Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nGkziq4PBwpYMgEYeSwLCTjwpNc.roa
File: nGkziq4PBwpYMgEYeSwLCTjwpNc.roa (raw, json)
Hash identifier: patF8SPTEdDgZBoiHYXZ8L8+SsbkPrthLltv8yQLP+s=
Subject key identifier: 9C:69:33:8A:AE:0F:07:0A:58:32:01:18:79:2C:0B:09:38:F0:A4:D7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197846E69AA6FFA6E955F782CE0D820A40B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nGkziq4PBwpYMgEYeSwLCTjwpNc.roa
Signing time: Wed 18 Jun 2025 19:05:17 +0000
ROA not before: Wed 18 Jun 2025 19:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 45.128.76.0/24 maxlen: 24
45.130.125.0/24 maxlen: 24
2a0a:2d07:fc42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:6e:69:aa:6f:fa:6e:95:5f:78:2c:e0:d8:20:a4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 18 19:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c69338aae0f070a58320118792c0b0938f0a4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f5:97:6f:cd:99:3c:66:67:cb:4e:6b:21:93:
d7:39:fc:ab:22:fb:05:39:85:c0:dc:63:5f:06:fb:
2c:2a:43:b6:47:e8:3b:bc:7b:ca:d9:e7:3d:e2:ac:
8c:cb:35:0a:51:98:37:6c:3d:5f:d6:20:db:be:2b:
60:3f:7c:95:24:81:87:a9:81:d2:cb:e5:0f:65:b9:
47:5e:78:57:92:66:60:cb:02:77:52:6a:96:f0:17:
ef:2c:2c:43:bf:d2:ea:65:b2:12:1a:36:13:ac:ea:
2a:8d:f0:61:04:62:d6:43:2c:1b:c2:c3:66:be:5f:
19:47:25:9b:4c:20:c6:85:34:bb:dd:9d:fa:34:ea:
e8:60:4b:13:6e:f1:ba:dd:02:70:19:ff:b1:20:f8:
07:06:cc:09:01:7e:e3:e2:50:dc:91:6a:ed:46:f9:
52:2c:bf:e6:7b:55:60:da:95:22:66:06:91:fa:cc:
60:f9:ba:a6:42:06:fe:dd:88:59:3d:64:98:e9:9f:
d0:18:85:e5:84:bd:f9:8c:f1:36:1a:61:14:05:a7:
41:11:6a:43:d2:59:3a:3a:8a:e2:e3:82:d3:b9:2a:
96:46:dc:e9:9f:31:35:b2:18:bc:cd:5b:2d:e8:5e:
23:d1:5a:1a:ec:39:8e:31:b8:71:cc:37:97:65:ae:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:69:33:8A:AE:0F:07:0A:58:32:01:18:79:2C:0B:09:38:F0:A4:D7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nGkziq4PBwpYMgEYeSwLCTjwpNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.76.0/24
45.130.125.0/24
IPv6:
2a0a:2d07:fc42::/48
Signature Algorithm: sha256WithRSAEncryption
bf:40:be:cd:c7:01:ab:4f:65:8b:3e:eb:4f:fb:b2:a1:9a:7e:
08:f0:f2:34:09:4b:a7:bf:83:b0:8d:f1:dd:c2:19:dc:80:d1:
b0:97:a8:46:79:d1:29:fe:2f:28:0d:9c:da:f2:f7:c9:d5:1c:
f7:35:2e:bc:2f:5c:4f:47:15:e0:05:27:21:98:07:91:c0:b2:
e3:b9:68:3e:9c:c1:25:43:83:5c:48:4c:70:d0:d9:8f:75:e7:
f0:20:23:c4:93:b6:68:b8:57:b5:c0:5c:38:52:04:ec:5a:26:
db:b7:bc:dc:88:da:53:33:b0:e1:19:66:47:b0:45:a8:2c:d3:
71:07:2c:96:bc:43:24:99:29:a6:4f:39:d2:d0:0c:57:26:d2:
20:e6:54:d6:2b:d3:d4:04:eb:ac:a6:88:d7:15:85:ea:83:c3:
a2:8c:3a:a0:9f:50:fa:f0:ce:2f:1e:bf:82:36:28:e6:9f:76:
67:04:35:81:ac:93:d3:df:66:92:b2:83:51:c3:e3:47:90:df:
e4:c4:03:de:a2:8b:42:4d:10:cd:03:db:da:56:6a:28:c5:7b:
25:dd:d8:aa:d3:e5:e3:2f:cb:3d:88:0a:f0:58:ab:e4:73:3b:
69:0e:cd:6d:bf:fe:f3:24:1d:b2:18:62:7a:14:5a:fa:b7:3e:
8e:88:e7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:18:43 2025 by rpki-client