Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/nPdGgeG-9wHMZBn1oHFY2TrIyd4.roa
File: nPdGgeG-9wHMZBn1oHFY2TrIyd4.roa (raw, json)
Hash identifier: ixNDdEbsReVkHb4nZt1NyyQNAMSP0+ayTT4IyJE76/4=
Subject key identifier: 9C:F7:46:81:E1:BE:F7:01:CC:64:19:F5:A0:71:58:D9:3A:C8:C9:DE
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01966CA4EEC775AA5DEB48809657D59B8BB6
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/nPdGgeG-9wHMZBn1oHFY2TrIyd4.roa
Signing time: Fri 25 Apr 2025 11:11:10 +0000
ROA not before: Fri 25 Apr 2025 11:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398465
IP address blocks: 188.74.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:a4:ee:c7:75:aa:5d:eb:48:80:96:57:d5:9b:8b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Apr 25 11:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cf74681e1bef701cc6419f5a07158d93ac8c9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:83:59:69:df:56:bc:eb:aa:2f:ce:6f:17:cb:
aa:b5:3e:87:e9:0f:9b:7d:86:6c:df:78:a8:6c:f9:
32:d7:17:18:a0:70:02:7c:ac:bf:2c:87:26:a5:91:
49:6f:9f:9e:cc:a5:db:f4:7d:5f:e2:72:c3:33:d2:
dc:bb:c8:bb:71:7a:77:76:d9:5a:02:98:1d:1e:d5:
00:d5:36:46:41:1d:11:c9:bc:35:f0:d4:f2:a0:cd:
d2:5c:3d:ac:78:3c:87:19:1d:97:e4:29:41:22:70:
55:85:65:e4:ff:40:04:e4:5e:69:82:fe:bb:ac:a8:
c4:26:a5:17:68:91:97:b9:4a:9a:5d:93:c0:ca:20:
ab:ad:4f:49:b7:61:8c:9f:78:58:78:8a:f7:bf:14:
36:a9:93:7e:bb:8c:e5:30:b3:2c:c0:6d:d4:97:1b:
db:44:5e:03:7d:3e:a3:af:22:7d:6d:00:a6:1d:66:
6e:70:71:b9:1b:e5:f4:b8:27:62:a6:a1:a6:58:ef:
9b:9e:81:69:82:08:0e:49:b6:fe:60:92:fc:e1:15:
5b:7c:ba:7d:02:20:3d:e5:c7:b5:cd:95:b1:bb:82:
f9:3b:7d:9a:a8:6f:76:81:b0:d7:61:6d:14:6c:1c:
f9:64:d5:12:07:e6:c0:9f:52:d2:00:b4:c6:83:22:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F7:46:81:E1:BE:F7:01:CC:64:19:F5:A0:71:58:D9:3A:C8:C9:DE
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/nPdGgeG-9wHMZBn1oHFY2TrIyd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.136.0/22
Signature Algorithm: sha256WithRSAEncryption
59:a3:ad:90:a9:4d:9a:33:7e:63:40:66:0d:69:12:76:26:7e:
9b:db:a2:81:88:5f:c0:db:f6:c4:8b:06:35:f9:c3:7d:ba:ad:
5a:c6:84:45:aa:01:75:01:c1:c7:c6:37:9f:b9:83:7c:d7:35:
71:0b:d8:b2:43:d7:71:98:38:3b:86:66:14:25:0a:66:39:19:
30:73:ca:84:4b:cb:38:10:15:00:14:35:72:95:15:5e:a1:0e:
cf:91:9c:ed:9e:75:ea:be:e3:3f:a1:cb:b3:96:29:5c:7e:06:
f9:a4:46:8b:4f:84:1a:b6:9d:e1:d8:8e:93:29:3f:bd:13:7a:
ca:fd:9c:24:95:ed:be:c0:ca:f9:4d:29:51:d5:03:2e:fe:92:
72:2a:77:fd:4b:ec:5e:19:36:3c:72:5e:a5:13:23:d6:17:f4:
3a:99:60:5d:c9:a8:d8:65:a9:36:ce:77:a7:3c:28:2b:6d:14:
fc:29:91:2d:53:84:f3:40:b9:22:dd:54:26:55:d7:60:93:39:
21:ba:21:0a:43:b0:87:89:4c:91:3f:a3:9e:46:d3:14:a4:0c:
5a:15:fb:1b:da:b3:50:6a:01:2f:6e:46:5f:de:29:64:e3:51:
d7:d8:c0:3e:bf:24:7f:2c:ae:48:02:77:00:f2:80:0d:6d:e1:
76:50:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:23:59 2025 by rpki-client