Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/nDCQMjqJYZzn6cBHaTW3WoI-N1I.roa
File: nDCQMjqJYZzn6cBHaTW3WoI-N1I.roa (raw, json)
Hash identifier: OMmnNufOFNF1WSMlxRX3hhHWusPYAz+qyX0FtxvkgWg=
Subject key identifier: 9C:30:90:32:3A:89:61:9C:E7:E9:C0:47:69:35:B7:5A:82:3E:37:52
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019667C8BD47936C326F24ECFCF4DC528E3A
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/nDCQMjqJYZzn6cBHaTW3WoI-N1I.roa
Signing time: Thu 24 Apr 2025 12:32:10 +0000
ROA not before: Thu 24 Apr 2025 12:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 91.190.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:c8:bd:47:93:6c:32:6f:24:ec:fc:f4:dc:52:8e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Apr 24 12:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c3090323a89619ce7e9c0476935b75a823e3752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:e6:f6:b8:52:cd:7f:8b:28:2c:38:c9:ca:
24:99:51:1b:4b:08:e4:e5:f9:0e:21:11:75:6d:4a:
ef:f6:e3:6b:11:78:25:7a:39:d2:f7:94:c3:21:47:
5c:aa:b3:d9:41:02:c4:01:8b:1d:60:c4:82:6a:e3:
64:c5:a4:15:47:43:b9:6d:f5:27:67:e5:f7:64:7d:
60:16:b4:41:4c:0e:76:1d:a7:91:41:b8:3d:ac:26:
91:d4:4d:38:99:8a:84:8d:3b:03:ff:74:62:79:bb:
83:2a:45:14:da:24:45:bd:12:18:3c:8c:63:09:01:
d4:4c:ba:f5:c2:f6:e8:c3:41:8f:e7:45:c5:24:29:
ef:e2:72:98:38:17:0c:da:e7:5c:bf:ee:f7:0f:fd:
30:db:04:ad:03:a5:7e:68:cd:44:a8:39:82:b9:d1:
c6:e4:75:ee:22:74:97:b0:81:a5:0f:b8:1f:b0:73:
d2:32:45:87:f7:85:1b:98:7a:ac:77:96:b6:58:a3:
7a:a5:a7:e4:56:0d:25:47:ef:ab:1f:82:62:88:31:
93:8d:93:97:16:13:68:ac:b8:40:78:2b:c1:4b:28:
e5:20:30:24:fc:12:a8:45:32:e4:28:f2:b6:68:b9:
bb:1b:fd:e9:7b:48:93:d5:94:3a:2c:ea:9b:ec:91:
0b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:30:90:32:3A:89:61:9C:E7:E9:C0:47:69:35:B7:5A:82:3E:37:52
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/nDCQMjqJYZzn6cBHaTW3WoI-N1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e5:f0:2c:4e:28:3a:4b:87:ba:27:54:7d:16:b9:ba:03:a1:
67:39:a9:c9:3a:24:6c:12:0f:d7:c4:d2:17:be:1f:cf:53:b2:
62:7c:b6:60:e6:40:cd:2c:ea:e0:d5:29:99:ba:f1:55:3d:07:
c7:2c:92:ea:7a:36:ec:41:11:cc:bb:c9:4e:ab:00:73:93:b9:
20:d7:ad:af:5f:4b:41:2e:3e:e0:bf:9f:fa:ce:a5:81:a0:ee:
72:36:1f:55:9b:85:19:ef:c5:b4:db:81:19:94:ef:40:e7:69:
a9:d7:a8:99:ad:fe:04:02:92:77:3c:8b:c7:2e:f7:8e:ab:98:
30:1e:5e:c4:9a:6c:18:a7:8b:f5:44:39:e6:d8:90:ef:7f:89:
6f:81:de:67:3e:06:26:c7:26:80:fb:7a:61:22:15:42:d1:97:
e7:9f:b6:fe:ab:8b:e3:ac:f8:30:8e:bf:e6:73:a5:7f:ca:0d:
85:19:f6:ef:1c:21:a2:00:ac:4b:fd:fd:08:6e:05:dc:ac:e1:
98:08:27:96:04:a1:3c:54:59:b8:00:4d:be:f0:fb:37:4c:ae:
9f:c2:3f:77:4b:bc:01:90:28:2f:df:50:0e:e7:77:0d:7d:f2:
d5:86:0d:e0:e6:6b:9a:06:7b:e0:6d:16:da:86:54:3f:23:d3:
40:66:9e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:56:43 2025 by rpki-client