Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nJ7CCGw5PLpQv8qhRKpwXL6vDhg.roa
File: nJ7CCGw5PLpQv8qhRKpwXL6vDhg.roa (raw, json)
Hash identifier: OwcKz1wt8C9mjm/9lRugFVPyGhtblaatCQ/tH6epi98=
Subject key identifier: 9C:9E:C2:08:6C:39:3C:BA:50:BF:CA:A1:44:AA:70:5C:BE:AF:0E:18
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195E8B32A125EF69EB2F3146FEBE4D91289
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nJ7CCGw5PLpQv8qhRKpwXL6vDhg.roa
Signing time: Sun 30 Mar 2025 20:16:50 +0000
ROA not before: Sun 30 Mar 2025 20:16:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213512
IP address blocks: 5.175.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e8:b3:2a:12:5e:f6:9e:b2:f3:14:6f:eb:e4:d9:12:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 30 20:16:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c9ec2086c393cba50bfcaa144aa705cbeaf0e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:c4:12:60:82:65:07:59:e9:55:ac:04:0a:
8d:09:be:87:d5:06:e6:93:b8:d8:36:ff:fd:d4:74:
cb:a8:22:02:a3:5a:1d:6f:92:a8:e7:d8:b4:b9:67:
7c:b2:77:9e:47:88:45:7d:44:2f:31:59:82:c9:af:
42:f4:fb:40:47:11:1e:f6:77:20:da:5f:f1:bb:21:
8d:0d:67:42:a4:0d:b7:b3:4e:90:24:1a:b4:a1:a0:
1f:3a:c7:70:bb:72:59:bc:0d:3f:4c:d9:e5:92:77:
c5:61:0b:f5:bd:5c:1a:87:5f:b7:4d:04:8a:e6:c8:
3f:81:f6:ee:9f:2a:29:23:7d:6b:37:46:3e:0d:ca:
34:ab:1c:38:a9:30:83:47:80:c3:e4:55:46:06:a3:
4b:b0:05:0a:0b:83:b8:55:b9:4b:17:06:10:43:0d:
15:56:97:7f:43:22:af:88:50:32:b7:41:83:35:e0:
20:60:91:0d:6e:d2:52:44:0d:b4:8a:6f:4d:7d:2f:
be:8b:aa:8e:ce:b7:56:c6:03:de:ec:27:de:42:81:
96:5a:6f:c4:52:2e:64:26:9a:72:f3:c6:48:4b:12:
ee:3a:99:59:a6:0b:fc:1a:44:53:cf:15:4d:2c:33:
f8:fe:24:a1:7b:61:2d:1d:1b:fc:f1:15:b3:c2:92:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9E:C2:08:6C:39:3C:BA:50:BF:CA:A1:44:AA:70:5C:BE:AF:0E:18
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nJ7CCGw5PLpQv8qhRKpwXL6vDhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.142.0/24
Signature Algorithm: sha256WithRSAEncryption
08:3b:04:a6:de:c8:82:53:75:1a:53:f5:bf:5d:5e:9e:f4:f9:
f3:57:f1:84:51:7e:bc:20:5a:8c:ba:2e:af:58:ca:8d:66:ba:
06:3c:ae:18:17:42:e0:ec:e5:5b:7f:a2:cc:39:4c:c1:8b:fe:
32:76:3a:66:86:1d:9c:a7:09:21:8f:df:cb:fd:6c:06:f4:93:
39:e0:37:9a:d6:91:85:0a:65:05:2b:41:79:bc:8a:4a:5a:c9:
52:a0:7c:14:16:50:e7:19:f8:23:92:8f:b1:eb:91:01:16:1f:
6d:59:96:97:15:09:82:e7:73:f3:d2:6b:74:23:5d:c4:a2:c3:
96:a3:8e:a6:57:52:f8:2d:83:3d:03:91:e9:b7:ed:ae:a3:4b:
52:0c:80:3c:69:1f:dd:a1:67:1c:3c:57:42:12:46:6f:b6:77:
cc:4c:02:b6:cb:89:20:cb:37:06:a5:5b:00:d4:99:2f:30:a5:
29:a8:c3:20:7b:5e:ee:ea:5e:d8:49:01:0a:ad:02:cc:f5:e0:
64:19:cd:75:8c:c6:b6:d5:02:1b:b3:c6:03:ef:8d:a7:fc:60:
28:6a:c1:05:06:13:90:37:7e:b7:ca:db:e3:ed:b9:8d:ea:32:
88:8f:b5:1b:39:39:2f:cd:5d:f0:8f:27:90:41:c3:8b:9a:e7:
35:90:da:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXosyoSXvaesvMUb+vk2RKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMzMwMjAxNjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzllYzIwODZjMzkzY2JhNTBiZmNhYTE0NGFhNzA1Y2JlYWYwZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlHEEmCCZQdZ6VWsBAqNCb6H1Qbm
k7jYNv/91HTLqCICo1odb5Ko59i0uWd8sneeR4hFfUQvMVmCya9C9PtARxEe9ncg
2l/xuyGNDWdCpA23s06QJBq0oaAfOsdwu3JZvA0/TNnlknfFYQv1vVwah1+3TQSK
5sg/gfbunyopI31rN0Y+Dco0qxw4qTCDR4DD5FVGBqNLsAUKC4O4VblLFwYQQw0V
Vpd/QyKviFAyt0GDNeAgYJENbtJSRA20im9NfS++i6qOzrdWxgPe7CfeQoGWWm/E
Ui5kJppy88ZISxLuOplZpgv8GkRTzxVNLDP4/iShe2EtHRv88RWzwpJaKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJyewghsOTy6UL/KoUSqcFy+rw4YMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvbko3Q0NHdzVQTHBRdjhxaFJLcHdYTDZ2RGhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+OMA0G
CSqGSIb3DQEBCwUAA4IBAQAIOwSm3siCU3UaU/W/XV6e9PnzV/GEUX68IFqMui6v
WMqNZroGPK4YF0Lg7OVbf6LMOUzBi/4ydjpmhh2cpwkhj9/L/WwG9JM54Dea1pGF
CmUFK0F5vIpKWslSoHwUFlDnGfgjko+x65EBFh9tWZaXFQmC53Pz0mt0I13EosOW
o46mV1L4LYM9A5Hpt+2uo0tSDIA8aR/doWccPFdCEkZvtnfMTAK2y4kgyzcGpVsA
1JkvMKUpqMMge17u6l7YSQEKrQLM9eBkGc11jMa21QIbs8YD742n/GAoasEFBhOQ
N363ytvj7bmN6jKIj7UbOTkvzV3wjyeQQcOLmuc1kNo9
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:49:38 2025 by rpki-client