Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-N0MB6K4BGhCodjphO0sGfJH9lc.roa
File: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (raw, json)
Hash identifier: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=
Subject key identifier: F8:DD:0C:07:A2:B8:04:68:42:A1:D8:E9:84:ED:2C:19:F2:47:F6:57
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019424454F4FB1F85CF5EF01A0D1C5D3D8D4
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-N0MB6K4BGhCodjphO0sGfJH9lc.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 185.250.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4f:4f:b1:f8:5c:f5:ef:01:a0:d1:c5:d3:d8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8dd0c07a2b8046842a1d8e984ed2c19f247f657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:67:59:89:8f:bf:f1:fe:23:f6:88:dd:45:a1:
78:93:b0:89:56:0e:60:50:99:c9:90:e4:f7:7d:71:
44:db:45:66:52:f8:6f:2c:66:1a:d3:32:16:1a:df:
13:02:15:94:d1:d1:94:3b:32:51:bb:e0:1f:a6:30:
28:0e:40:67:d1:eb:23:b1:d5:9f:51:df:9f:d9:ac:
e7:d0:15:7f:99:0e:b4:54:83:75:f8:25:6a:3d:2b:
2c:f1:d0:76:68:ce:fd:85:46:a2:fa:6a:32:6b:47:
e2:3b:36:d0:b5:a5:f7:ca:ce:ba:ab:5a:60:9e:0d:
49:a1:10:95:a3:0a:49:77:81:58:d3:49:f7:f0:4d:
6d:22:a4:56:06:eb:16:bd:21:ce:4a:0f:bf:57:bf:
fe:7d:83:c0:4a:98:45:92:fb:45:66:2c:20:52:06:
c6:28:91:86:ef:da:81:5f:b2:27:9b:cd:53:1f:1d:
1c:81:48:87:77:1b:45:f3:b9:5d:52:08:a1:31:f0:
81:c2:49:16:b7:ea:ec:67:a7:d1:a7:42:c5:2b:06:
ef:5d:f0:8d:31:dd:92:e5:9a:2f:0f:71:ae:73:4c:
6f:f7:58:14:74:39:63:6d:35:8e:29:d8:34:6e:42:
d3:cb:e2:67:0c:ab:ac:2b:17:4b:38:3d:cd:11:e5:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DD:0C:07:A2:B8:04:68:42:A1:D8:E9:84:ED:2C:19:F2:47:F6:57
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-N0MB6K4BGhCodjphO0sGfJH9lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.27.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b7:b8:f1:27:f1:d9:72:36:0a:9a:f5:72:8b:37:60:a0:2e:
6b:b2:7a:d1:b0:28:11:d3:c9:d8:c9:d1:f7:38:36:83:35:a5:
7e:ce:4c:74:24:c6:35:5a:18:cc:bf:4d:12:77:1d:90:50:76:
e3:b5:7b:39:59:30:da:83:91:63:98:ba:a7:9a:e4:ff:c0:27:
e2:74:f1:ae:b1:9c:55:46:f9:bc:93:e9:55:74:cc:5c:34:f7:
97:d0:8f:24:a6:e2:b8:a2:ed:28:14:d6:33:11:21:18:f0:41:
ff:58:b6:27:dd:eb:28:35:3d:6a:91:a7:54:14:22:1e:8a:f5:
9f:1a:05:9e:15:f2:bd:ff:3b:20:28:8b:b9:b7:75:de:e6:f0:
02:5f:d7:c1:7a:c6:8b:53:63:cd:08:51:f5:1e:d8:9e:c6:e9:
66:49:ff:c7:9e:98:6c:7e:c1:b2:9b:27:0e:d4:b2:39:69:7a:
ac:8f:ac:49:9f:66:f9:1b:7e:f5:e4:4e:51:9c:1b:c4:97:a0:
f8:9f:fe:cd:e1:4b:9c:73:bd:01:eb:08:98:46:a3:16:79:b4:
6a:19:06:77:5d:3c:10:b4:77:aa:c8:42:33:5a:99:d0:cf:ed:
56:74:30:65:22:a1:b1:4d:79:8d:c6:3a:ac:b5:92:d1:d4:dd:
a8:09:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 18:58:23 2025 by rpki-client