Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/NT1QDrMKsOVILzcOXnhpnfJyMhI.roa
File: NT1QDrMKsOVILzcOXnhpnfJyMhI.roa (raw, json)
Hash identifier: 9+BV5zYO8wTAitnkhk1uaQv1Ka5SPfIsNZ8LLhRy68U=
Subject key identifier: 35:3D:50:0E:B3:0A:B0:E5:48:2F:37:0E:5E:78:69:9D:F2:72:32:12
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 019424459D5B05350351B8762B4E4A4D89F5
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/NT1QDrMKsOVILzcOXnhpnfJyMhI.roa
Signing time: Wed 01 Jan 2025 23:48:49 +0000
ROA not before: Wed 01 Jan 2025 23:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60175
IP address blocks: 91.212.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9d:5b:05:35:03:51:b8:76:2b:4e:4a:4d:89:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=353d500eb30ab0e5482f370e5e78699df2723212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5c:54:5c:44:db:1e:33:46:44:02:84:91:d5:
6d:e1:dd:6e:f9:4d:ca:64:fe:bd:2a:c9:6c:b2:d1:
81:89:14:f5:e8:f7:11:33:96:d1:19:7e:3e:df:17:
24:f4:af:08:31:f9:92:ed:72:4b:77:34:c9:dd:b9:
86:00:bc:58:71:8d:07:a5:c5:1d:89:10:b2:5b:b4:
ff:d2:59:02:b4:a3:cd:8d:37:3d:39:36:3b:6a:80:
05:d8:08:0a:0d:66:85:20:eb:ee:7d:ba:ec:30:9b:
6c:6c:31:2a:4a:5f:01:df:b0:34:cd:99:42:76:34:
e9:e6:0e:7c:ac:2f:f1:9a:9d:3d:7c:55:e1:9c:9a:
68:41:c5:15:51:3a:b0:dc:3d:4d:43:7f:a0:7c:23:
a0:29:58:9c:d6:df:56:79:f5:50:8c:e9:cf:de:13:
91:a8:f8:46:1d:1b:c5:2f:e2:97:2e:15:69:dd:68:
1d:24:27:67:3b:b3:9f:e0:74:11:aa:af:ca:47:17:
57:9b:b7:f0:d5:7b:de:cc:e1:e3:60:0e:d2:3e:30:
5c:75:dd:7d:e5:93:65:44:64:26:e8:eb:e5:e8:4a:
90:af:75:52:de:d9:19:72:ce:ea:93:31:b8:70:de:
72:ec:10:62:30:23:64:4e:d6:b7:7c:2b:3e:56:f2:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3D:50:0E:B3:0A:B0:E5:48:2F:37:0E:5E:78:69:9D:F2:72:32:12
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/NT1QDrMKsOVILzcOXnhpnfJyMhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.83.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:21:be:98:3c:48:7f:e1:43:0a:45:30:dd:0d:00:88:f4:89:
57:5d:fb:32:b1:e2:89:10:f1:d0:cc:d7:04:1c:34:29:bb:60:
74:27:e0:c4:59:82:1f:26:da:a6:87:0f:38:45:7b:a7:7a:31:
a9:2f:22:56:a3:1b:cd:e2:3f:8c:16:fd:73:72:ed:1d:1b:21:
21:00:b6:a7:ad:d1:35:27:7d:09:20:71:68:e7:74:26:5c:1b:
1a:ec:62:de:bc:5a:1e:59:6f:60:cb:b0:b9:53:67:cc:67:14:
e3:1d:bf:3a:03:a4:70:47:80:4f:d4:3b:90:c5:86:22:ff:0f:
e5:d8:b5:27:1e:3b:7d:72:df:ac:ea:70:78:05:29:f7:5b:13:
07:35:de:af:95:e1:fc:e5:99:80:01:66:c7:cf:9a:97:b5:07:
1f:81:6f:ae:76:b2:bb:b9:fa:1f:db:1a:00:d8:ff:be:ad:64:
6e:29:6f:11:1b:60:76:80:e4:a1:28:00:a8:26:4e:3a:23:46:
8f:32:de:b8:53:db:c0:3c:8c:83:e6:8c:bc:44:86:d0:3c:3b:
7b:a1:4b:e5:75:d7:ff:84:63:27:4f:12:3d:53:71:c1:29:eb:
99:8a:e9:5a:c5:3c:7a:82:0c:12:5f:97:0f:eb:45:4b:3f:17:
82:ef:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:35 2025 by rpki-client