Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/kaShJaLkR3B81NHQpcp6VAc_nlg.roa
File: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (raw, json)
Hash identifier: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=
Subject key identifier: 91:A4:A1:25:A2:E4:47:70:7C:D4:D1:D0:A5:CA:7A:54:07:3F:9E:58
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 019425FC67F30E040E777B0EC65B579FE9D9
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/kaShJaLkR3B81NHQpcp6VAc_nlg.roa
Signing time: Thu 02 Jan 2025 07:48:06 +0000
ROA not before: Thu 02 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51803
IP address blocks: 31.129.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:67:f3:0e:04:0e:77:7b:0e:c6:5b:57:9f:e9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Jan 2 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91a4a125a2e447707cd4d1d0a5ca7a54073f9e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:a8:89:af:2b:1b:7a:5a:94:66:48:de:5d:
da:e5:df:1e:d3:93:c9:e7:ff:51:56:82:98:e4:a6:
d1:fe:09:5c:93:35:b8:1c:5d:05:03:ac:48:5b:1f:
c7:be:50:64:7c:80:8a:7d:52:dd:2c:31:11:15:63:
a0:1d:76:55:53:89:8e:71:e6:e2:be:63:47:73:e4:
fc:af:e8:0a:cc:76:55:25:77:a7:0f:4d:65:2d:0c:
df:48:d0:85:34:fd:3b:f9:2b:01:2c:8d:20:11:3c:
ce:34:1b:c3:75:57:f2:51:03:35:c3:cf:80:ba:d1:
f8:ed:6f:7e:b7:fe:09:ce:43:01:61:eb:15:34:e4:
40:f0:ca:42:fb:ad:e6:2c:e1:e2:93:af:9e:e6:10:
1a:fd:a4:61:4c:44:23:1c:2c:90:63:d4:65:98:d7:
08:d4:fd:9b:db:41:e1:42:47:97:e8:31:2c:ed:53:
72:53:21:65:74:dc:ad:43:cb:a3:6a:c9:e6:fe:66:
27:f2:4e:b5:10:a0:26:d9:a5:61:23:40:19:2f:25:
73:6a:34:e3:4e:25:78:20:65:76:7a:46:35:39:51:
8a:95:d1:31:4e:ff:8f:be:b3:12:f8:99:9d:07:df:
02:ad:c2:4e:c9:de:28:ec:f4:9e:04:0f:aa:e3:ac:
2f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A4:A1:25:A2:E4:47:70:7C:D4:D1:D0:A5:CA:7A:54:07:3F:9E:58
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/kaShJaLkR3B81NHQpcp6VAc_nlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.230.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e7:19:f0:64:7b:6d:7a:25:fd:0c:5e:aa:66:d5:ca:d9:da:
94:31:03:25:db:94:ff:34:1d:2a:94:b3:96:f8:b2:84:b0:26:
9d:b0:51:b1:41:26:dc:b6:b1:44:87:4c:53:61:f6:fd:73:93:
7a:51:1a:e8:db:e6:86:3e:d4:2a:fe:4a:e6:5b:11:2a:c5:b1:
d8:3e:92:ea:d0:b5:40:ba:a7:60:e3:c4:7c:0c:f2:8a:8f:5e:
c1:45:2a:62:b0:c3:50:6a:2d:fc:be:e9:4a:a7:e4:9f:73:8a:
b6:87:74:d9:71:f0:cc:f0:e6:2e:ea:d0:aa:2a:d1:6f:a5:a0:
0a:0b:3f:62:c3:f3:18:7c:6a:00:47:75:3c:7b:61:73:67:0a:
c2:e6:ee:4c:03:db:e8:cf:6c:52:3e:49:b3:ee:87:df:d3:76:
00:64:56:df:e1:c1:08:c6:4f:d4:1d:cc:b4:d2:7a:b6:b5:0b:
a9:2d:ed:ea:a1:fb:80:47:cd:76:aa:eb:2e:53:b9:04:8f:c8:
57:19:c4:ce:13:1c:d7:e6:02:9b:a4:76:47:49:5f:09:d5:36:
54:28:d2:76:18:d0:bc:6c:b0:8c:55:03:3c:8b:35:4c:f1:98:
35:79:d2:21:d3:68:ec:6e:65:b3:59:5c:30:4c:bd:8f:84:a3:
61:39:3b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:28 2025 by rpki-client