e7622ddb06ceb1848b37a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:97:91:37:aa:c8:3c:9d:fd:cf:c0:90:48:8c:
d4:7c:8a:48:fe:92:69:31:c1:a7:58:77:6c:23:64:
13:ae:2d:8b:e0:9b:c1:de:34:6e:da:0b:15:01:a8:
01:4a:bd:c3:a3:ae:91:c0:cd:a9:4d:21:b3:45:f9:
59:a7:0c:64:d3:6d:34:b3:82:a3:3d:26:bf:2b:a2:
d0:87:6b:9b:74:ce:25:c4:5b:da:68:a3:e8:76:89:
b7:6f:9e:38:dc:bc:be:bc:c4:56:11:e0:f3:69:f9:
53:3f:e2:e7:63:31:d2:71:df:1b:12:44:ae:d2:a3:
34:b6:22:0a:e1:65:62:43:f1:9b:4e:06:29:75:30:
db:8b:c5:31:9c:b4:e2:b9:e1:66:04:2e:c8:5a:a3:
95:d6:5f:4c:a8:ba:70:bf:21:b8:8b:79:72:9b:93:
e1:43:51:b5:a0:30:c1:a6:3a:7a:4e:87:e3:03:36:
b9:f4:61:32:03:b0:6b:54:d7:8c:12:d7:3f:6a:4a:
1d:d6:ef:92:ac:0a:17:f0:88:ca:d5:a0:bb:73:64:
7a:4d:5b:19:72:34:c3:44:01:0a:1e:3f:75:0e:b7:
9e:56:f8:3b:c9:97:7c:7d:9c:ae:e1:a2:1f:ec:46:
cc:e7:5d:d3:36:11:06:41:4f:b7:97:a6:da:1a:f2:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9D:DB:64:34:C5:DE:49:5E:76:22:DD:B0:6C:EB:18:48:B3:7A:32
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/nJ3bZDTF3klediLdsGzrGEizejI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.36.0/23
IPv6:
2a13:ac40::/29
Signature Algorithm: sha256WithRSAEncryption
8e:c3:08:e9:bf:19:10:07:9c:08:3a:57:f6:d8:d5:cc:03:25:
de:eb:ed:27:e2:41:b6:ad:d1:36:19:67:33:68:76:de:e9:d6:
42:1d:26:7a:c9:24:83:bb:f7:b3:74:e5:bd:b7:41:39:eb:c9:
09:2c:7a:82:10:05:af:dc:22:fd:d6:1a:2c:3b:19:6a:91:39:
78:9a:35:fa:e5:e0:5b:66:6e:81:9b:f2:a8:6e:e9:d6:55:33:
39:97:2b:1d:89:01:24:bd:54:ef:2d:c3:2a:d2:a5:89:f9:4f:
ca:ed:d7:39:e5:a8:b8:db:3c:0e:60:da:8d:9c:cb:26:5b:9c:
39:94:cc:4b:b9:98:98:4c:21:dd:73:d7:a2:a7:9d:db:e8:35:
17:b5:85:0d:57:d1:e7:39:6f:9c:e7:c5:d4:2c:12:4c:02:60:
ff:4c:a9:d1:b2:e9:f2:f4:4b:43:d0:d9:79:e0:fb:8f:7c:a9:
9a:ae:58:20:17:9d:ff:b3:a5:26:f4:86:9a:3e:97:e4:c5:18:
de:19:22:76:0d:79:0d:cc:21:31:ab:9c:86:0e:18:4b:ea:67:
01:89:45:ff:e9:a3:4e:71:7a:10:f5:e8:d0:74:53:24:76:6f:
f6:ec:8f:6c:1a:cb:0f:ca:ad:d4:6d:1f:71:c4:a9:28:2d:8b:
69:31:2c:5d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQks8ZmtICCku4bYgFTQv9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMGJmNDYzMDNmZjU0YTUwNWY1MzNjNTU0MjUxOTIzZTQx
ZjU5MjYwHhcNMjUwMTAyMDE0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzlkZGI2NDM0YzVkZTQ5NWU3NjIyZGRiMDZjZWIxODQ4YjM3YTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpeRN6rIPJ39z8CQSIzUfIpI/pJp
McGnWHdsI2QTri2L4JvB3jRu2gsVAagBSr3Do66RwM2pTSGzRflZpwxk0200s4Kj
PSa/K6LQh2ubdM4lxFvaaKPodom3b5443Ly+vMRWEeDzaflTP+LnYzHScd8bEkSu
0qM0tiIK4WViQ/GbTgYpdTDbi8UxnLTiueFmBC7IWqOV1l9MqLpwvyG4i3lym5Ph
Q1G1oDDBpjp6TofjAza59GEyA7BrVNeMEtc/akod1u+SrAoX8IjK1aC7c2R6TVsZ
cjTDRAEKHj91DreeVvg7yZd8fZyu4aIf7EbM513TNhEGQU+3l6baGvK+/QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJyd22Q0xd5JXnYi3bBs6xhIs3oyMB8GA1UdIwQY
MBaAFPIL9GMD/1SlBfUzxVQlGSPkH1kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTct
YzM2OTQwODhmMzRhLzEvbkozYlpEVEYza2xlZGlMZHNHenJHRWl6ZWpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTctYzM2OTQwODhmMzRh
LzEvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBXoskMA0E
AgACMAcDBQMqE6xAMA0GCSqGSIb3DQEBCwUAA4IBAQCOwwjpvxkQB5wIOlf22NXM
AyXe6+0n4kG2rdE2GWczaHbe6dZCHSZ6ySSDu/ezdOW9t0E568kJLHqCEAWv3CL9
1hosOxlqkTl4mjX65eBbZm6Bm/KobunWVTM5lysdiQEkvVTvLcMq0qWJ+U/K7dc5
5ai42zwOYNqNnMsmW5w5lMxLuZiYTCHdc9eip53b6DUXtYUNV9HnOW+c58XULBJM
AmD/TKnRsuny9EtD0Nl54PuPfKmarlggF53/s6Um9IaaPpfkxRjeGSJ2DXkNzCEx
q5yGDhhL6mcBiUX/6aNOcXoQ9ejQdFMkdm/27I9sGssPyq3UbR9xxKkoLYtpMSxd
-----END CERTIFICATE-----
Generated at Mon Apr 14 02:41:38 2025 by rpki-client