Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/NbaALD0q3dEG97u3Hxf4a1Hu0XU.roa
File: NbaALD0q3dEG97u3Hxf4a1Hu0XU.roa (raw, json)
Hash identifier: I2cRj+89A0JU13KVmdh4JlmOsFRbyD7Lf9jI3qtGRKU=
Subject key identifier: 35:B6:80:2C:3D:2A:DD:D1:06:F7:BB:B7:1F:17:F8:6B:51:EE:D1:75
Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial: 019425FCC1A6F7F43BAFF8EE0FE9A2B247BF
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/NbaALD0q3dEG97u3Hxf4a1Hu0XU.roa
Signing time: Thu 02 Jan 2025 07:48:29 +0000
ROA not before: Thu 02 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12859
IP address blocks: 45.152.251.0/24 maxlen: 24
91.247.184.0/24 maxlen: 24
161.51.101.0/24 maxlen: 24
188.241.247.0/24 maxlen: 24
193.160.154.0/24 maxlen: 24
2a14:5bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c1:a6:f7:f4:3b:af:f8:ee:0f:e9:a2:b2:47:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Validity
Not Before: Jan 2 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35b6802c3d2addd106f7bbb71f17f86b51eed175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:be:30:41:66:75:a8:97:dd:11:99:19:e2:
2c:90:58:af:74:57:95:4d:06:f4:5b:9c:60:b4:ef:
e4:d4:b8:98:71:97:cd:33:43:b4:62:af:cf:e7:30:
3a:62:fc:79:36:03:63:bb:4d:17:69:bd:ec:c2:c5:
e2:48:3e:17:08:18:84:a6:58:9b:b7:e8:10:9b:32:
c5:e8:45:28:0b:dc:a6:68:db:77:79:ad:7b:88:74:
67:d3:c0:5e:ce:9e:e3:26:19:95:9d:74:2b:db:eb:
f4:5c:3c:3a:54:dd:7a:3e:5f:51:af:e5:57:44:e3:
d4:aa:ec:06:f9:c5:77:79:21:6f:79:1d:7c:87:43:
e9:4d:fb:d5:2d:ff:0e:86:a9:cf:1c:25:f4:44:89:
dc:e1:b9:0e:25:e7:9e:e3:ed:40:37:97:d1:f0:a7:
fb:46:f6:dc:ad:55:09:75:60:cf:63:5e:d0:31:70:
c1:91:3e:a8:cb:e8:48:c2:2c:b3:06:4c:c8:22:83:
0b:44:f6:58:0e:08:ab:25:d4:c8:c8:7e:92:1d:93:
e1:84:0b:bd:92:d8:fa:01:00:e4:00:a5:d0:8d:23:
c3:00:00:b3:4a:d0:27:a9:77:15:cb:da:3b:dd:8e:
f5:3b:a9:18:df:2b:61:00:02:16:34:9b:ea:da:4e:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B6:80:2C:3D:2A:DD:D1:06:F7:BB:B7:1F:17:F8:6B:51:EE:D1:75
X509v3 Authority Key Identifier:
keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/NbaALD0q3dEG97u3Hxf4a1Hu0XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.251.0/24
91.247.184.0/24
161.51.101.0/24
188.241.247.0/24
193.160.154.0/24
IPv6:
2a14:5bc0::/29
Signature Algorithm: sha256WithRSAEncryption
70:52:05:58:b5:da:39:e2:c6:b0:95:49:8f:2e:bc:a8:d2:50:
fa:3e:74:d9:48:52:1d:b0:6a:88:de:ac:9e:bc:2a:5e:76:e1:
0e:15:0e:e8:6a:f9:23:90:68:51:b8:fe:6d:f1:3a:b3:32:4e:
c4:39:3b:52:f8:be:8e:20:c3:83:18:05:35:2a:84:b0:2a:18:
ea:c1:34:04:84:76:a9:5e:2a:bf:dd:05:82:76:32:3c:3b:be:
3d:f3:04:3a:fe:92:b4:7a:88:a2:9f:9c:1d:51:4a:77:ad:d3:
26:1a:f4:e3:9f:be:a4:97:06:5d:57:17:19:ff:75:fa:08:09:
18:be:72:5e:93:04:f2:7c:7b:b3:c7:a3:b2:8b:36:f9:3b:bb:
cd:ac:03:e4:9a:cf:18:22:b9:1b:0a:bd:58:d4:62:ec:e5:10:
60:a5:e9:75:18:6d:67:e2:aa:3a:19:f7:eb:da:69:d2:5d:52:
30:2f:9b:41:4f:e3:e6:d0:92:a6:09:4a:d8:81:15:44:20:01:
f5:b5:1a:30:10:28:e5:09:70:f5:d3:3c:e5:37:ba:c6:83:fa:
48:b4:9e:36:3f:9b:65:42:82:07:29:77:da:90:31:aa:d1:6d:
84:89:9a:cb:e5:4f:3a:7f:a1:20:27:3c:e5:ce:5b:7e:02:ae:
7d:ef:a0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:11 2025 by rpki-client