Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa
File: NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa (raw, json)
Hash identifier: Jv+k94qXBgLa6tQsUzrVhcRNbmkihG2wPv1tzN8y6Bk=
Subject key identifier: 36:D9:09:F5:79:EB:AE:E8:4A:B6:0F:AA:41:F1:22:18:17:17:20:5F
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 01941F8C34E4E0171F9816C370BDDCA46902
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 286
IP address blocks: 193.17.185.0/24 maxlen: 24
193.17.186.0/24 maxlen: 24
195.234.152.0/24 maxlen: 24
2001:67c:1514::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:34:e4:e0:17:1f:98:16:c3:70:bd:dc:a4:69:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36d909f579ebaee84ab60faa41f122181717205f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:fb:dc:b7:d7:b2:87:1d:a9:bb:89:d9:b1:
28:3f:0e:ac:f0:a1:49:85:b7:2f:df:0f:ce:89:14:
76:65:f1:00:71:a4:a7:5e:12:82:ee:22:5e:8c:95:
7b:d0:a4:26:92:e1:7a:d6:98:bf:a2:f9:84:5d:9d:
3b:b0:fa:0b:72:90:8b:62:8d:81:8d:36:bf:da:e2:
58:cd:20:46:bc:0c:06:53:21:72:14:c5:35:10:38:
ed:ef:30:2e:b4:fb:5b:f6:58:c3:00:48:4b:1c:83:
33:2d:40:a6:ca:f9:86:5e:16:ab:29:03:ba:56:a3:
8f:74:0b:18:07:78:fc:01:3e:9d:c2:b2:99:a0:18:
24:5b:d2:db:5e:c1:93:87:7f:f9:07:81:fd:de:85:
b8:a7:62:4f:1e:df:81:3e:fd:53:4f:07:d5:f7:76:
3b:9f:a0:4f:8f:ae:f3:2b:c7:ed:71:90:08:ae:ce:
08:82:dd:76:29:8e:8c:9e:d6:12:01:ce:fc:c3:df:
a0:31:13:38:ae:c8:16:0e:55:14:66:0c:ac:fa:77:
7f:55:53:2f:d0:4c:55:11:d6:ea:e8:9a:47:29:95:
63:c3:56:30:03:ef:a9:06:07:64:e6:86:57:26:b6:
31:7f:43:ab:b2:e0:24:83:1d:7f:a9:09:ca:75:78:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D9:09:F5:79:EB:AE:E8:4A:B6:0F:AA:41:F1:22:18:17:17:20:5F
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.185.0-193.17.186.255
195.234.152.0/24
IPv6:
2001:67c:1514::/48
Signature Algorithm: sha256WithRSAEncryption
0a:79:5a:df:76:4c:f2:27:81:c2:cf:70:9e:79:0e:58:98:8e:
cc:39:90:a3:1a:f9:d8:34:68:aa:91:25:54:29:1e:aa:d6:7e:
68:64:e3:00:13:d8:b7:79:85:cf:d5:ad:e2:e3:6e:58:0c:79:
15:0e:a3:3f:40:82:44:7d:9e:3c:5a:c2:aa:84:d6:f5:88:7e:
99:21:9b:0d:1e:98:3b:fe:47:21:56:8c:d0:42:97:0a:d3:44:
1d:01:69:c3:55:55:72:02:fc:a9:1d:3d:bd:ac:63:08:39:ef:
ca:72:63:f4:32:28:54:93:94:2e:01:4e:84:4b:c4:63:fb:d0:
8e:79:d9:de:30:a3:2e:3f:2f:6c:51:59:0e:6f:0a:ab:de:f2:
40:03:05:ac:33:ff:25:4a:41:8d:59:1a:f2:b1:43:ab:39:6f:
a3:89:92:6d:2b:4d:64:1d:4b:75:c5:d2:1d:c5:00:ab:13:ed:
53:07:4d:80:9f:fb:35:87:22:84:57:71:5c:e6:c0:5e:7c:bf:
5f:1b:b2:73:e1:f2:6f:8e:81:9b:42:98:e2:1f:72:3e:fe:da:
69:2f:73:8f:46:e4:f6:36:da:c2:19:aa:bd:94:87:08:73:bd:
fa:d7:e1:59:60:78:72:9f:b8:22:5d:eb:89:c7:56:3a:22:a8:
36:46:c1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:29:37 2025 by rpki-client