Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/Ncjyog8MF3WbF2yJkOiT3QGNrY0.roa
File: Ncjyog8MF3WbF2yJkOiT3QGNrY0.roa (raw, json)
Hash identifier: mac69omVU5l4vKMkEn8yNVakFQh8bBKDgGibhl+5Pew=
Subject key identifier: 35:C8:F2:A2:0F:0C:17:75:9B:17:6C:89:90:E8:93:DD:01:8D:AD:8D
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 019422FC41371848680E0F16CD875EB21082
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/Ncjyog8MF3WbF2yJkOiT3QGNrY0.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44466
IP address blocks: 195.80.60.0/24 maxlen: 24
195.80.61.0/24 maxlen: 24
195.80.62.0/24 maxlen: 24
195.80.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:41:37:18:48:68:0e:0f:16:cd:87:5e:b2:10:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35c8f2a20f0c17759b176c8990e893dd018dad8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:c3:b3:6c:79:eb:ab:e8:6e:f8:5e:74:1d:
98:5c:52:49:fc:0d:ed:bd:5e:7b:55:15:9e:16:0c:
cf:f7:38:5e:c1:bd:ea:af:c4:da:9d:5f:56:1d:40:
24:4c:81:7c:af:18:ff:8d:d1:68:30:4d:cc:18:9a:
5f:7f:d1:d5:9f:6e:35:06:19:99:38:be:14:0c:85:
74:c9:51:dd:9e:0e:34:1f:01:8d:0b:46:28:0e:90:
31:00:59:d1:a2:30:ac:2a:6f:85:b1:82:a7:97:7d:
04:f7:e3:e7:ac:40:7b:29:84:cb:ea:22:33:97:b9:
d8:12:bd:c0:95:9e:7f:cf:fc:3a:ed:63:03:e6:72:
66:60:cc:bf:a8:32:a2:bd:40:d7:05:74:01:9a:68:
b7:29:18:8f:d2:3d:41:aa:01:ec:48:a7:1b:40:05:
ca:7a:d0:b3:18:a4:52:c6:4e:d0:4e:d7:e1:03:ea:
da:d3:15:cd:d4:15:09:87:6e:46:46:97:5a:34:16:
43:54:13:7e:e1:9e:9e:15:4a:cb:88:2f:be:60:51:
a6:6f:5c:9c:44:ce:a0:63:25:20:8b:17:52:f4:cf:
c3:ca:43:1f:bb:ed:d2:f1:20:7e:76:80:e3:8e:9c:
e4:05:59:84:b9:02:ae:b0:3b:07:cd:b2:c0:27:ae:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:F2:A2:0F:0C:17:75:9B:17:6C:89:90:E8:93:DD:01:8D:AD:8D
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/Ncjyog8MF3WbF2yJkOiT3QGNrY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.60.0/22
Signature Algorithm: sha256WithRSAEncryption
16:1d:15:09:08:54:89:31:d8:23:0c:27:33:39:c6:32:d5:a9:
07:1e:62:dc:c1:72:9c:6d:93:29:82:6e:ce:2e:c6:9e:81:a8:
3e:f5:69:1b:d6:d5:bd:b9:1a:cf:4a:cd:95:2f:d1:ed:c1:63:
66:74:ba:73:46:6e:8c:64:56:40:2d:43:bf:40:eb:c0:c8:9e:
e5:a6:58:ee:6c:fa:fc:5b:8f:eb:23:7c:03:ea:7c:7f:a0:ee:
b1:4b:e5:25:b7:96:49:81:53:50:8e:c4:17:7e:ec:01:37:5c:
f6:83:27:1f:aa:dd:0a:55:ce:fd:bf:3c:c3:45:5f:17:5d:33:
a5:c3:25:32:ef:57:fa:5f:d4:f9:5b:78:a4:95:ed:36:7a:de:
53:a9:8d:40:92:5e:8b:84:fb:46:d4:aa:ed:4c:a8:45:27:e5:
ab:b8:bf:da:a6:5b:fc:b7:d7:a0:4f:dc:b4:10:3d:76:56:b4:
92:5a:ab:b3:f3:03:67:3d:4b:83:a0:ec:b1:f8:e3:9c:d9:d5:
59:47:63:de:bc:c7:38:38:ad:26:78:2f:62:80:af:c4:77:27:
16:b2:80:bb:e5:1e:1c:49:8d:99:3c:c2:30:4c:e3:cd:a0:39:
39:3d:de:48:d5:49:d0:87:87:f1:4a:ed:24:c5:c0:d1:09:79:
b8:1e:c5:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/EE3GEhoDg8WzYdeshCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjExYTE4MGRmMTc5OTRlNDhhZDMzMTg3MmNmZDAwYWQ5
YWJhMDQwHhcNMjUwMTAxMTc0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWM4ZjJhMjBmMGMxNzc1OWIxNzZjODk5MGU4OTNkZDAxOGRhZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY7Ds2x566vobvhedB2YXFJJ/A3t
vV57VRWeFgzP9zhewb3qr8TanV9WHUAkTIF8rxj/jdFoME3MGJpff9HVn241BhmZ
OL4UDIV0yVHdng40HwGNC0YoDpAxAFnRojCsKm+FsYKnl30E9+PnrEB7KYTL6iIz
l7nYEr3AlZ5/z/w67WMD5nJmYMy/qDKivUDXBXQBmmi3KRiP0j1BqgHsSKcbQAXK
etCzGKRSxk7QTtfhA+ra0xXN1BUJh25GRpdaNBZDVBN+4Z6eFUrLiC++YFGmb1yc
RM6gYyUgixdS9M/DykMfu+3S8SB+doDjjpzkBVmEuQKusDsHzbLAJ67GRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDXI8qIPDBd1mxdsiZDok90Bja2NMB8GA1UdIwQY
MBaAFF3xGhgN8XmU5IrTMYcs/QCtmroEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTct
NmJjZTc3OTljYmVhLzEvTmNqeW9nOE1GM1diRjJ5SmtPaVQzUUdOclkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTctNmJjZTc3OTljYmVh
LzEvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw1A8MA0G
CSqGSIb3DQEBCwUAA4IBAQAWHRUJCFSJMdgjDCczOcYy1akHHmLcwXKcbZMpgm7O
Lsaegag+9Wkb1tW9uRrPSs2VL9HtwWNmdLpzRm6MZFZALUO/QOvAyJ7lpljubPr8
W4/rI3wD6nx/oO6xS+Ult5ZJgVNQjsQXfuwBN1z2gycfqt0KVc79vzzDRV8XXTOl
wyUy71f6X9T5W3ikle02et5TqY1Akl6LhPtG1KrtTKhFJ+WruL/aplv8t9egT9y0
ED12VrSSWquz8wNnPUuDoOyx+OOc2dVZR2PevMc4OK0meC9igK/EdycWsoC75R4c
SY2ZPMIwTOPNoDk5Pd5I1UnQh4fxSu0kxcDRCXm4HsXX
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:37 2025 by rpki-client