Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NaoyfKLRNJXWP3mE9ldVKwcMUoE.roa
File: NaoyfKLRNJXWP3mE9ldVKwcMUoE.roa (raw, json)
Hash identifier: AsjcKXh2MjTpd+OD74yXEPALN6nZvhDtDUkVKF2Vh/w=
Subject key identifier: 35:AA:32:7C:A2:D1:34:95:D6:3F:79:84:F6:57:55:2B:07:0C:52:81
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274832FCAD62205C54003973B3662962
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NaoyfKLRNJXWP3mE9ldVKwcMUoE.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399989
IP address blocks: 45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:32:fc:ad:62:20:5c:54:00:39:73:b3:66:29:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35aa327ca2d13495d63f7984f657552b070c5281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:b6:04:21:ff:83:c4:c9:1a:d5:56:57:56:
c5:fc:04:15:d6:18:af:0a:db:5c:5c:e0:af:39:9e:
75:af:11:82:a8:5f:57:41:fe:bc:e8:fd:02:f9:69:
29:33:3f:0e:ca:0f:25:57:16:84:d8:f7:80:db:e2:
ed:a4:17:ec:01:00:17:5d:af:ea:f3:f5:7f:b7:3b:
82:ce:74:b9:9c:45:02:fb:4e:e5:82:1c:d8:05:c8:
d4:7e:40:b5:d2:be:f7:7f:55:3f:6e:d1:85:40:9d:
5f:89:62:e1:0e:ce:e0:4b:86:18:74:32:f2:83:05:
c5:40:a9:c7:60:be:2a:df:14:0a:85:2c:11:7e:1b:
36:d2:73:5c:bd:11:a0:f8:bf:02:c8:23:69:1b:4f:
7a:39:e3:eb:b7:a7:0a:ea:af:bd:1a:59:5d:11:fe:
49:2b:80:47:0f:e7:9a:57:c6:83:af:11:f8:83:fa:
18:d0:02:12:57:00:56:db:03:27:6a:a5:86:d6:ca:
82:24:aa:db:13:65:69:4a:6f:78:b6:c0:97:e6:d7:
29:43:0f:0d:df:6d:93:15:c5:85:37:01:3b:9c:67:
67:f9:99:7c:5d:62:5e:a9:16:39:f1:93:b9:8d:78:
c3:e0:cd:dd:da:24:90:85:10:3f:46:6b:43:a4:45:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:32:7C:A2:D1:34:95:D6:3F:79:84:F6:57:55:2B:07:0C:52:81
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NaoyfKLRNJXWP3mE9ldVKwcMUoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:9c:2f:13:99:5d:3d:43:f7:a1:fc:13:4c:64:36:2c:22:81:
d6:3e:db:2a:e9:4d:a6:0b:91:b4:f1:33:b3:1d:bc:0f:44:01:
44:6c:79:45:11:c3:c0:be:8c:46:9a:2e:e0:00:40:1b:4e:66:
9d:10:94:be:04:62:a2:96:0e:38:81:38:8f:6c:9b:95:47:ca:
3c:a3:63:d0:f0:4d:37:58:9a:66:05:0e:86:cb:7d:7e:da:8e:
af:73:3e:a2:c3:08:f6:a0:2e:b9:4c:6c:a4:53:5e:77:fe:da:
bb:2a:90:6f:34:34:94:a0:f1:72:d1:d2:b8:7d:41:89:c5:0b:
78:11:32:ce:2f:da:7e:76:3d:15:ce:93:63:35:a6:bc:b0:5e:
a3:42:9d:f4:42:83:d1:96:12:95:8b:4b:2a:1a:c9:c0:28:81:
3f:f7:09:49:ca:2a:10:3b:cb:cb:b0:b5:93:f2:29:4b:db:51:
98:97:fe:bc:c9:80:9c:a2:04:c7:28:99:72:28:cb:02:7d:af:
ce:b3:42:39:ee:a0:49:49:22:2e:58:9a:c6:30:e5:9f:34:d6:
e2:b5:e3:b0:1e:d0:ce:ce:5a:84:70:bc:b9:86:a2:8c:6f:51:
e8:f0:1c:20:bf:ee:61:07:0c:ee:89:72:ee:f7:9f:7a:08:9d:
a4:03:28:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:52:06 2025 by rpki-client