Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/nDQZdingmM80ET66f_cHD5rQYC0.roa
File: nDQZdingmM80ET66f_cHD5rQYC0.roa (raw, json)
Hash identifier: ISKP+zEkKmK3U65ot6Oz+uUfXHtEGhyL31yfH/q/odE=
Subject key identifier: 9C:34:19:76:29:E0:98:CF:34:11:3E:BA:7F:F7:07:0F:9A:D0:60:2D
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 0196452982859D914545A02F7AD30F80F2A0
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/nDQZdingmM80ET66f_cHD5rQYC0.roa
Signing time: Thu 17 Apr 2025 19:11:10 +0000
ROA not before: Thu 17 Apr 2025 19:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211286
IP address blocks: 2a0d:8d04::/32 maxlen: 48
2a0d:8d04::/48 maxlen: 48
2a0d:8d04:5::/48 maxlen: 48
2a0d:8d04:b::/48 maxlen: 48
2a0d:8d04:d::/48 maxlen: 48
2a0d:8d04:71a::/48 maxlen: 48
2a0d:8d04:71b::/48 maxlen: 48
2a0d:8d04:71d::/48 maxlen: 48
2a0d:8d04:5000::/36 maxlen: 48
2a0d:8d04:6000::/36 maxlen: 36
2a0d:8d04:a000::/36 maxlen: 36
2a0d:8d04:b000::/36 maxlen: 36
2a0d:8d04:c000::/35 maxlen: 35
2a0d:8d04:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:29:82:85:9d:91:45:45:a0:2f:7a:d3:0f:80:f2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Apr 17 19:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c34197629e098cf34113eba7ff7070f9ad0602d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:67:a3:51:59:af:5d:83:2d:65:b6:23:c6:
65:d5:65:0b:0a:38:5a:dc:c9:81:3c:d1:63:ce:66:
ea:c8:ef:12:4a:83:b2:a8:b8:76:2a:0d:37:46:6a:
a5:1c:56:f5:f7:9b:ae:9d:85:17:d0:93:95:b7:2d:
4c:91:bb:fa:c5:c4:b6:b8:de:91:d3:42:6f:b8:25:
ef:da:de:08:92:be:2f:d0:d3:51:83:30:f2:bd:2b:
23:c1:8e:9e:c8:cd:52:13:90:72:0f:9a:62:83:e2:
fe:7f:e9:90:28:5e:e0:f7:35:cd:87:ca:62:60:d9:
76:fe:44:89:7c:8a:63:95:bd:52:c4:02:b9:a6:d8:
1d:e1:50:40:b7:e3:46:84:cd:ab:5e:57:45:22:20:
d0:36:f7:17:75:b7:6f:26:cf:49:20:7f:ee:20:e2:
38:32:e7:78:4c:d8:5d:7f:b9:c1:38:93:d4:b0:d5:
f2:d0:3d:ea:58:b4:80:3a:7a:c9:50:a2:b8:92:a4:
69:84:c6:69:16:d9:b9:a6:bb:41:74:dc:92:7f:94:
e6:5c:c6:e4:d4:47:42:a2:7f:00:19:e6:bb:31:41:
05:b0:5b:94:c0:a3:41:26:cb:48:49:9d:a1:0b:da:
0f:5c:de:5e:25:0a:82:f2:be:68:5f:00:f7:32:ad:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:34:19:76:29:E0:98:CF:34:11:3E:BA:7F:F7:07:0F:9A:D0:60:2D
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/nDQZdingmM80ET66f_cHD5rQYC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8d04::/32
Signature Algorithm: sha256WithRSAEncryption
99:ec:2b:3e:97:e2:dc:c1:eb:22:d5:a8:10:5e:9c:97:93:2b:
a5:20:c5:ad:7c:83:9e:0b:79:49:f1:64:97:e2:6e:0b:21:18:
a3:92:95:21:18:2c:51:64:c7:23:4c:b4:f7:7b:d6:4b:98:2a:
7f:f3:63:ca:1a:aa:8e:8a:00:62:bb:3f:e0:c1:cf:57:7c:cd:
1d:81:bf:73:cb:97:58:b3:54:df:88:be:27:e0:ea:9b:f5:2e:
73:1d:8f:4e:7f:31:3a:dd:56:8b:24:52:39:35:f8:ed:6e:30:
fb:10:e8:02:61:b3:f6:85:3d:cc:b6:61:ef:45:61:b7:35:5f:
ab:ea:83:32:20:84:d4:86:be:bf:ed:33:aa:46:74:4f:bc:e4:
56:e9:dd:36:15:ea:2e:3c:f3:c6:41:75:72:e3:35:76:f2:e7:
ea:ca:b7:df:ad:f2:f0:f1:ce:71:a3:1e:af:35:6f:29:8c:3f:
64:a5:7b:f8:f2:c1:a9:fb:5b:66:01:84:79:67:86:19:54:98:
dc:b2:ce:c5:fd:19:99:e6:0d:8a:6c:40:d8:23:e3:7c:e6:56:
9b:e6:58:a4:31:c8:fc:24:a5:5d:36:23:e5:54:bb:a8:6b:96:
42:e9:27:d6:41:6d:cb:f8:6b:25:e7:65:77:e2:e5:27:d3:53:
33:7c:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:35:06 2025 by rpki-client