Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/NRlbji1zgmp6wd1PjpDk0T2ZUGk.roa
File: NRlbji1zgmp6wd1PjpDk0T2ZUGk.roa (raw, json)
Hash identifier: TKAQNNpSaY4TAI1TdJLCf/Ljbi9ccCQ85au2gXamNHA=
Subject key identifier: 35:19:5B:8E:2D:73:82:6A:7A:C1:DD:4F:8E:90:E4:D1:3D:99:50:69
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 019427B598DFE9D54DBB1464BD777CAAB680
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/NRlbji1zgmp6wd1PjpDk0T2ZUGk.roa
Signing time: Thu 02 Jan 2025 15:49:59 +0000
ROA not before: Thu 02 Jan 2025 15:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 193.7.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:98:df:e9:d5:4d:bb:14:64:bd:77:7c:aa:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Jan 2 15:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35195b8e2d73826a7ac1dd4f8e90e4d13d995069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8a:2d:cf:4e:5c:b0:8a:a1:57:13:c1:bb:37:
5c:6c:c7:95:2e:72:e5:ce:aa:23:7a:94:6c:26:d6:
93:99:be:a7:5e:88:8c:b7:43:40:31:37:59:40:8b:
f9:ab:7b:68:7b:0c:4c:0b:33:9b:d1:b8:7a:65:6b:
63:c3:08:72:e7:55:ef:30:8b:6e:a7:d7:9e:0c:3d:
3f:25:3e:e4:0e:32:bd:a7:eb:55:3c:fa:1d:cd:0e:
7c:bc:7e:1a:f1:c5:91:51:bc:59:dd:3d:4f:d7:2c:
ab:23:5e:cb:b4:f0:a9:95:a0:cb:ec:21:d9:7c:2d:
30:6c:d3:2b:50:d6:0e:4c:a5:2a:1e:6e:4e:1a:16:
aa:52:f2:e8:e3:e7:9c:fc:a8:7e:a3:83:5b:40:30:
23:1b:38:c3:4e:fc:f5:a2:fb:79:83:a5:41:e0:e6:
13:7f:86:89:a3:ac:03:ea:f6:11:94:c3:25:a4:85:
3c:41:79:de:60:fa:01:e1:f9:1e:c6:f1:a6:50:df:
bf:9d:e4:93:ed:1a:56:0d:54:69:32:13:18:ea:05:
9b:a5:3d:92:e1:c7:01:04:ea:4c:ee:48:80:03:54:
ad:51:25:a9:be:18:7e:81:2c:7d:75:f7:9d:e4:8e:
28:08:11:55:d9:1c:0b:c6:5d:9a:0d:6f:11:9b:23:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:19:5B:8E:2D:73:82:6A:7A:C1:DD:4F:8E:90:E4:D1:3D:99:50:69
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/NRlbji1zgmp6wd1PjpDk0T2ZUGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.7.195.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ed:ea:7b:9c:76:46:6c:ce:5f:8e:e5:a2:4d:46:46:61:d5:
c0:4d:d5:0a:39:e8:1a:bf:53:46:b4:0e:73:56:24:8d:f4:81:
f5:a5:b7:2c:55:41:91:b6:01:82:19:a1:fc:a8:6d:f7:f9:25:
f3:5a:6b:85:c2:91:82:1b:fc:6b:10:f6:28:a7:0d:a8:24:f3:
87:d2:5e:ab:99:f8:42:4b:6e:bf:45:7d:ea:f5:e6:b6:f5:72:
3c:5e:56:87:8c:b3:7d:78:fa:30:a8:ac:e6:89:67:8a:16:94:
36:af:fd:d1:ef:e6:84:ea:1b:5a:00:97:4b:c3:5f:0a:b7:f1:
40:df:19:75:05:a1:aa:5f:e9:e9:88:31:ee:27:1f:2f:1a:e8:
c3:0b:0d:5e:c3:e8:ce:f9:9a:3b:bc:f7:23:e1:5f:0d:c3:58:
2b:68:47:0f:66:63:52:d8:7e:31:cb:cb:64:86:b7:58:1a:e8:
f7:03:d6:d4:44:59:50:4a:9b:6e:4b:23:6c:90:55:e1:6a:07:
05:40:0f:a9:e5:22:28:a5:e0:db:85:53:66:3c:ea:27:09:77:
8b:ad:e2:8a:a4:42:b2:a2:7f:b7:72:0c:d1:2d:5c:e1:a4:7e:
40:dc:4a:81:3b:7f:42:06:d4:26:76:dc:29:7f:1c:47:e8:36:
8f:25:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:01 2025 by rpki-client