Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/NSSboe1wxlMIOf4H1ym0BPT-rCY.roa
File: NSSboe1wxlMIOf4H1ym0BPT-rCY.roa (raw, json)
Hash identifier: dKR82CR6RtrhKiyhhDRuSTP5OlKpaGcPWazs+LJAU9w=
Subject key identifier: 35:24:9B:A1:ED:70:C6:53:08:39:FE:07:D7:29:B4:04:F4:FE:AC:26
Certificate issuer: /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Certificate serial: 0194266ADC9171314AD73BF8DEA204FC9581
Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/NSSboe1wxlMIOf4H1ym0BPT-rCY.roa
Signing time: Thu 02 Jan 2025 09:48:45 +0000
ROA not before: Thu 02 Jan 2025 09:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42742
IP address blocks: 78.157.224.0/19 maxlen: 19
78.157.254.0/23 maxlen: 23
185.211.164.0/22 maxlen: 22
188.191.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:dc:91:71:31:4a:d7:3b:f8:de:a2:04:fc:95:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Validity
Not Before: Jan 2 09:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35249ba1ed70c6530839fe07d729b404f4feac26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:e2:17:d6:a2:54:75:73:2b:e4:9d:92:19:
21:a9:20:90:71:be:62:47:5f:f7:84:33:ba:22:a4:
92:14:6e:b7:6c:8d:06:2a:aa:f2:96:97:3e:d0:fa:
db:4b:c0:b9:5d:93:f4:dc:a7:24:3f:c5:ed:12:5b:
4c:05:ec:6a:2f:ab:95:99:64:85:89:be:c5:39:de:
39:59:67:00:70:f8:0b:58:e9:45:01:dc:f0:4b:d6:
8c:8c:4e:23:89:d6:f1:86:58:cc:f2:09:9b:90:5a:
25:2e:0d:56:6d:87:e4:34:bc:95:ee:27:6a:e7:b9:
38:01:be:5c:e2:2f:2f:80:c8:ff:77:1e:5f:99:1d:
83:42:c7:25:1e:11:e9:de:6a:3c:b7:28:76:3d:d8:
2d:c9:79:eb:3e:b5:fc:9e:36:92:7f:46:fa:7b:e3:
98:6a:f8:a5:6a:b3:f6:39:7d:96:8b:44:06:39:e5:
f5:9f:5b:74:17:b4:33:24:f5:7e:35:f2:97:5e:4a:
8f:17:0f:28:4f:a3:e0:40:4c:40:0e:09:25:4d:3e:
22:ba:04:a3:d0:11:22:11:2d:9b:27:cb:d8:1b:55:
ad:8e:03:5c:00:ae:c3:e1:30:a3:88:ce:59:6a:76:
d7:f0:2a:b6:59:a9:67:c5:e2:55:33:f2:44:3e:dd:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:24:9B:A1:ED:70:C6:53:08:39:FE:07:D7:29:B4:04:F4:FE:AC:26
X509v3 Authority Key Identifier:
keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/NSSboe1wxlMIOf4H1ym0BPT-rCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.157.224.0/19
185.211.164.0/22
188.191.0.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:2a:92:85:86:3b:0d:2a:a1:f5:fe:a4:96:cd:b9:75:52:17:
5c:1e:28:5d:88:14:ef:50:c2:87:bc:eb:f7:61:23:dc:6f:34:
1e:d2:e7:fe:52:cd:08:f2:f1:f4:a3:8d:ba:9b:49:72:74:cb:
25:61:8a:3d:aa:0e:97:af:10:e6:d5:3b:61:90:6e:86:b5:41:
ef:c0:30:67:ed:30:cf:17:80:c8:40:cd:1b:0c:cd:06:01:df:
2d:6c:a9:dc:b8:9d:63:7b:ef:c1:7d:1a:46:32:2c:37:86:b8:
30:d9:3b:c1:3a:f1:4f:c5:2f:84:d3:34:c8:b0:f8:06:95:54:
56:8d:d1:b6:7f:2b:c7:80:e2:0d:03:4c:a0:9d:e6:93:e4:31:
11:d7:59:97:c4:97:c3:d8:a1:bd:3e:cf:de:e3:f8:b1:c1:eb:
30:1d:af:1c:dd:46:6a:70:c2:5a:b1:4b:6b:7b:b3:81:8e:d0:
aa:58:79:79:c4:30:aa:ed:52:00:79:0f:20:e8:9d:b1:5f:cf:
83:45:52:c2:f2:c4:43:a1:48:6b:e6:13:81:d5:f3:27:5f:b9:
22:3d:94:df:c3:83:82:c7:a8:29:c2:1d:4b:1e:a7:28:00:ca:
dd:85:aa:40:8f:10:a7:33:47:3f:52:0a:ea:14:6e:86:f5:13:
7d:77:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:32:32 2025 by rpki-client