Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/NZqpS7ihNb3Dq5XLh1hQyMnsmco.roa
File: NZqpS7ihNb3Dq5XLh1hQyMnsmco.roa (raw, json)
Hash identifier: dxLnkibf8r6CzNLwl84p6n1m2AroGWLuyQA0+Tx7YAs=
Subject key identifier: 35:9A:A9:4B:B8:A1:35:BD:C3:AB:95:CB:87:58:50:C8:C9:EC:99:CA
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019425218F52761421CF0599FDF503751397
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/NZqpS7ihNb3Dq5XLh1hQyMnsmco.roa
Signing time: Thu 02 Jan 2025 03:49:03 +0000
ROA not before: Thu 02 Jan 2025 03:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41989
IP address blocks: 85.239.152.0/22 maxlen: 22
178.239.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8f:52:76:14:21:cf:05:99:fd:f5:03:75:13:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jan 2 03:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=359aa94bb8a135bdc3ab95cb875850c8c9ec99ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:e8:0d:6b:1e:fd:8f:f2:b4:11:fa:c7:cf:
3c:d2:5b:06:4a:de:0a:3d:4d:e0:8f:59:9b:1d:56:
8d:e8:c3:f0:a3:bb:08:95:49:7f:64:6d:63:22:be:
e1:f4:04:fa:e4:23:81:02:ac:42:91:cb:43:08:e9:
a5:cb:6f:7b:29:82:b8:a0:af:e2:0c:32:b1:ea:9f:
cc:26:8c:c7:7f:e4:4a:6d:0d:0b:67:c1:e1:09:92:
0a:fe:7f:b9:fa:9c:b4:db:9f:07:7d:e6:56:63:f8:
cb:79:3e:08:22:cd:4e:e7:f6:78:0c:6c:60:0b:5b:
85:c7:22:6e:b8:ed:5b:9b:cf:3d:eb:73:e2:9c:02:
db:bb:fb:f3:81:c7:a5:fd:e8:fd:ff:94:d6:bd:da:
00:e9:1c:7b:75:ca:4d:53:2d:b9:5c:a8:d0:8b:43:
0d:a6:10:22:97:19:b4:39:e8:63:12:16:d4:74:05:
3f:4c:89:ba:29:d0:23:64:00:b3:9c:1b:4f:a4:08:
8d:5d:d9:8c:fa:0d:28:d9:c3:b9:b6:01:15:e1:0b:
94:47:f4:da:db:78:9c:06:1b:ea:e8:14:e7:29:e6:
c2:28:07:38:f7:c1:60:d3:5b:11:e2:55:2b:72:8c:
2c:f6:b3:87:dd:00:76:7d:dc:29:b9:f5:3d:05:7d:
37:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:A9:4B:B8:A1:35:BD:C3:AB:95:CB:87:58:50:C8:C9:EC:99:CA
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/NZqpS7ihNb3Dq5XLh1hQyMnsmco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.152.0/22
178.239.112.0/20
Signature Algorithm: sha256WithRSAEncryption
bc:16:bd:60:70:7f:15:c5:4d:6d:a5:1b:70:49:d3:7f:ea:4a:
fa:b9:06:88:cf:d4:ba:da:73:e6:51:0e:29:16:c8:73:87:59:
2a:b8:68:15:c6:8c:c6:91:03:f1:d3:3c:e1:6b:ea:c9:18:86:
c7:cb:6f:a3:37:44:a0:c9:3a:78:3c:1b:61:39:03:b2:52:d6:
46:5e:9c:49:0e:b2:86:1a:b5:86:af:22:6b:49:34:d0:55:48:
4c:f4:90:4e:de:43:0d:11:e7:c7:0e:90:f3:f7:e4:d8:5e:fb:
f8:20:5e:3f:7e:f0:f2:a0:97:81:57:8c:49:54:50:6f:69:6f:
9d:65:b6:bd:92:2c:04:ed:e1:7e:3e:fb:93:12:55:00:88:ae:
6b:6f:d2:9d:c8:f7:2e:fe:24:ab:5d:22:c2:65:03:b6:bf:35:
8a:20:c1:5d:9b:d4:67:0a:9b:c0:67:bf:3b:60:f4:de:55:f6:
3e:21:69:34:79:3e:99:28:85:eb:83:e5:c9:9c:d9:3d:c9:34:
c5:df:d1:98:68:60:cc:89:81:67:3a:68:c9:97:5f:d1:c9:74:
d2:69:93:9e:36:92:72:5f:75:6b:95:4b:85:74:f2:89:de:77:
91:b4:96:32:c1:45:9f:e9:f7:92:e2:89:c3:9b:27:44:04:86:
b4:8c:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:29 2025 by rpki-client