Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/N0iMw4V3FnCIyfGVT9KTAjAa0V4.roa
File: N0iMw4V3FnCIyfGVT9KTAjAa0V4.roa (raw, json)
Hash identifier: ieg3VFvZTZIlfpmG2a/ZhByTEF92xOsm5jd+caG7KwI=
Subject key identifier: 37:48:8C:C3:85:77:16:70:88:C9:F1:95:4F:D2:93:02:30:1A:D1:5E
Certificate issuer: /CN=b1e526405d45174247994feedb2d7e5dd40793dd
Certificate serial: 019424451D3EF86D471E4F9125527CF2842E
Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/N0iMw4V3FnCIyfGVT9KTAjAa0V4.roa
Signing time: Wed 01 Jan 2025 23:48:16 +0000
ROA not before: Wed 01 Jan 2025 23:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208574
IP address blocks: 147.78.40.0/22 maxlen: 24
2a09:1cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:1d:3e:f8:6d:47:1e:4f:91:25:52:7c:f2:84:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd
Validity
Not Before: Jan 1 23:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37488cc38577167088c9f1954fd29302301ad15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:d2:c5:a4:70:42:9e:61:b0:b4:3b:26:42:
11:bf:60:ac:34:c7:33:e8:05:16:65:84:4c:93:67:
35:1c:f0:cf:8d:de:f9:88:c9:d0:28:4f:21:53:d6:
a8:0b:82:91:cb:46:ed:4e:a1:0a:50:bc:be:d6:8c:
63:bd:cd:ec:ee:51:9a:f9:4b:3c:56:ed:0d:19:ac:
dd:12:51:ce:f3:3c:19:b3:68:86:18:ed:63:84:60:
29:ab:ba:d4:1b:ee:84:28:84:95:bc:11:44:bd:97:
12:9d:1a:7a:ae:64:b0:7a:6a:9f:59:ea:56:23:4b:
d8:e7:63:41:70:71:24:f2:96:01:d1:34:1c:84:94:
27:be:ec:b4:67:53:6b:0c:1e:98:d7:33:35:00:c3:
90:ad:9d:7f:ad:77:a6:2a:c3:d1:54:4c:c2:e8:4d:
17:4c:1b:b5:35:87:3b:4d:e7:b5:8e:f1:0e:03:b2:
59:e7:56:eb:c6:ba:35:e3:cc:60:4b:17:74:80:d9:
1b:01:10:1d:c8:bc:56:86:16:85:82:85:55:b7:08:
4e:e5:0a:ca:4f:59:09:04:c6:45:63:0e:ca:80:7e:
97:5f:4d:2b:c9:ac:1e:7e:58:4e:98:2b:e2:cd:9a:
3c:94:3c:b9:1c:7d:d6:e0:ac:56:9e:16:66:5b:c6:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:8C:C3:85:77:16:70:88:C9:F1:95:4F:D2:93:02:30:1A:D1:5E
X509v3 Authority Key Identifier:
keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/N0iMw4V3FnCIyfGVT9KTAjAa0V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.40.0/22
IPv6:
2a09:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
90:e2:3a:76:ab:19:bd:c6:00:eb:90:bc:5f:bb:46:51:d5:b9:
8b:1a:74:bb:b2:d3:00:f2:2b:9d:11:34:89:30:5f:99:cb:93:
9f:e6:99:5f:aa:bd:1e:1c:42:21:48:4a:bc:a6:ba:dc:0f:1f:
c5:f7:e3:e4:6e:99:f5:19:96:ce:ae:2f:a9:82:52:64:79:e4:
da:31:c8:df:66:f9:8d:d7:70:25:6f:0f:b6:70:64:6c:c0:31:
33:7c:7f:4b:5e:b0:4b:fd:b1:ae:5f:92:7e:d6:93:b5:8a:4b:
35:02:7c:cc:9d:b6:6d:42:55:9f:70:5d:bd:40:db:00:a4:1f:
2e:72:ae:35:f4:45:bc:86:28:d5:65:0f:5a:f0:bc:d7:80:e7:
d8:41:1c:98:bb:6d:91:20:9d:21:bc:10:3d:60:25:d5:be:44:
99:c8:1c:4d:a2:d6:04:c1:c0:a1:ee:e8:bb:3b:d8:9c:9b:e4:
b1:2b:b9:00:63:b2:60:59:ee:12:4b:e4:ad:32:5b:18:f1:ea:
09:4c:11:cb:b6:6f:58:c7:03:22:28:6a:ab:2a:15:45:b3:3d:
fb:8a:18:09:e8:b5:72:6b:18:ec:43:b1:db:81:e5:e6:e5:17:
50:eb:ef:c0:37:b6:3f:0c:69:0e:89:82:15:18:6c:7e:c4:0c:
06:bf:c1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:03:12 2025 by rpki-client