Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/nFiPEMhy3ZN7Kzd1c5drtsfC2Ms.roa
File: nFiPEMhy3ZN7Kzd1c5drtsfC2Ms.roa (raw, json)
Hash identifier: K/fi1bP7PVVo/L+gbRw+2aDpJIZXZHh+7f96KzgbyVo=
Subject key identifier: 9C:58:8F:10:C8:72:DD:93:7B:2B:37:75:73:97:6B:B6:C7:C2:D8:CB
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 01966E76EF19A7341D8464C1678B063D44D9
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/nFiPEMhy3ZN7Kzd1c5drtsfC2Ms.roa
Signing time: Fri 25 Apr 2025 19:40:10 +0000
ROA not before: Fri 25 Apr 2025 19:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 37.77.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6e:76:ef:19:a7:34:1d:84:64:c1:67:8b:06:3d:44:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Apr 25 19:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c588f10c872dd937b2b377573976bb6c7c2d8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:c4:20:1c:6e:30:02:c3:93:a2:f4:4c:8f:
26:e5:14:e4:a6:ba:13:07:b4:41:04:f1:40:04:ea:
f9:5f:30:74:cf:44:be:22:6f:ea:72:67:c6:0c:b6:
85:7b:27:c9:b6:f1:ae:00:a2:19:5d:2f:43:fb:d1:
6f:21:da:60:f4:e8:0b:5d:e7:d7:74:d9:b3:74:af:
4f:28:c0:62:bb:c7:b1:4b:0c:02:d9:09:b1:11:9c:
11:2a:9a:25:f4:c2:43:de:d5:8a:e0:5a:7f:b0:e7:
12:85:d8:77:45:94:61:57:5b:73:37:5c:65:ad:c6:
d8:f3:14:08:38:34:7b:a8:e6:8c:dc:45:23:ba:d0:
26:e5:73:89:34:4d:de:5d:22:c3:79:e3:4d:ee:c5:
3a:0a:9d:14:27:2f:2b:24:39:17:cb:1d:1f:82:f1:
00:db:20:2f:e4:15:c2:6e:b7:98:17:a9:4c:0f:e5:
74:a3:41:fa:de:b1:3c:1c:a3:2b:87:30:61:c5:5f:
b0:77:58:7f:4c:32:da:03:a3:fc:84:1a:63:10:14:
b6:e3:1a:13:df:50:88:76:23:59:42:3e:15:9b:af:
42:d7:b4:16:d6:97:a7:28:7d:a2:56:4b:98:73:2e:
cc:9a:f2:7f:6d:1c:d9:33:81:f5:f5:c8:d7:9f:5a:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:58:8F:10:C8:72:DD:93:7B:2B:37:75:73:97:6B:B6:C7:C2:D8:CB
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/nFiPEMhy3ZN7Kzd1c5drtsfC2Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:96:e1:61:c3:2a:70:1d:54:c1:06:88:6c:e5:a9:db:f4:7c:
ec:d0:5e:1b:5f:a2:a1:6b:9e:49:37:3c:a2:93:df:d1:21:51:
d1:8b:b0:55:35:2a:17:7b:ba:72:a5:7d:61:14:1e:5c:b7:0e:
fb:00:47:62:79:a3:5e:87:67:eb:fd:91:e8:aa:ef:01:99:50:
c7:12:1b:b6:ee:af:ab:68:43:32:97:66:3b:ec:45:e4:cf:34:
c6:c5:32:5b:91:20:35:7b:d8:a3:06:0c:a2:47:6d:9b:89:0e:
d9:7a:65:44:77:76:e7:e6:dc:e6:d1:8c:1f:27:f5:36:d4:b7:
ba:58:5c:f9:f7:e6:dd:98:c1:bb:cc:3a:05:7f:53:33:ee:9f:
d7:af:cd:c3:d5:2b:77:2c:c4:7d:5d:b4:5e:01:e1:49:e3:36:
4a:f0:80:12:30:8a:54:c0:94:3c:5c:d9:f4:0a:bb:81:29:40:
ed:03:74:9c:cb:06:e4:c0:8e:ae:ad:2b:af:67:d1:ce:36:dd:
b9:ff:a8:90:48:b4:30:15:54:ab:36:74:ab:d3:1e:91:7b:84:
b6:93:ba:19:cf:a5:3e:dd:89:d5:0f:c1:d5:c1:36:bb:8c:36:
bf:2b:fd:ad:7c:01:1e:f3:8f:b0:62:72:a3:97:56:ac:a7:50:
a5:6d:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:38:42 2025 by rpki-client