Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/naFGULOSYvt_ys0vvTSfwr2rqtk.roa
File: naFGULOSYvt_ys0vvTSfwr2rqtk.roa (raw, json)
Hash identifier: b43Uckjczt2PCUz41jkHhIKmF+uwsILXTS5gZeF8UNU=
Subject key identifier: 9D:A1:46:50:B3:92:62:FB:7F:CA:CD:2F:BD:34:9F:C2:BD:AB:AA:D9
Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial: 019422FB68E9B47BD8FA256606DC4EAFB27B
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/naFGULOSYvt_ys0vvTSfwr2rqtk.roa
Signing time: Wed 01 Jan 2025 17:48:09 +0000
ROA not before: Wed 01 Jan 2025 17:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52129
IP address blocks: 91.207.212.0/23 maxlen: 23
91.209.104.0/24 maxlen: 24
143.55.144.0/21 maxlen: 24
185.183.28.0/22 maxlen: 22
185.183.28.0/24 maxlen: 24
185.183.29.0/24 maxlen: 24
185.183.30.0/24 maxlen: 24
185.183.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:68:e9:b4:7b:d8:fa:25:66:06:dc:4e:af:b2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
Validity
Not Before: Jan 1 17:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9da14650b39262fb7fcacd2fbd349fc2bdabaad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:35:77:22:b3:c7:af:21:19:0a:e7:0d:9d:b1:
92:b0:00:bb:d4:0b:8a:f8:56:fb:fc:7a:c9:8e:5c:
b3:57:5a:4d:0c:6e:77:36:9b:ed:c3:cf:e9:4e:4b:
48:9d:b5:20:8b:9b:4e:2d:2b:6f:0b:41:8b:05:ea:
fe:8b:37:77:d8:e5:a6:c2:f9:99:d6:27:eb:4a:e9:
7b:2c:c6:44:0f:ef:a4:2c:fd:8b:56:92:0c:76:dc:
b7:2c:37:77:96:f0:89:e2:76:eb:d4:fd:e4:53:83:
b1:29:39:bf:60:2e:35:84:7a:26:1e:60:39:18:60:
ff:54:b4:24:c9:a1:20:24:02:17:26:37:ea:12:dd:
96:9d:66:8e:6e:43:96:7e:6d:c6:43:13:cc:9d:c5:
e8:8b:68:5b:e9:7a:6d:1a:2c:49:2f:62:02:cf:7f:
60:7b:b6:52:23:52:8b:e7:2c:21:2a:61:9a:7f:56:
82:a1:db:25:67:55:d1:78:15:01:50:54:f5:1c:9c:
43:27:07:b8:f8:e5:eb:d6:18:e1:44:12:25:8f:6a:
b8:99:af:42:4a:65:58:c1:99:c7:7e:5e:50:be:b9:
63:01:62:f7:72:18:7f:50:32:22:6d:b7:95:ee:23:
b7:1e:48:6b:46:cd:a1:71:9f:ed:9e:cc:56:b3:a5:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A1:46:50:B3:92:62:FB:7F:CA:CD:2F:BD:34:9F:C2:BD:AB:AA:D9
X509v3 Authority Key Identifier:
keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/naFGULOSYvt_ys0vvTSfwr2rqtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.212.0/23
91.209.104.0/24
143.55.144.0/21
185.183.28.0/22
Signature Algorithm: sha256WithRSAEncryption
be:be:fc:89:b0:b2:1b:7a:e7:cc:3a:27:8a:75:5e:7f:11:57:
d6:98:bc:8d:5a:66:72:48:08:12:c3:c5:3d:fe:78:05:f5:e3:
be:13:df:5e:d8:e6:0a:cd:62:35:92:2c:d4:b7:1c:d2:dd:83:
54:4e:ce:1b:ce:fa:d3:ed:55:f9:20:e7:3b:d9:b2:23:e6:69:
29:af:fc:79:6f:2f:cc:e9:47:dd:08:3d:18:c9:aa:f9:25:58:
cb:c7:78:20:40:7d:a1:9c:ea:f2:3b:4c:51:fb:2f:e7:10:cd:
d5:1c:8e:33:f7:36:1c:c8:67:fa:6a:92:4f:a3:a5:ef:96:08:
60:64:c1:3c:b4:62:cb:9c:b7:02:d7:25:a6:d1:7b:c0:db:91:
f2:3a:3c:97:38:35:c5:cb:30:be:5c:72:28:e7:aa:47:bc:7d:
c4:23:e2:98:95:e4:2d:08:cb:64:9a:1e:f0:b9:c6:8e:39:b5:
7a:f4:fc:da:46:86:30:48:76:dc:50:f2:8c:03:22:2a:aa:9f:
a3:30:f5:0d:36:d9:79:cf:6e:ea:72:a4:f6:28:d9:84:a8:4c:
d0:24:71:a5:e4:32:fb:16:7b:5c:7d:60:4f:75:8d:4f:9d:c1:
ab:89:7e:56:05:fa:26:02:4a:6f:6a:5f:00:9e:e0:e0:81:ff:
cc:6b:41:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:40:58 2025 by rpki-client