Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/023NXf0NRLbsgezphpzZHNxZ3e4.roa
File: 023NXf0NRLbsgezphpzZHNxZ3e4.roa (raw, json)
Hash identifier: 5Oh3BvS9337aAFlKHkUHIB4jGr7DBQIIdxMScBWVcOU=
Subject key identifier: D3:6D:CD:5D:FD:0D:44:B6:EC:81:EC:E9:86:9C:D9:1C:DC:59:DD:EE
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 019427484C37897C68FC7EAD934B1774CF6B
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/023NXf0NRLbsgezphpzZHNxZ3e4.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51164
IP address blocks: 178.217.128.0/21 maxlen: 21
185.93.48.0/22 maxlen: 22
2001:67c:224::/48 maxlen: 48
2a0b:8880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4c:37:89:7c:68:fc:7e:ad:93:4b:17:74:cf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d36dcd5dfd0d44b6ec81ece9869cd91cdc59ddee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:37:10:e4:0b:f7:e4:a6:14:cd:c1:15:09:
99:8a:7b:64:5b:7f:6b:a1:2b:35:e9:cb:fa:28:22:
2d:4e:4d:88:73:e9:e3:83:71:ad:41:27:71:ec:87:
f5:72:5c:27:c8:97:21:b2:77:70:8c:df:b3:54:f5:
57:25:f5:56:35:ea:d0:89:28:c7:53:27:3b:7f:87:
14:2b:04:fc:69:41:c7:60:84:e5:60:e0:ba:cd:26:
ef:f5:f7:27:60:43:6f:47:ab:93:8a:5b:ba:f0:c4:
78:8d:05:b0:ba:ef:03:b0:e1:dc:97:fb:7d:05:d7:
3e:4b:31:9a:4d:68:8a:ef:d0:4d:05:65:cc:7f:af:
c4:de:00:c8:29:65:02:2e:48:0d:3b:c4:bd:b7:df:
c1:e5:b1:24:8a:77:7f:6a:25:8a:94:2f:a1:94:ba:
96:d9:89:22:b7:6c:2e:72:92:2c:8d:84:27:e6:88:
c3:72:1f:b8:99:bc:d9:48:08:50:45:5b:d6:b1:f3:
25:0c:d4:0f:4a:59:da:56:18:c0:cd:c2:63:df:45:
a4:20:bf:3e:9b:c4:57:68:b7:16:99:88:27:54:4a:
ce:b1:d2:68:1e:b7:33:58:3b:61:2a:30:37:19:01:
49:b7:f3:a5:01:3e:2e:3f:23:90:5a:8a:02:b1:cb:
f2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6D:CD:5D:FD:0D:44:B6:EC:81:EC:E9:86:9C:D9:1C:DC:59:DD:EE
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/023NXf0NRLbsgezphpzZHNxZ3e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.128.0/21
185.93.48.0/22
IPv6:
2001:67c:224::/48
2a0b:8880::/29
Signature Algorithm: sha256WithRSAEncryption
27:64:d0:26:c5:d8:5d:e2:a9:36:72:11:c1:c4:61:27:be:83:
dc:ca:fa:ca:c4:26:f7:46:a3:6f:2d:e8:ff:f1:3b:22:3d:b8:
16:6e:04:2a:f4:78:ff:ee:18:2f:da:9d:f1:d1:db:6b:5d:b6:
e1:38:f8:98:aa:26:5c:ea:67:32:aa:f6:d2:de:53:ff:6f:7f:
48:a1:6c:4a:e3:32:39:63:9d:4b:af:71:26:c4:11:f7:2f:b3:
af:6b:e6:18:3e:a3:b4:82:35:e3:d2:9b:85:a0:bf:5c:99:bd:
29:7e:85:93:8f:ef:18:b1:35:28:97:da:4a:48:b7:c6:fa:90:
04:2f:35:b4:dc:b8:49:74:90:2b:d5:34:31:d1:d0:dd:a3:fe:
82:03:62:bc:6c:92:c7:ba:2d:e9:4c:b1:61:4e:5f:5c:e8:ec:
7a:6f:75:05:a3:6c:db:66:51:32:db:ee:2a:0d:b8:57:5c:b9:
96:20:25:5e:d6:1f:6d:56:2f:5d:51:b3:8d:11:35:e5:0c:73:
c2:28:46:c4:99:39:11:36:d1:30:f0:f0:24:5d:28:d1:fd:f2:
5c:6e:ce:76:4b:d7:ce:53:bf:cd:80:51:71:2c:9b:8c:f0:22:
6e:30:3f:df:86:27:86:3f:0c:f5:e9:0f:fa:17:23:31:10:b3:
b1:a0:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:37:57 2025 by rpki-client