Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/NeVlE-PzPHn5ppNlSgj87PhylgM.roa
File: NeVlE-PzPHn5ppNlSgj87PhylgM.roa (raw, json)
Hash identifier: +i1WA9cuFFrQg1WFh0BGIYlKWMIvdmOqwrDe9C8B0aM=
Subject key identifier: 35:E5:65:13:E3:F3:3C:79:F9:A6:93:65:4A:08:FC:EC:F8:72:96:03
Certificate issuer: /CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
Certificate serial: 019422FBEE420B5DF83941B8AF4B4BC55CA9
Authority key identifier: 5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/NeVlE-PzPHn5ppNlSgj87PhylgM.roa
Signing time: Wed 01 Jan 2025 17:48:43 +0000
ROA not before: Wed 01 Jan 2025 17:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42910
IP address blocks: 193.33.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ee:42:0b:5d:f8:39:41:b8:af:4b:4b:c5:5c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
Validity
Not Before: Jan 1 17:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35e56513e3f33c79f9a693654a08fcecf8729603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:73:f4:f3:d0:40:db:45:9f:46:63:44:24:
2b:fe:be:95:6f:da:54:d2:d4:48:45:dd:fc:e7:fa:
c1:69:39:79:9a:d0:ae:3e:17:17:cb:6e:03:8d:d5:
35:eb:ec:76:ac:77:c1:ea:e5:78:ab:bf:18:ac:08:
38:38:0d:b0:8d:15:a3:85:aa:32:29:4c:42:80:f1:
d0:61:de:8b:c7:93:96:24:b0:58:dc:65:5d:93:de:
de:3d:63:40:c0:9b:d5:32:a6:a0:4b:b3:50:44:87:
b5:98:90:04:17:db:50:2d:92:06:88:c6:05:7e:63:
ac:06:c9:4f:7b:40:b9:92:30:44:85:fd:9a:a0:17:
b0:07:18:e7:23:8f:01:a7:51:33:88:34:38:06:b2:
e5:85:04:92:2d:c5:b0:c4:9a:a4:d3:17:3f:fe:92:
aa:53:88:92:10:ae:e8:12:94:2a:27:76:9e:06:c5:
70:55:41:1e:20:33:49:a8:25:18:14:3a:d3:c1:05:
b6:26:f2:6b:eb:e4:2f:26:75:34:4e:9c:e7:6f:f2:
5b:98:ea:9d:f2:bb:bc:2f:41:c8:ec:b4:08:00:52:
9e:31:9e:c2:3e:0c:a4:86:f9:0a:9c:d2:30:b3:23:
4f:41:17:3a:e9:c7:f3:d6:43:00:6c:20:d9:e8:df:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E5:65:13:E3:F3:3C:79:F9:A6:93:65:4A:08:FC:EC:F8:72:96:03
X509v3 Authority Key Identifier:
keyid:5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/NeVlE-PzPHn5ppNlSgj87PhylgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.29.0/24
Signature Algorithm: sha256WithRSAEncryption
26:0f:07:52:90:b7:f3:2c:a1:e4:50:b3:4d:a3:f2:11:bd:ae:
01:c7:03:8e:5e:19:a8:cb:bf:eb:89:ac:2b:87:45:4d:df:20:
98:7b:93:f0:37:7b:79:3e:83:0b:e4:2b:37:2e:56:e7:41:7d:
53:7f:97:68:ce:d2:e5:29:c2:f7:5e:9c:40:64:d9:10:48:0b:
a7:65:66:4d:40:ce:75:f5:b2:54:db:1f:75:9f:f8:30:c8:94:
06:37:fc:79:1c:d1:3a:11:e7:36:f9:a1:0c:39:1c:04:97:95:
5e:31:e2:cb:9b:0d:70:8c:a3:75:28:50:23:71:ec:91:8a:69:
3b:1d:0a:1f:a9:48:69:39:c0:5d:c9:f8:36:e8:50:14:5c:a6:
04:5c:4a:c2:0e:b4:3b:32:98:7e:92:04:69:35:fd:2d:b0:a8:
66:a1:7f:eb:49:8b:b7:7b:f2:66:58:47:b7:7e:a6:ce:05:d0:
c6:c8:29:d2:b5:cb:b6:8c:fe:ff:5b:24:91:6e:8a:3a:7f:f8:
9f:20:f7:18:5f:3a:67:bc:15:d3:c6:7e:20:bd:a3:e6:da:5c:
bb:0e:db:63:99:86:39:aa:f5:0b:27:d5:31:37:e2:c0:65:1f:
72:a9:92:b2:e5:8f:63:58:ff:ba:0b:e1:f8:ee:ae:b2:42:61:
04:54:03:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi++5CC134OUG4r0tLxVypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGNlMWYxOTMzMTRmNjkzOWJmMWMzZjlkYWMyMzY5ZjYy
OTU4NWEwHhcNMjUwMTAxMTc0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWU1NjUxM2UzZjMzYzc5ZjlhNjkzNjU0YTA4ZmNlY2Y4NzI5NjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAFz9PPQQNtFn0ZjRCQr/r6Vb9pU
0tRIRd385/rBaTl5mtCuPhcXy24DjdU16+x2rHfB6uV4q78YrAg4OA2wjRWjhaoy
KUxCgPHQYd6Lx5OWJLBY3GVdk97ePWNAwJvVMqagS7NQRIe1mJAEF9tQLZIGiMYF
fmOsBslPe0C5kjBEhf2aoBewBxjnI48Bp1EziDQ4BrLlhQSSLcWwxJqk0xc//pKq
U4iSEK7oEpQqJ3aeBsVwVUEeIDNJqCUYFDrTwQW2JvJr6+QvJnU0Tpznb/JbmOqd
8ru8L0HI7LQIAFKeMZ7CPgykhvkKnNIwsyNPQRc66cfz1kMAbCDZ6N9fbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDXlZRPj8zx5+aaTZUoI/Oz4cpYDMB8GA1UdIwQY
MBaAFFxM4fGTMU9pOb8cP52sI2n2KVhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYmY1MDItOWYzMS00ZDcwLTg3ZDQt
ZTA2NmQwMjJlOTI3LzEvTmVWbEUtUHpQSG41cHBObFNnajg3UGh5bGdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kYmY1MDItOWYzMS00ZDcwLTg3ZDQtZTA2NmQwMjJlOTI3
LzEvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSEdMA0G
CSqGSIb3DQEBCwUAA4IBAQAmDwdSkLfzLKHkULNNo/IRva4BxwOOXhmoy7/riawr
h0VN3yCYe5PwN3t5PoML5Cs3LlbnQX1Tf5doztLlKcL3XpxAZNkQSAunZWZNQM51
9bJU2x91n/gwyJQGN/x5HNE6Eec2+aEMORwEl5VeMeLLmw1wjKN1KFAjceyRimk7
HQofqUhpOcBdyfg26FAUXKYEXErCDrQ7Mph+kgRpNf0tsKhmoX/rSYu3e/JmWEe3
fqbOBdDGyCnStcu2jP7/WySRboo6f/ifIPcYXzpnvBXTxn4gvaPm2ly7DttjmYY5
qvULJ9UxN+LAZR9yqZKy5Y9jWP+6C+H47q6yQmEEVAP4
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:47 2025 by rpki-client