Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AdNUvngXFgA53cI9pxB0pPf50Ns.roa
File: AdNUvngXFgA53cI9pxB0pPf50Ns.roa (raw, json)
Hash identifier: 5HmLaUBhTI/4CYbuhXAm374HKhT+n7KG1crqq0rcON8=
Subject key identifier: 01:D3:54:BE:78:17:16:00:39:DD:C2:3D:A7:10:74:A4:F7:F9:D0:DB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824EB1D2237D9A9A99BEE02F6DB4BE3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AdNUvngXFgA53cI9pxB0pPf50Ns.roa
Signing time: Thu 02 Jan 2025 17:51:35 +0000
ROA not before: Thu 02 Jan 2025 17:51:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 194.87.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:eb:1d:22:37:d9:a9:a9:9b:ee:02:f6:db:4b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01d354be7817160039ddc23da71074a4f7f9d0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:b2:cc:d1:39:c6:0f:b6:71:0f:9a:ca:bb:
94:42:ad:00:d6:52:9b:d1:47:47:0d:be:46:95:00:
42:da:70:e5:69:53:d9:be:96:2d:7f:fd:b9:11:cc:
f1:f4:37:ac:d7:b6:aa:26:b5:ed:44:7b:a0:dd:40:
e6:ae:f7:25:f6:b0:3b:6b:87:37:a6:b0:99:94:ac:
12:02:ff:4e:e8:9d:81:0c:1a:77:ca:c1:b6:7e:6d:
5a:63:16:4e:78:43:c3:d5:d2:80:cb:48:e0:f5:90:
20:9d:ed:c3:c8:b0:6e:8f:d4:a1:5e:5a:09:2c:1e:
e9:50:79:e7:df:78:93:2b:57:17:a3:e5:cb:97:4f:
87:84:f2:98:d0:3c:59:28:e8:3f:20:4c:24:dc:64:
bc:87:1d:31:ef:d0:86:56:f6:bc:f1:72:e7:64:98:
a5:ae:a3:00:b4:85:82:f2:bf:29:69:ef:db:18:4f:
be:49:c5:d4:39:bb:05:77:94:b0:40:b8:b4:1c:f1:
e7:b7:d4:89:11:35:d0:d0:99:f1:2a:10:38:06:ea:
91:07:57:87:8f:3b:55:8b:46:af:8d:27:56:dc:0d:
fb:d4:17:4c:9e:f8:e0:e2:d8:b9:c8:4d:6f:b0:a2:
76:4c:74:79:25:3e:bf:18:dd:75:e6:89:ef:88:ee:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D3:54:BE:78:17:16:00:39:DD:C2:3D:A7:10:74:A4:F7:F9:D0:DB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AdNUvngXFgA53cI9pxB0pPf50Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.135.0/24
Signature Algorithm: sha256WithRSAEncryption
79:5e:8a:d6:dc:fd:f9:e0:5e:02:ae:0b:f9:de:99:f7:0b:aa:
5b:8d:66:94:1d:8b:91:a2:ed:b9:b2:f6:cf:53:a4:14:96:8b:
c4:a4:9f:7a:52:c4:ee:bf:f2:23:05:c4:bc:f3:68:1a:dd:f2:
0f:c6:ab:a3:66:d2:25:2b:e4:c7:d8:9c:e8:ab:8f:be:6f:4a:
09:be:6f:83:72:89:00:9c:01:9e:5f:39:8e:58:09:7b:56:c5:
8c:9f:fa:2f:e0:46:10:d1:2d:b1:91:44:73:ad:5d:1f:de:c3:
b1:b2:32:ca:e6:d4:83:f6:a6:9e:c9:57:ef:17:69:f6:96:76:
57:30:e0:61:7e:b0:21:c2:35:8b:f6:65:2a:e1:86:88:ba:2e:
9b:3c:8f:fc:80:78:35:56:4b:37:0d:27:36:23:80:5d:be:54:
5c:56:9c:c9:2f:66:9b:fb:c7:e7:9f:32:ed:71:7b:3e:d7:5c:
9f:a5:70:f6:c8:5c:ff:05:7a:7d:f5:e9:31:71:31:2d:0e:a2:
7f:b7:db:4e:33:cd:0c:5a:e0:95:e0:58:73:76:0c:77:95:85:
ab:10:a4:79:02:7a:09:2e:f2:c5:52:2c:00:33:34:5f:8f:2a:
d7:7c:55:2d:68:69:34:9d:74:b2:fc:32:1c:b1:25:3a:18:ae:
11:e1:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:36 2025 by rpki-client