Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa
File: IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa (raw, json)
Hash identifier: N//BCS9/s8yglI9IXPIoNJivxPmiF8d0yubes6L4x2s=
Subject key identifier: 21:4A:94:A3:68:19:71:C3:B9:0C:91:06:67:64:2B:77:00:1D:FE:B6
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 019427B54B772D891D5084E987CBC047AE9A
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa
Signing time: Thu 02 Jan 2025 15:49:40 +0000
ROA not before: Thu 02 Jan 2025 15:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50869
IP address blocks: 92.119.38.0/24 maxlen: 24
2a0b:dd80:3100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4b:77:2d:89:1d:50:84:e9:87:cb:c0:47:ae:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Jan 2 15:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=214a94a3681971c3b90c910667642b77001dfeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:7e:94:1a:a6:92:8b:2a:9f:e5:dc:48:8a:
a0:b3:b0:af:d3:9a:32:73:93:6b:7d:66:46:e3:26:
f2:74:32:cc:51:15:63:31:0b:15:c8:5a:62:44:26:
3f:51:60:3c:bf:6b:5c:92:c5:0d:77:7e:74:6e:a3:
bc:7c:71:4a:e7:bb:71:95:41:00:8c:16:9e:bc:5f:
e3:25:1a:25:50:eb:e5:cb:b3:c6:ff:49:d1:83:ae:
db:81:5a:9f:19:cb:72:75:87:a2:91:f3:5e:bc:f0:
d2:61:11:40:82:95:9c:4d:a8:2f:10:7b:6f:cd:ae:
cd:1a:40:ea:e2:54:f8:b6:36:17:9b:de:5c:fd:d4:
e0:86:b0:3c:58:46:69:b9:74:64:b6:f5:21:38:3a:
8a:d6:02:7a:54:bd:19:80:64:3b:63:de:ee:e1:66:
3e:8a:bf:a2:22:85:6c:48:d4:f1:00:f2:6e:65:e4:
cb:88:f0:90:b6:07:56:a8:f8:87:d9:68:75:33:1b:
74:3a:ae:82:7c:f7:63:5d:ff:d0:48:6f:23:c9:9f:
29:ca:b4:71:ce:81:8f:b4:1d:c1:a0:38:06:b1:52:
46:61:56:29:1d:a1:57:a9:fa:40:14:2a:2c:6f:91:
e0:b5:01:42:ea:3b:08:9a:a2:34:5e:7f:65:ed:96:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4A:94:A3:68:19:71:C3:B9:0C:91:06:67:64:2B:77:00:1D:FE:B6
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.38.0/24
IPv6:
2a0b:dd80:3100::/40
Signature Algorithm: sha256WithRSAEncryption
7c:08:15:5d:4e:45:0e:60:a6:bd:e1:c4:8c:e5:00:a4:ce:62:
e5:0c:b8:6f:5e:9c:99:a1:54:99:95:46:5d:36:06:75:18:53:
0c:ff:2c:95:c9:e4:63:20:46:19:18:78:f7:c1:c2:4b:a4:ff:
05:84:c3:53:49:e8:02:cd:2c:d5:11:4b:14:90:5f:27:3b:2e:
76:76:da:4d:2d:e1:29:82:f0:f2:99:f4:0a:d4:9b:69:24:d1:
d6:66:80:9e:e5:e7:e4:46:e9:f7:ee:35:8e:f4:71:da:06:72:
0e:e2:58:d3:45:8a:d7:28:c2:91:73:75:9e:86:96:f3:4d:4e:
a9:e4:63:94:4c:83:51:b5:2d:55:93:9f:68:14:1d:c9:ad:52:
24:6f:77:65:b5:a9:10:a5:1d:19:b7:3f:f9:5a:a5:18:1a:95:
53:19:de:06:81:b2:0b:7c:b6:30:a8:09:b4:d1:7b:13:79:f5:
f3:ea:d0:72:a6:3b:63:8a:31:ff:af:29:a7:a4:7c:ab:67:39:
ec:d8:e4:b6:3f:44:68:5d:34:83:1c:15:f0:ae:6d:1e:dc:d9:
54:e9:c8:d1:98:e4:5e:6e:e7:7a:2b:88:6f:09:18:76:d7:cd:
c3:16:fb:c6:85:af:f3:c2:e8:4e:5e:8d:c3:ff:3d:aa:72:ac:
ec:e7:71:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:23 2025 by rpki-client