Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/N2O3G_GjXXDuF5KsAQP8xo3uglY.roa
File: N2O3G_GjXXDuF5KsAQP8xo3uglY.roa (raw, json)
Hash identifier: LPPRO1GUfKnRSIYM+kHZ8F+xYKU/zo1v5q3jTNnb/Fg=
Subject key identifier: 37:63:B7:1B:F1:A3:5D:70:EE:17:92:AC:01:03:FC:C6:8D:EE:82:56
Certificate issuer: /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial: 0195D4C7A980B558C6800BC055F8184D6494
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/N2O3G_GjXXDuF5KsAQP8xo3uglY.roa
Signing time: Wed 26 Mar 2025 23:26:49 +0000
ROA not before: Wed 26 Mar 2025 23:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50401
IP address blocks: 134.249.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:c7:a9:80:b5:58:c6:80:0b:c0:55:f8:18:4d:64:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Validity
Not Before: Mar 26 23:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3763b71bf1a35d70ee1792ac0103fcc68dee8256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:9b:e1:84:93:8f:36:ff:b2:f1:fa:9b:c2:
9a:d8:a3:5b:4c:a1:2b:28:79:52:51:f3:05:ec:f2:
0e:fb:89:84:40:28:6e:b0:37:ff:61:f2:a8:9b:af:
07:a7:e2:27:5b:ef:5b:33:4a:69:ef:8c:a9:df:24:
66:88:d5:2f:4e:40:a7:3d:af:bb:df:a7:26:52:34:
09:a9:bf:17:24:38:ab:7d:8f:5d:7e:3b:b4:a7:00:
7c:d0:02:68:4d:e4:f2:f0:b7:a1:df:b2:a3:45:0d:
a3:bb:81:a0:a9:b6:15:cd:ef:0f:18:3c:dd:ee:1a:
ca:d4:8c:1e:c0:d0:45:dc:0a:8c:fe:64:d5:02:b5:
ca:37:98:b7:69:83:70:8a:f5:89:47:b2:2a:3f:4c:
4b:ba:6a:c6:32:e9:3f:19:68:ac:1f:19:e8:52:95:
ef:fb:0a:e1:51:16:02:d2:2f:37:03:9e:e9:3c:29:
2f:ce:84:b5:5c:2c:f6:b5:ff:96:69:79:3b:08:56:
81:c9:24:af:86:8d:f7:ea:ae:b0:b3:58:26:4f:8a:
c5:aa:f1:c2:99:e1:91:8c:c2:fc:1a:6c:cd:0f:d4:
66:47:ae:5f:c6:13:cd:29:83:27:78:97:d5:e4:f8:
3c:0b:b7:96:ff:8a:5f:f2:c9:c7:e6:97:2e:19:af:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:63:B7:1B:F1:A3:5D:70:EE:17:92:AC:01:03:FC:C6:8D:EE:82:56
X509v3 Authority Key Identifier:
keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/N2O3G_GjXXDuF5KsAQP8xo3uglY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.249.4.0/23
Signature Algorithm: sha256WithRSAEncryption
02:ed:5e:98:0d:3d:da:df:d2:dd:0e:ce:b7:62:79:35:c5:44:
6f:7e:34:15:05:69:f5:55:62:05:e7:ea:d4:b9:18:8e:7b:03:
b8:2e:41:79:86:5b:48:f8:de:d9:46:97:0c:c3:ab:cd:68:a4:
4f:f8:37:6b:62:c5:47:36:a3:c6:ab:47:97:77:3e:c5:35:2c:
ae:a1:e0:ae:af:4a:0e:8a:1a:fe:fc:43:ec:d6:01:ed:24:61:
b9:db:f1:8f:31:f6:ed:7d:56:b8:96:a0:00:af:3c:c4:d5:1a:
f9:ed:16:85:ca:56:94:18:a5:55:29:05:95:ba:9c:86:9f:6f:
05:e0:06:78:19:be:e5:70:5b:9f:5e:b3:d6:07:78:fc:c1:5a:
e1:e4:e6:63:ca:0f:c7:7c:e4:50:83:0f:29:e6:ad:8f:57:f1:
b9:8b:0e:32:5f:00:0d:b6:4d:07:72:5f:cb:1a:15:d2:bb:5c:
97:c1:4b:e9:ba:08:30:8d:b4:a7:ec:b4:62:d0:80:8e:60:48:
f8:bf:7a:b9:2e:a4:e2:cb:54:8f:c1:4a:d4:10:4f:a9:3a:f0:
3a:f4:70:ef:65:85:fb:e5:df:0e:70:0c:50:9e:3c:ca:5c:f4:
13:6a:a4:64:25:af:03:ec:17:e3:20:2f:ab:bb:62:3b:dd:23:
51:5f:d9:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXUx6mAtVjGgAvAVfgYTWSUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjliOWUyNTY1ODBjNDM0NGJiMjQxNDQ1YjRkNTJlNTRm
ZGQ1MGIwHhcNMjUwMzI2MjMyNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzYzYjcxYmYxYTM1ZDcwZWUxNzkyYWMwMTAzZmNjNjhkZWU4MjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpmb4YSTjzb/svH6m8Ka2KNbTKEr
KHlSUfMF7PIO+4mEQChusDf/YfKom68Hp+InW+9bM0pp74yp3yRmiNUvTkCnPa+7
36cmUjQJqb8XJDirfY9dfju0pwB80AJoTeTy8Leh37KjRQ2ju4GgqbYVze8PGDzd
7hrK1IwewNBF3AqM/mTVArXKN5i3aYNwivWJR7IqP0xLumrGMuk/GWisHxnoUpXv
+wrhURYC0i83A57pPCkvzoS1XCz2tf+WaXk7CFaBySSvho336q6ws1gmT4rFqvHC
meGRjML8GmzND9RmR65fxhPNKYMneJfV5Pg8C7eW/4pf8snH5pcuGa+n0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDdjtxvxo11w7heSrAED/MaN7oJWMB8GA1UdIwQY
MBaAFFK5ueJWWAxDRLskFEW01S5U/dULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAt
ZGUwNWM1NDA0NWJiLzEvTjJPM0dfR2pYWER1RjVLc0FRUDh4bzN1Z2xZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAtZGUwNWM1NDA0NWJi
LzEvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhvkEMA0G
CSqGSIb3DQEBCwUAA4IBAQAC7V6YDT3a39LdDs63Ynk1xURvfjQVBWn1VWIF5+rU
uRiOewO4LkF5hltI+N7ZRpcMw6vNaKRP+DdrYsVHNqPGq0eXdz7FNSyuoeCur0oO
ihr+/EPs1gHtJGG52/GPMfbtfVa4lqAArzzE1Rr57RaFylaUGKVVKQWVupyGn28F
4AZ4Gb7lcFufXrPWB3j8wVrh5OZjyg/HfORQgw8p5q2PV/G5iw4yXwANtk0Hcl/L
GhXSu1yXwUvpuggwjbSn7LRi0ICOYEj4v3q5LqTiy1SPwUrUEE+pOvA69HDvZYX7
5d8OcAxQnjzKXPQTaqRkJa8D7BfjIC+ru2I73SNRX9lo
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:46:51 2025 by rpki-client