Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/n8t1FbmmcHRL1T025PodTqR3IcA.roa
File: n8t1FbmmcHRL1T025PodTqR3IcA.roa (raw, json)
Hash identifier: 449VA6EYanQ2mGU5FM+jEwpoRl0iEuk30UHtcfYkgJs=
Subject key identifier: 9F:CB:75:15:B9:A6:70:74:4B:D5:3D:36:E4:FA:1D:4E:A4:77:21:C0
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 0196677CBDDA1BB68980877C5FCC9AA2F63B
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/n8t1FbmmcHRL1T025PodTqR3IcA.roa
Signing time: Thu 24 Apr 2025 11:09:10 +0000
ROA not before: Thu 24 Apr 2025 11:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 92.51.20.0/24 maxlen: 24
92.51.21.0/24 maxlen: 24
92.51.22.0/24 maxlen: 24
92.51.23.0/24 maxlen: 24
92.51.36.0/24 maxlen: 24
92.51.37.0/24 maxlen: 24
92.51.38.0/24 maxlen: 24
92.51.39.0/24 maxlen: 24
92.51.44.0/24 maxlen: 24
92.51.45.0/24 maxlen: 24
92.51.46.0/24 maxlen: 24
92.51.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:7c:bd:da:1b:b6:89:80:87:7c:5f:cc:9a:a2:f6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Apr 24 11:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fcb7515b9a670744bd53d36e4fa1d4ea47721c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:a8:fb:a7:ea:90:1f:80:9d:2e:0d:0b:cb:
ce:55:e2:79:56:c7:af:1d:bb:d7:1f:72:a9:31:a4:
5a:84:30:2b:35:8c:c3:9d:c7:8d:07:9c:47:3f:d9:
45:48:6a:f7:6a:b0:97:7c:28:73:d0:a6:d9:bc:4a:
45:79:a9:ce:80:e1:78:14:3a:f7:1b:46:e7:89:f7:
b7:ad:bb:3f:b9:4b:6d:26:dc:74:bb:1d:67:66:c3:
c1:ba:2a:6a:ca:a5:f7:76:02:f8:8b:67:88:db:87:
e5:48:b7:ff:5c:52:49:01:36:37:11:b9:1a:01:34:
3b:60:ee:8f:9d:62:73:c5:16:b2:c4:25:e6:3c:a6:
9b:66:f1:4a:e7:8b:3e:69:ae:de:2b:ee:ac:86:5d:
43:5c:19:12:b4:3a:36:83:23:80:84:e6:a1:c7:3b:
81:2e:b8:3c:89:f4:93:1f:da:8a:b1:43:e2:04:a5:
c2:3d:c4:66:8e:02:00:03:d5:aa:0d:a5:85:d6:ae:
3b:f2:0e:55:02:22:35:17:84:8a:59:3a:e9:d6:2d:
31:42:2e:c5:a9:8a:e3:7f:43:69:3b:ba:6e:60:91:
20:3d:1c:9d:08:22:7d:ee:6b:fa:85:5d:5c:77:13:
16:7e:ef:70:9d:fd:f1:09:73:ea:48:20:97:8a:ff:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:75:15:B9:A6:70:74:4B:D5:3D:36:E4:FA:1D:4E:A4:77:21:C0
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/n8t1FbmmcHRL1T025PodTqR3IcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.20.0/22
92.51.36.0/22
92.51.44.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:ab:49:88:65:87:71:15:1d:69:da:b2:18:ea:f1:90:ec:87:
91:ca:df:b8:c7:62:6e:4e:8e:50:9f:79:6f:47:f1:bc:f4:f6:
40:dd:b6:ac:08:ca:9c:6e:c0:63:62:30:e0:bf:ea:72:38:34:
00:60:48:c5:f0:b5:aa:28:84:d3:9d:c9:fc:ab:85:9b:6d:34:
6e:1a:1f:0c:4d:44:06:16:9b:0f:d1:d3:bd:d4:39:10:9b:69:
6c:ab:22:7f:2f:aa:26:d2:e3:c8:eb:bf:68:2b:20:4a:7f:c9:
bf:07:e3:57:f6:8a:5c:95:21:6e:ef:77:7d:bc:78:21:a7:71:
56:01:2c:d1:17:6b:da:05:ff:e5:af:c9:ba:a4:9a:5d:02:80:
34:b3:72:84:65:47:ef:a6:49:db:c9:14:10:5c:a8:c7:7e:cf:
1b:3b:ad:45:70:56:56:a0:58:0e:44:2b:7f:ae:e4:e5:c3:ff:
99:63:01:f4:a5:62:f1:a5:ef:cb:94:4d:b8:bc:00:a0:4d:77:
45:97:6a:c5:7c:47:a0:7d:29:23:e8:0e:47:06:8e:7b:54:a8:
01:7d:db:bf:9b:13:1f:1e:53:13:c5:c7:98:31:3f:b3:56:f1:
26:9d:9f:b5:f3:81:71:e4:2a:08:c3:c3:54:1f:9a:7c:5e:95:
8c:f5:ce:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:08:30 2025 by rpki-client