Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/NJaxBq74jsy6lmV1PZazizbRVW8.roa
File: NJaxBq74jsy6lmV1PZazizbRVW8.roa (raw, json)
Hash identifier: EcXsmMuzrFLzoXxAIYzIgOc73ikKA5Ft4ZM4pjDRgFo=
Subject key identifier: 34:96:B1:06:AE:F8:8E:CC:BA:96:65:75:3D:96:B3:8B:36:D1:55:6F
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 01941F8C1463F6FA2B17F175C9E73368C7CF
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/NJaxBq74jsy6lmV1PZazizbRVW8.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29491
IP address blocks: 91.193.164.0/22 maxlen: 22
94.45.128.0/19 maxlen: 24
194.187.108.0/22 maxlen: 22
194.187.110.0/24 maxlen: 24
195.137.202.0/23 maxlen: 23
195.191.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:14:63:f6:fa:2b:17:f1:75:c9:e7:33:68:c7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3496b106aef88eccba9665753d96b38b36d1556f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:9f:e5:32:c2:9e:55:fc:37:bc:09:74:77:
ee:84:72:0b:33:51:c9:75:0b:ef:04:aa:7b:d9:a4:
de:ca:06:24:f1:f5:71:c6:64:49:8b:e9:94:55:f4:
fa:fe:a1:95:91:ac:48:19:05:c0:38:2b:ab:ce:c2:
e1:bb:8f:2b:62:ce:b3:0f:73:eb:63:71:f2:e6:4b:
fd:a8:d9:cc:e0:bd:2c:e2:ee:89:7b:21:4b:36:e1:
8a:6a:8b:1a:ff:df:3c:01:d4:f2:d2:64:7b:30:27:
f3:db:55:19:08:1b:da:d9:7b:cd:d8:20:29:bc:22:
c2:1e:26:8a:d8:e7:b2:0c:5e:2d:20:f5:05:c5:ec:
78:b6:c5:39:7b:95:d8:18:79:83:40:0e:a6:31:78:
3a:ad:f7:dd:78:65:2f:27:95:fb:54:a2:49:b5:fc:
f5:27:3f:b8:b9:fd:95:27:31:51:d3:fb:41:ef:b4:
b7:e2:9f:d3:71:14:24:4e:27:b9:ac:1f:55:48:1b:
11:2f:e0:90:48:31:cd:f3:43:d0:0e:b1:42:90:bd:
73:21:81:0f:30:f5:4f:77:ac:ef:97:b5:a0:1e:16:
a2:ed:31:f9:9e:ef:d9:8e:48:3e:cb:15:10:4b:f4:
10:01:94:bb:63:fe:06:c7:4e:77:31:7a:a2:d4:71:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:B1:06:AE:F8:8E:CC:BA:96:65:75:3D:96:B3:8B:36:D1:55:6F
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/NJaxBq74jsy6lmV1PZazizbRVW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.164.0/22
94.45.128.0/19
194.187.108.0/22
195.137.202.0/23
195.191.214.0/23
Signature Algorithm: sha256WithRSAEncryption
66:ab:3b:5e:62:93:20:f2:75:68:df:6c:10:8e:30:17:3c:c9:
29:56:4f:04:3d:90:4b:bb:ec:66:8e:58:86:87:55:36:29:c0:
51:65:21:ab:f6:16:5c:39:31:22:18:ef:be:bf:04:01:e6:66:
9b:dd:48:ff:7a:ff:66:bf:0c:c3:23:a3:21:ba:56:5a:05:95:
12:3c:b5:54:08:8c:a5:ac:2c:a2:e4:bc:80:fd:a9:8a:c9:ae:
43:67:5a:5f:59:3f:e3:ae:ad:2d:43:cc:78:3c:7d:fe:22:9e:
e7:ed:cf:d5:c6:de:33:26:d6:24:e6:14:c2:e8:e9:12:91:02:
63:70:3f:57:de:27:17:e7:ad:dc:6a:99:a3:8c:77:5a:39:2c:
e3:03:17:28:e4:ae:c8:48:c5:5c:58:bd:1e:d0:b1:78:90:cb:
1b:b1:0a:db:2a:2e:c3:a8:9b:4e:ae:a0:cc:4c:96:97:18:17:
be:5d:08:02:d4:3b:9c:b1:ab:eb:71:46:24:dd:4b:57:78:7a:
f7:8b:3d:0b:dc:dc:fe:3a:77:80:89:8e:b9:8c:54:6a:5a:3a:
17:3a:70:2e:a0:0e:80:ef:7d:b3:3e:a3:38:ae:63:ec:8d:d2:
d6:81:4d:9a:e3:da:cf:fe:40:92:15:98:c8:05:2e:dd:99:40:
ca:7c:ee:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:43 2025 by rpki-client