Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nHCx7BUnaHJ_9cA2Dy0SI_oGPAg.roa
File: nHCx7BUnaHJ_9cA2Dy0SI_oGPAg.roa (raw, json)
Hash identifier: KUtNDUTIStV6GDd2y4umU0Rc5l66MSHlMHWcmsv5cig=
Subject key identifier: 9C:70:B1:EC:15:27:68:72:7F:F5:C0:36:0F:2D:12:23:FA:06:3C:08
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196B6D3BA485ADD379538BAAFA8A9C0D871
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nHCx7BUnaHJ_9cA2Dy0SI_oGPAg.roa
Signing time: Fri 09 May 2025 20:54:11 +0000
ROA not before: Fri 09 May 2025 20:54:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214654
IP address blocks: 213.210.52.0/24 maxlen: 24
213.210.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d3:ba:48:5a:dd:37:95:38:ba:af:a8:a9:c0:d8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 9 20:54:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c70b1ec152768727ff5c0360f2d1223fa063c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:0b:0a:2b:a5:be:38:37:f3:31:ab:59:ba:
e4:7e:42:78:83:93:23:ae:d0:a6:12:6b:47:ed:74:
69:19:59:3d:da:e2:81:58:d6:cf:f9:78:63:0e:0b:
da:e8:bf:9e:ef:23:83:ee:03:ca:ba:ec:cd:cd:78:
ed:c1:66:89:94:e0:d5:2c:1a:43:76:31:7d:c2:0c:
5d:cf:f4:93:a7:96:30:5f:49:57:cb:5a:8e:dd:0c:
e9:7e:ae:08:60:19:45:8a:42:97:d1:86:23:55:14:
43:bc:c7:c6:73:e9:de:6b:fc:72:34:ec:6b:35:43:
7d:46:43:3b:4b:ca:d4:3c:6d:91:af:ce:07:41:ab:
f5:4f:b1:7b:03:ce:3e:5a:08:b2:f0:f6:f0:71:88:
c1:1c:90:5c:30:9d:b7:3a:fb:db:31:dd:e2:07:bd:
e1:ab:84:f8:df:8e:56:93:b9:26:f3:da:36:a2:0a:
e0:1a:1b:de:fc:ee:ca:6f:0a:90:3e:ad:6c:7e:b8:
93:78:da:87:85:97:86:cf:f5:70:3d:14:13:4f:9f:
db:1b:d0:da:b7:34:be:7c:2d:3c:a3:28:3c:84:54:
9d:d3:df:4d:5c:a6:96:b4:b9:4c:a6:7e:53:05:07:
f2:84:ea:d0:8c:c6:97:f5:c4:c5:4e:06:35:e0:3a:
ee:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:70:B1:EC:15:27:68:72:7F:F5:C0:36:0F:2D:12:23:FA:06:3C:08
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nHCx7BUnaHJ_9cA2Dy0SI_oGPAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.52.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:16:da:1f:8f:32:11:96:d3:1a:05:fe:4d:4a:1f:15:75:21:
b7:d6:ca:2f:e4:01:f7:69:53:ef:c9:68:89:29:6b:ba:9a:e0:
35:51:e6:51:48:a4:45:78:e2:48:79:44:64:02:6d:a1:37:ea:
47:1a:8c:f3:dd:7a:67:7d:c1:50:e4:89:a6:a8:22:2a:14:83:
be:71:2c:9a:2f:d8:1d:d2:b4:af:13:d5:5d:72:14:cf:a4:67:
db:85:33:c5:c7:36:0c:18:f6:f0:8a:be:a0:99:d1:db:3d:4c:
3a:80:8a:93:71:35:77:a5:98:a3:6e:9a:78:33:93:ed:91:4d:
3b:44:97:b2:ef:f6:20:45:8d:9b:5e:1e:cc:38:6d:b4:78:68:
9b:f4:9e:96:94:b3:d8:0b:15:5d:b8:2f:f4:c7:0d:f0:38:21:
c4:e5:f6:de:fb:48:3e:4b:ef:3d:eb:c6:2c:a6:e4:b9:a1:3e:
71:3e:19:a4:57:3b:a6:51:1b:38:a3:2b:07:63:09:f7:f4:31:
17:51:d1:fd:4f:47:a8:55:2e:21:87:20:88:b1:27:06:77:ff:
bf:ac:cc:7b:46:ce:00:0c:b7:c6:30:d2:76:34:19:3b:d1:7e:
f9:89:d0:91:5e:5d:a3:e5:88:5f:5f:f2:8c:73:91:35:c4:04:
a6:de:0d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:15:11 2025 by rpki-client