Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/NDyhuvBiD7Dcf-VvAcHjeKP4Wls.roa
File: NDyhuvBiD7Dcf-VvAcHjeKP4Wls.roa (raw, json)
Hash identifier: oeDnEopXVy5MJcNbGxGeEZ1ceng1jmSd304y/xLBjoc=
Subject key identifier: 34:3C:A1:BA:F0:62:0F:B0:DC:7F:E5:6F:01:C1:E3:78:A3:F8:5A:5B
Certificate issuer: /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial: 019422203ECE52EC1CCC4458295D09E1F634
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/NDyhuvBiD7Dcf-VvAcHjeKP4Wls.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 193.164.14.0/24 maxlen: 24
195.47.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3e:ce:52:ec:1c:cc:44:58:29:5d:09:e1:f6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=343ca1baf0620fb0dc7fe56f01c1e378a3f85a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:be:a9:7f:41:73:84:07:32:31:7b:b8:2e:
f6:47:90:64:e2:67:d7:26:e3:1c:86:3f:f3:29:7c:
f4:48:57:8d:e2:b8:76:86:af:0c:1e:6d:15:a5:99:
9d:60:14:04:5e:c5:5c:fd:31:a4:f6:15:ef:12:cc:
d3:f1:fc:de:3b:da:9c:0f:11:d9:f3:7f:c0:58:a3:
34:03:96:5a:80:1d:20:26:bf:77:fa:90:5e:06:df:
b2:f8:8c:c4:ce:b3:cc:7d:d7:0b:77:2c:6f:34:ba:
22:0f:53:9a:83:c3:53:f9:80:58:0e:61:f2:d0:ee:
e8:da:1f:59:75:6a:df:c1:07:fc:3e:ff:69:e0:3c:
b5:66:56:2f:fd:fc:33:5b:a0:7a:60:5f:08:f8:93:
48:00:c8:65:62:13:2e:3a:1c:c5:63:8f:e7:c8:02:
5d:24:6e:80:26:8d:89:35:99:5a:d4:8b:1e:b6:6a:
d6:24:a4:84:f3:57:68:65:d2:dc:c6:be:02:eb:4b:
f0:ea:a8:a8:1b:64:15:d2:e0:b0:6e:a2:5e:81:8f:
ba:1a:e0:5a:02:01:b9:ad:1c:05:3b:ad:a1:04:23:
ba:db:e3:51:d1:85:5a:08:91:3f:4e:6c:db:93:8e:
7b:a3:fe:6f:db:cc:6a:50:29:f0:b8:82:c8:90:36:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3C:A1:BA:F0:62:0F:B0:DC:7F:E5:6F:01:C1:E3:78:A3:F8:5A:5B
X509v3 Authority Key Identifier:
keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/NDyhuvBiD7Dcf-VvAcHjeKP4Wls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.14.0/24
195.47.207.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cf:6e:d7:26:38:45:cd:6a:91:42:b3:95:f8:be:b6:fa:04:
63:0c:94:47:46:1f:b8:7b:95:01:86:07:76:b9:10:df:f2:12:
93:d2:95:ca:4b:ee:5f:fe:2d:9b:ac:98:98:2f:da:49:91:c9:
73:83:de:3d:aa:9f:49:dd:60:63:7c:c5:ab:9a:fa:fc:bd:9c:
c3:2f:91:6a:8d:e2:3f:54:93:6b:94:e4:68:8e:64:88:bf:9e:
4b:b2:52:7b:4b:2b:66:8a:55:31:ac:db:49:9b:85:34:71:43:
68:f7:af:bf:24:df:d0:93:ee:e7:52:e5:b5:e0:86:41:cc:a8:
80:69:21:20:2d:c8:7e:09:b7:39:49:46:61:9b:4b:b6:11:b8:
e7:0a:77:d6:16:50:0a:52:a1:09:51:31:f1:94:cb:6f:28:18:
70:74:76:ad:b1:01:a9:61:38:d8:39:80:7a:95:57:47:a6:05:
9c:2d:b2:cb:75:66:c2:b2:e2:ba:73:47:94:6e:9a:4d:95:6b:
ac:46:a1:5e:21:51:a2:b2:6e:cf:37:a1:3a:23:22:0c:cf:d6:
64:33:d0:30:df:3c:11:b6:57:f6:18:cd:eb:ed:c6:c6:4f:c1:
0d:29:a9:fc:20:ba:31:dc:12:d8:74:05:d5:64:ce:a6:37:71:
32:c3:65:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:35 2025 by rpki-client