Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/nmJABDvfuOFv5rLDwlXnJrYAKfA.roa
File: nmJABDvfuOFv5rLDwlXnJrYAKfA.roa (raw, json)
Hash identifier: yu+JnwJ2ZdAZBsZsQOEV9MutU4KWGdZDxP69diYDCo4=
Subject key identifier: 9E:62:40:04:3B:DF:B8:E1:6F:E6:B2:C3:C2:55:E7:26:B6:00:29:F0
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01973A07C8434D7D286677F57F4A288921AD
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/nmJABDvfuOFv5rLDwlXnJrYAKfA.roa
Signing time: Wed 04 Jun 2025 08:21:17 +0000
ROA not before: Wed 04 Jun 2025 08:21:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.10.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:07:c8:43:4d:7d:28:66:77:f5:7f:4a:28:89:21:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jun 4 08:21:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e6240043bdfb8e16fe6b2c3c255e726b60029f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:a2:c5:bf:86:0e:45:40:8a:67:e5:bf:84:
74:62:fe:83:19:61:11:74:cc:20:94:35:ad:e6:09:
3f:7e:3f:29:7f:cb:1c:10:9d:56:9e:86:6b:eb:38:
a4:90:98:b7:57:7f:59:6c:20:a9:52:21:b1:9f:f1:
26:d7:26:e0:1d:b2:0e:e0:2a:8a:a4:2c:e1:0f:bc:
e4:99:c1:56:e1:59:7d:84:d8:7f:8c:c3:b6:a6:3b:
ce:95:6a:1d:b2:de:64:3b:65:81:2d:64:91:71:13:
bc:3d:29:ea:02:87:b9:c6:12:55:5d:48:47:e0:97:
a7:38:52:0a:ad:74:66:37:ce:ab:16:9a:fe:9d:70:
3f:73:df:a0:b4:bd:8b:f5:03:78:8e:83:6b:2b:9b:
03:e8:39:8a:d5:c9:d8:77:23:9c:67:66:f0:7d:07:
88:f8:3e:56:4a:0f:10:0f:bf:49:e2:ee:65:be:43:
51:5f:6f:24:b2:67:32:5e:a5:75:05:46:60:ba:8e:
64:bf:e5:12:b3:2e:da:ac:26:ab:e0:ad:8a:cf:ae:
92:12:37:25:e6:1e:cb:2d:13:b0:23:f0:3a:02:79:
7c:62:71:5c:a2:1e:44:e1:3a:d3:8d:a4:fe:9e:f3:
78:a6:a2:53:30:1e:b2:5e:85:26:54:2b:9c:74:ef:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:62:40:04:3B:DF:B8:E1:6F:E6:B2:C3:C2:55:E7:26:B6:00:29:F0
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/nmJABDvfuOFv5rLDwlXnJrYAKfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
51:41:2f:35:73:7b:95:d0:7e:13:98:e0:58:6f:8a:5a:f6:98:
4e:f5:67:ba:b6:ea:39:cb:19:d5:eb:49:dc:fb:df:97:0d:2e:
5c:d4:e4:6e:ee:39:e0:ac:6f:78:4f:19:90:22:29:01:3b:70:
bc:9d:bc:9b:64:98:26:48:b7:f5:cc:df:fa:33:71:05:67:4f:
a6:1e:dd:8c:e9:cc:64:ee:18:49:ec:c2:14:f3:b9:f0:c3:eb:
8e:12:9c:39:75:c6:cb:ed:74:64:f1:4f:8a:cd:7b:2b:b6:ef:
51:21:df:b1:b9:df:56:df:e7:ca:f1:6a:f6:81:e6:2b:41:fe:
35:70:1c:ce:87:3c:ff:e4:e3:68:df:79:c5:31:90:88:b7:2f:
c1:41:a6:fb:b6:47:79:01:55:a1:91:ca:8c:bf:f4:27:4d:c6:
7d:3f:47:6e:15:92:c6:cc:05:c6:d8:fe:47:45:0b:bc:a0:18:
5c:8b:2d:8f:12:d3:5e:04:d6:19:26:30:e1:94:54:32:d8:06:
82:02:58:15:19:f0:99:3c:c9:d9:9e:37:dd:07:aa:d8:cc:63:
b9:eb:18:5b:2f:db:52:f6:4b:23:21:c8:f0:cf:f0:7a:ca:a5:
23:d6:f2:a7:06:80:13:70:ac:9d:6d:65:8a:a5:09:4b:05:78:
fa:a5:38:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:09 2025 by rpki-client