Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/NeBz797_B5ESEnGcmvd7nUsUi1U.roa
File: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (raw, json)
Hash identifier: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=
Subject key identifier: 35:E0:73:EF:DE:FF:07:91:12:12:71:9C:9A:F7:7B:9D:4B:14:8B:55
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 0194228D6270868ACF1A3A18B135C4B7BEC7
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/NeBz797_B5ESEnGcmvd7nUsUi1U.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 2a10:8802::/36 maxlen: 36
2a10:8804::/36 maxlen: 36
2a10:8804:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:62:70:86:8a:cf:1a:3a:18:b1:35:c4:b7:be:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35e073efdeff07911212719c9af77b9d4b148b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ba:13:8d:d1:f1:3b:1a:93:37:16:70:68:81:
f2:f4:5d:a0:df:06:e8:40:78:0d:52:bc:4b:f5:6a:
b5:ac:ac:c4:d0:e7:99:85:c2:a4:c5:2a:1a:ac:95:
d3:12:97:f2:dc:87:8d:b9:22:f8:a4:1a:2d:d0:ca:
54:a1:7f:96:79:9c:0d:b7:dc:f6:96:13:37:08:78:
10:f1:3f:47:68:9e:68:65:8c:7d:e8:d5:45:a9:4a:
80:18:c1:4b:87:5a:90:1f:2c:8c:e1:e4:49:63:44:
b8:75:f3:63:7e:23:fd:3e:67:1a:cc:f9:94:3d:a1:
b4:ea:cf:73:a1:98:43:12:6c:a0:18:cb:97:d5:44:
59:56:c9:66:0b:fe:1d:fb:b6:bc:44:9d:0a:bb:60:
a6:91:a0:b2:36:fa:e1:09:3e:bf:fe:ef:1a:5a:be:
71:cb:1b:8f:3e:83:d2:ad:37:08:99:47:fa:bc:f2:
8d:6a:11:08:ba:c3:f5:f2:9e:48:b9:9a:cf:8d:7b:
1e:02:6f:58:3c:2d:b7:e6:2d:7a:83:9e:89:4d:7b:
f8:72:05:09:24:55:a6:14:c0:96:f7:bf:e1:e2:5a:
0d:4d:69:5f:90:f6:69:1f:32:5e:bf:04:d9:01:e2:
41:60:32:5c:a7:1e:ef:94:9c:4c:f7:80:76:1e:2f:
9c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E0:73:EF:DE:FF:07:91:12:12:71:9C:9A:F7:7B:9D:4B:14:8B:55
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/NeBz797_B5ESEnGcmvd7nUsUi1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:8802::/36
2a10:8804::/36
2a10:8804:2000::/36
Signature Algorithm: sha256WithRSAEncryption
87:1e:85:30:00:9b:d1:ef:99:13:a3:d1:c6:c9:90:4f:2c:f9:
3c:91:36:3c:65:df:46:55:8a:4f:84:61:19:6e:ba:cc:df:81:
6d:82:12:ec:eb:8a:4d:52:42:26:b3:d3:ef:80:2f:34:15:a7:
ed:67:bc:69:11:91:1e:1f:05:58:42:a3:fa:4e:80:99:f4:5e:
a9:34:ff:fd:8e:b3:ff:d3:42:d9:1b:e5:aa:c6:5a:66:fc:e2:
65:e0:0c:a7:f1:de:8b:05:7c:f6:c6:57:c9:3d:9a:58:33:05:
01:84:45:e1:d2:a2:e4:eb:e2:01:0c:dc:70:fb:2d:39:8c:55:
a6:ea:42:7e:04:a9:be:24:f5:8b:e3:8b:ae:f9:e1:16:aa:3a:
a2:32:8c:1c:f9:96:3c:cc:74:0b:7a:71:78:70:51:02:e5:7c:
5e:c8:33:23:30:cb:f6:39:66:ca:76:f3:f7:a0:82:66:b7:e6:
5e:d2:69:e7:63:bc:7b:72:4f:93:07:24:01:11:76:a1:e4:f2:
a6:5f:53:e7:a6:10:c9:0d:f5:1d:72:31:2d:5e:ad:05:81:b3:
fe:8b:2f:fc:47:c7:e3:a4:7c:a3:7e:3e:65:af:6a:62:36:36:
3c:ac:76:32:5d:69:97:7f:c2:05:f7:d2:50:3a:2e:ef:67:c3:
62:08:3e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:08 2025 by rpki-client