Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/NP32WyfLeYLas1Z4fKTZriuHjvY.roa
File: NP32WyfLeYLas1Z4fKTZriuHjvY.roa (raw, json)
Hash identifier: 4h/Yftv2raMAxvFI+CPfL3bUOHVTko1YvlzTzC+9xKU=
Subject key identifier: 34:FD:F6:5B:27:CB:79:82:DA:B3:56:78:7C:A4:D9:AE:2B:87:8E:F6
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 019426D9D88ABF980B2540DB6A9362DC4995
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/NP32WyfLeYLas1Z4fKTZriuHjvY.roa
Signing time: Thu 02 Jan 2025 11:49:58 +0000
ROA not before: Thu 02 Jan 2025 11:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44285
IP address blocks: 185.171.52.0/24 maxlen: 24
185.171.54.0/24 maxlen: 24
185.171.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d8:8a:bf:98:0b:25:40:db:6a:93:62:dc:49:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34fdf65b27cb7982dab356787ca4d9ae2b878ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:ad:8c:49:50:1d:be:44:e4:80:e2:14:0d:
77:61:26:83:b2:98:63:d9:d2:2a:9f:b0:52:0c:1b:
32:29:0c:d2:f4:3a:0e:e5:e9:fb:f0:17:74:0a:00:
4d:be:7b:92:0b:c0:06:6c:9a:4e:2b:9f:aa:31:a3:
2b:16:21:ce:4e:24:95:4f:74:01:b9:c5:fc:f5:0e:
7b:b8:d4:1e:82:0c:c3:1b:49:8b:76:ec:b4:60:08:
84:6d:e7:3b:f9:66:81:47:35:6e:e2:22:92:0b:25:
4c:41:c1:98:fb:e4:41:3e:1d:00:2d:a7:20:6c:3c:
f0:59:ac:eb:f0:54:eb:98:d0:ed:12:23:3f:4b:a6:
c1:e3:d9:7d:9c:a0:73:8a:40:47:f7:f1:b8:36:c0:
7a:0d:ad:d8:b8:77:b5:b1:21:bb:fa:2a:08:38:56:
d3:8e:09:09:8d:cb:02:9d:63:9c:1b:ec:80:e4:6d:
e2:0a:2e:14:f8:32:c6:d0:e2:bc:b2:5a:43:44:d6:
0d:a7:c9:2c:26:2d:12:72:7c:b8:74:b4:80:c3:47:
2d:ca:52:81:3e:88:72:1c:8d:31:1b:40:de:4c:3d:
fc:4f:11:be:64:8f:62:b2:75:05:42:53:c0:a0:3a:
f0:cd:e9:8d:1f:02:5b:70:3d:1c:99:ac:e1:b4:cb:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FD:F6:5B:27:CB:79:82:DA:B3:56:78:7C:A4:D9:AE:2B:87:8E:F6
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/NP32WyfLeYLas1Z4fKTZriuHjvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.52.0/24
185.171.54.0/23
Signature Algorithm: sha256WithRSAEncryption
94:f9:58:2d:cb:78:91:28:79:b3:ac:a9:a2:00:60:3b:aa:fe:
40:9f:09:30:88:ad:b3:97:b7:17:dd:d0:82:10:26:b8:c2:ef:
e4:76:0d:d1:4b:a5:1b:0f:9c:0a:0c:d6:88:60:15:b0:cd:60:
30:03:19:40:72:b6:2c:c4:e7:68:19:cf:2a:b9:9e:eb:af:3c:
af:80:b0:c4:75:b9:27:0b:76:5d:2d:60:68:74:17:75:18:90:
b6:c9:c5:d4:e4:1b:69:e2:25:ca:bb:46:ed:ab:2b:87:bc:42:
9a:02:d2:01:bb:5f:42:d1:5b:9a:33:e3:c9:59:8c:25:cd:2f:
a6:eb:d5:ff:5b:86:cd:92:7a:f4:72:88:73:24:b4:1f:91:16:
df:d2:a3:ad:02:07:63:8a:19:f2:8a:fc:d8:50:9e:f2:c6:2c:
e7:df:52:83:9b:12:91:00:fe:52:80:95:c1:8e:fb:26:1c:ca:
ca:62:be:5e:15:1c:f2:b4:0c:f9:e0:d1:6a:61:67:14:c6:5c:
df:4b:bc:f3:98:4b:04:7d:7f:a8:a8:0f:d9:8f:80:fb:c9:a5:
46:a1:7c:d6:2d:7a:64:8e:05:26:8d:86:39:38:b0:cb:16:b8:
90:42:68:3b:69:18:e1:f8:3c:c9:1c:5a:5c:02:0e:fe:66:7a:
9b:bb:c5:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQm2diKv5gLJUDbapNi3EmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzY2YjA1OGMwOTY3NTNhMzRhZDYyNWQ1MzI3NWNkMmRi
YTViMzMwHhcNMjUwMTAyMTE0OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGZkZjY1YjI3Y2I3OTgyZGFiMzU2Nzg3Y2E0ZDlhZTJiODc4ZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3WtjElQHb5E5IDiFA13YSaDsphj
2dIqn7BSDBsyKQzS9DoO5en78Bd0CgBNvnuSC8AGbJpOK5+qMaMrFiHOTiSVT3QB
ucX89Q57uNQeggzDG0mLduy0YAiEbec7+WaBRzVu4iKSCyVMQcGY++RBPh0ALacg
bDzwWazr8FTrmNDtEiM/S6bB49l9nKBzikBH9/G4NsB6Da3YuHe1sSG7+ioIOFbT
jgkJjcsCnWOcG+yA5G3iCi4U+DLG0OK8slpDRNYNp8ksJi0Scny4dLSAw0ctylKB
PohyHI0xG0DeTD38TxG+ZI9isnUFQlPAoDrwzemNHwJbcD0cmazhtMtsjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDT99lsny3mC2rNWeHyk2a4rh472MB8GA1UdIwQY
MBaAFBx2awWMCWdTo0rWJdUydc0tulszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzIt
ODE5MTdkZmZkY2Q3LzEvTlAzMld5ZkxlWUxhczFaNGZLVFpyaXVIanZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzItODE5MTdkZmZkY2Q3
LzEvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuas0AwQB
uas2MA0GCSqGSIb3DQEBCwUAA4IBAQCU+Vgty3iRKHmzrKmiAGA7qv5AnwkwiK2z
l7cX3dCCECa4wu/kdg3RS6UbD5wKDNaIYBWwzWAwAxlAcrYsxOdoGc8quZ7rrzyv
gLDEdbknC3ZdLWBodBd1GJC2ycXU5Btp4iXKu0btqyuHvEKaAtIBu19C0VuaM+PJ
WYwlzS+m69X/W4bNknr0cohzJLQfkRbf0qOtAgdjihnyivzYUJ7yxizn31KDmxKR
AP5SgJXBjvsmHMrKYr5eFRzytAz54NFqYWcUxlzfS7zzmEsEfX+oqA/Zj4D7yaVG
oXzWLXpkjgUmjYY5OLDLFriQQmg7aRjh+DzJHFpcAg7+Znqbu8Ub
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:07 2025 by rpki-client