Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/nTd4bIF3AstpVRhiSm4cAFFzcp4.roa
File: nTd4bIF3AstpVRhiSm4cAFFzcp4.roa (raw, json)
Hash identifier: EbsIgVBCswm5gQE6qe88yTUQv3vjOsZ164x95mcDtzI=
Subject key identifier: 9D:37:78:6C:81:77:02:CB:69:55:18:62:4A:6E:1C:00:51:73:72:9E
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019677B93D29372D9D8822EB138572A0F8E7
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/nTd4bIF3AstpVRhiSm4cAFFzcp4.roa
Signing time: Sun 27 Apr 2025 14:49:10 +0000
ROA not before: Sun 27 Apr 2025 14:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47553
IP address blocks: 194.104.145.0/24 maxlen: 24
194.114.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:b9:3d:29:37:2d:9d:88:22:eb:13:85:72:a0:f8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Apr 27 14:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d37786c817702cb695518624a6e1c005173729e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:09:80:75:14:17:5b:22:58:32:86:e3:45:
fe:fe:52:e9:24:aa:8f:9a:19:d0:e0:6a:a4:57:fc:
11:dd:b1:67:87:36:98:dc:98:56:12:ec:5a:66:c6:
6e:4f:84:89:71:77:31:da:dd:41:d3:8c:a1:f4:2b:
25:78:cd:a7:65:9d:6d:a8:53:df:a4:e3:1a:eb:66:
03:9a:7d:29:82:9f:5a:81:42:91:f0:f3:b2:5a:ca:
3a:38:4f:b3:22:07:f9:be:29:ca:69:08:16:58:ac:
52:55:c7:f5:d8:db:a1:fe:c3:8f:1f:14:99:9b:ff:
a4:a8:6a:5a:f5:99:ea:e6:e8:e6:08:67:6e:b7:5c:
b6:ca:f5:a4:0e:a3:91:d2:55:cc:92:a3:ff:42:53:
2e:19:9a:c5:eb:0b:1a:3d:35:4a:4e:f5:63:d9:f4:
fb:7b:bf:5a:58:19:bd:4e:20:57:51:ee:f0:e6:31:
b0:79:f5:d3:0d:0d:f0:2b:59:7f:15:fd:90:12:3c:
41:81:f5:bb:3a:8a:9c:37:86:fc:39:c5:51:6f:a3:
53:7a:ce:73:90:49:0a:58:f3:93:67:3a:a3:38:cc:
5e:c3:d4:1f:62:3b:e3:5e:c7:63:a4:f8:c4:d2:30:
2c:15:94:5d:2c:12:e2:46:02:4f:19:a2:cb:6f:b2:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:37:78:6C:81:77:02:CB:69:55:18:62:4A:6E:1C:00:51:73:72:9E
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/nTd4bIF3AstpVRhiSm4cAFFzcp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.145.0/24
194.114.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:85:58:76:08:83:18:85:d6:b3:65:cf:c6:f8:9a:f8:f9:6a:
fb:0a:c0:fd:a6:35:fd:f9:97:23:79:95:6b:e0:d0:ab:bf:fc:
cf:5c:59:99:ec:d6:09:78:ac:c9:3e:a1:17:30:35:af:f3:83:
c9:72:bf:68:14:cb:f2:5d:76:d6:4a:47:a8:51:c9:b6:44:f6:
00:36:20:c4:68:d9:c9:61:01:f9:82:c0:e0:c3:c2:97:9f:ab:
26:9a:b5:da:90:51:2c:3a:f0:22:7c:13:ab:29:57:a8:fe:46:
91:8c:71:83:7f:6b:af:46:46:de:2d:9d:b9:eb:88:74:4d:0a:
11:70:85:6b:b1:af:d4:57:71:c1:18:4f:af:7d:31:07:0f:ac:
de:ee:e4:35:8a:09:ce:08:64:51:e9:72:4e:dd:6f:28:75:09:
6c:d5:fd:d3:cc:27:c0:95:63:8b:26:7b:21:71:ba:2c:41:9f:
5e:71:ea:72:ae:bd:91:98:dc:43:9d:a0:73:46:40:74:84:64:
8c:22:94:c4:a7:92:c8:a6:14:28:5c:ef:bb:4f:70:69:18:ed:
e0:9c:aa:0c:90:27:70:35:ae:b7:e3:3e:be:60:a6:60:2d:ef:
d5:4c:4e:12:28:b4:88:a1:7a:f2:2f:0a:de:c9:d1:86:f8:d0:
78:1c:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:34:30 2025 by rpki-client