Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/NxP1yZRJkCqknWUlNsClQNUVfUo.roa
File: NxP1yZRJkCqknWUlNsClQNUVfUo.roa (raw, json)
Hash identifier: u6b4+QpHV+iYUkKSAV1ntHvZ0Uq8id30dDjn4p6jm1c=
Subject key identifier: 37:13:F5:C9:94:49:90:2A:A4:9D:65:25:36:C0:A5:40:D5:15:7D:4A
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 019425216F6C22AC7F2BC192D118187A8CD5
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/NxP1yZRJkCqknWUlNsClQNUVfUo.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50807
IP address blocks: 78.40.16.0/24 maxlen: 24
78.40.17.0/24 maxlen: 24
78.40.18.0/24 maxlen: 24
78.40.19.0/24 maxlen: 24
78.40.20.0/24 maxlen: 24
78.40.21.0/24 maxlen: 24
91.193.104.0/24 maxlen: 24
91.193.105.0/24 maxlen: 24
195.149.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6f:6c:22:ac:7f:2b:c1:92:d1:18:18:7a:8c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3713f5c99449902aa49d652536c0a540d5157d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:af:da:fa:3d:67:64:7a:ab:e7:e8:58:a2:
04:76:e3:96:74:f2:51:68:8d:3f:c6:f1:20:e8:1d:
9e:3e:f5:12:e4:65:ae:9f:cc:39:31:dc:12:a0:d2:
cf:34:0c:47:97:13:a4:1c:e8:9f:33:b8:df:56:11:
35:d5:e9:4f:8e:a7:ad:9e:3e:58:25:ad:b2:7a:04:
18:71:5a:f5:98:ce:d2:33:f7:cd:b7:ff:64:1c:61:
5c:c4:f9:6c:e2:ae:40:f7:e8:53:9e:12:2e:cf:76:
31:c5:7d:06:1c:cd:1f:86:03:d4:21:80:7b:a7:1d:
7a:22:82:f5:24:66:dd:f7:43:bb:2b:35:10:72:72:
37:43:79:47:1f:b9:d0:7f:14:22:77:e1:35:b8:73:
c5:b5:81:aa:de:dd:d2:64:01:24:5c:b7:a6:b4:4d:
93:d8:3f:5e:f2:b2:fa:82:21:13:f1:11:3a:5e:4d:
85:20:a1:f3:2f:26:f2:09:4d:9f:04:ca:f6:d8:13:
3b:e5:2e:5f:7e:8c:82:01:0a:51:8a:fe:94:c3:7e:
a7:8f:61:77:fd:90:10:ce:dc:50:d4:5f:0e:7a:59:
61:c7:93:97:eb:45:fd:ac:c3:b1:2f:d7:f5:66:7a:
ff:c8:fa:7c:b7:7a:cd:1d:29:44:e0:7d:fe:af:ff:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:13:F5:C9:94:49:90:2A:A4:9D:65:25:36:C0:A5:40:D5:15:7D:4A
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/NxP1yZRJkCqknWUlNsClQNUVfUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.16.0-78.40.21.255
91.193.104.0/23
195.149.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:60:47:b4:3e:a6:71:11:8d:df:c9:1e:32:4c:ee:9a:b2:ad:
7b:ef:fd:f2:38:cb:60:31:5c:66:d8:76:2f:32:98:a5:0c:0b:
3f:1f:21:27:a4:a7:30:9d:7e:32:d2:fe:25:e2:a1:75:87:91:
dd:6b:a7:db:af:8a:b4:a2:59:55:16:9c:37:cf:7f:b6:e4:c5:
a5:fb:ca:3e:e8:21:ec:77:2d:b2:e2:d7:f7:90:e5:1a:c9:81:
9d:4d:a4:42:45:04:ac:32:78:38:a3:54:0c:83:b2:01:d7:ea:
b7:d6:81:72:f7:fd:d6:db:ab:86:c4:0f:5c:eb:cd:06:bf:14:
0b:ce:47:e9:b2:49:6a:b7:e0:3e:01:30:ca:11:88:4a:41:d5:
8c:36:83:31:c0:b8:d5:2b:1e:a2:f1:09:d9:92:bc:c5:71:56:
0f:8d:fc:bf:14:03:93:7d:cc:d0:c1:88:e7:3b:5a:88:6b:ac:
d3:3e:34:2c:9e:83:ad:74:09:03:09:5d:d2:4d:5f:5e:26:ea:
e2:2d:62:d0:90:68:6a:89:9f:be:51:c4:92:9e:e0:82:2c:83:
d2:18:ce:9f:3e:f6:33:5f:cb:53:b5:0b:3a:8d:a6:ee:b7:51:
ad:56:b8:51:6c:e9:c2:f1:a3:ed:46:19:9a:46:82:ee:5c:9f:
48:b3:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:12:06 2025 by rpki-client