Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NmQVmEqCpri1Jxmhvf9P9PUf5mY.roa
File: NmQVmEqCpri1Jxmhvf9P9PUf5mY.roa (raw, json)
Hash identifier: S4R/kix99nm1s6hBeMtPgTv1mglqW2eWTtszOHBJvuE=
Subject key identifier: 36:64:15:98:4A:82:A6:B8:B5:27:19:A1:BD:FF:4F:F4:F5:1F:E6:66
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0195F7BEC708A325361FC403459FB098A98B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NmQVmEqCpri1Jxmhvf9P9PUf5mY.roa
Signing time: Wed 02 Apr 2025 18:23:49 +0000
ROA not before: Wed 02 Apr 2025 18:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211927
IP address blocks: 194.14.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f7:be:c7:08:a3:25:36:1f:c4:03:45:9f:b0:98:a9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 2 18:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=366415984a82a6b8b52719a1bdff4ff4f51fe666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:32:69:ae:85:87:86:cf:f8:5c:99:9f:c6:
a2:88:84:c1:0f:79:d1:b5:dd:c9:ca:13:f1:bc:79:
24:7a:0b:fc:35:b7:51:c6:d1:f5:8b:58:b9:90:ac:
23:dd:ea:0b:d3:7b:54:45:2a:c2:1b:87:28:c4:a5:
22:55:57:b4:3c:c2:e3:aa:a4:7f:91:e8:99:b3:1e:
90:97:76:fd:44:c6:aa:c0:58:4a:fb:36:1d:87:95:
e9:c3:03:a3:af:4b:32:10:d2:4b:ec:c2:3c:54:d8:
68:4c:7d:c2:89:c4:01:ab:60:91:c9:53:c0:74:a4:
93:ac:4a:34:0a:6c:93:ee:6d:da:66:4a:cc:05:d8:
62:c9:67:e6:c3:91:24:e8:cc:1a:a3:f6:18:2a:f2:
bd:8f:0a:59:b7:b9:de:da:28:7d:09:09:0f:86:4b:
07:9a:8f:c2:94:23:ab:34:cc:ac:50:3f:1c:aa:75:
f4:8d:49:47:3d:73:ab:15:1c:e6:25:0e:c8:78:19:
f3:0b:fc:da:f0:3e:f6:9b:10:fe:9c:58:a6:64:29:
6f:ea:36:0c:1a:dd:10:d3:14:d0:8e:7d:bb:e6:40:
69:f9:86:76:a7:bc:73:de:4d:fd:20:c5:a3:99:17:
3a:67:56:e0:5e:68:6a:0e:62:93:54:20:5f:b6:82:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:64:15:98:4A:82:A6:B8:B5:27:19:A1:BD:FF:4F:F4:F5:1F:E6:66
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NmQVmEqCpri1Jxmhvf9P9PUf5mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.47.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b9:6c:51:e3:fe:ff:74:0b:65:9f:2e:68:df:14:7a:3f:67:
69:fc:10:43:af:83:87:85:aa:ca:c9:e3:e6:27:87:68:61:7a:
e8:07:d6:9d:be:23:30:ff:0b:80:8f:c3:d2:4e:48:04:f7:ea:
33:ac:ad:da:37:41:d3:d8:2e:af:9a:dd:2f:70:78:c7:3e:0f:
74:a4:3b:0f:e0:bd:8a:62:af:94:52:ab:d4:30:93:51:59:de:
a9:3d:b3:a3:6e:29:e2:15:2d:11:62:ee:19:1c:b6:a6:d2:0a:
58:44:3c:99:b0:e6:4b:29:70:9b:28:33:4a:bf:a8:dd:20:f9:
2b:06:c7:32:b9:fd:8d:bb:c2:db:3f:2a:67:c2:d3:2f:37:98:
73:bc:a0:f8:98:7e:fa:c8:ba:8f:ed:12:24:b3:42:be:03:73:
b7:46:d0:34:c2:33:d3:cb:12:09:43:61:da:02:c9:17:96:81:
e9:52:57:11:19:2a:08:b6:1f:bd:c3:f1:d3:12:31:b1:65:1b:
83:3e:49:9e:42:a9:08:b9:73:e7:db:aa:86:c3:21:9d:c1:d6:
b1:7b:04:c6:09:68:87:10:ff:fc:8f:08:3f:c1:77:71:82:fc:
9a:a6:50:f6:d3:85:96:9d:9c:e2:39:2c:45:5b:cb:63:5b:7e:
6e:1a:8f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:26:53 2025 by rpki-client