Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/NLVTq0fOyRU_8jDE40NtcMyd-CQ.roa
File: NLVTq0fOyRU_8jDE40NtcMyd-CQ.roa (raw, json)
Hash identifier: raIph2bihZjajkCc/rrPwQ/IODtF/UxH380z+IjhFkM=
Subject key identifier: 34:B5:53:AB:47:CE:C9:15:3F:F2:30:C4:E3:43:6D:70:CC:9D:F8:24
Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial: 0194228E1556C6EAB8D88D44DF49FF2EC17C
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/NLVTq0fOyRU_8jDE40NtcMyd-CQ.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39011
IP address blocks: 194.102.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:15:56:c6:ea:b8:d8:8d:44:df:49:ff:2e:c1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34b553ab47cec9153ff230c4e3436d70cc9df824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:89:14:cc:29:af:27:3c:e7:09:ca:fc:27:
be:86:99:a4:4a:f1:97:99:d2:cb:8e:f3:cb:a7:1b:
f2:32:c5:e5:82:e9:b1:5d:a2:6d:22:8b:0b:76:50:
96:a4:e8:73:bb:16:61:16:6f:12:f9:7a:0b:31:14:
f8:ed:35:a7:7e:a4:3b:00:7d:19:3a:a9:27:19:c3:
33:83:9d:7c:c3:d4:90:65:2f:5a:aa:5e:ad:f5:96:
97:63:f6:05:d8:08:ed:33:5a:40:d6:6a:24:c9:6d:
a1:12:48:78:32:b9:3e:62:95:b8:fa:40:38:ce:48:
58:ab:9d:f3:45:b3:f3:71:79:bf:47:e0:2f:2f:64:
d9:b4:74:79:8c:87:cb:9d:84:96:1b:05:db:fe:0b:
2e:24:8a:58:40:3a:94:d1:c0:7b:57:a3:10:2b:0b:
77:b8:81:a3:00:87:ec:80:b8:b2:bd:03:ac:3c:e8:
da:b6:a8:ec:13:ae:76:be:be:46:71:60:fa:c6:9e:
d1:e0:ff:cf:42:cb:0c:6b:0b:c4:3f:3c:8b:25:e7:
df:25:5e:92:34:3c:de:5c:b3:9d:94:17:cc:a7:b0:
02:a4:b5:6b:32:92:b3:aa:6d:0d:34:d0:b6:96:78:
93:df:74:3e:99:58:d9:55:77:a7:fc:00:60:ed:8d:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B5:53:AB:47:CE:C9:15:3F:F2:30:C4:E3:43:6D:70:CC:9D:F8:24
X509v3 Authority Key Identifier:
keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/NLVTq0fOyRU_8jDE40NtcMyd-CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.204.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a6:c8:2b:da:ec:c3:0b:01:e3:78:bd:59:14:46:77:4c:3f:
30:19:96:51:c9:32:3e:15:9f:84:1d:1a:fd:0e:6f:0c:b5:a3:
98:f7:6e:32:59:e9:1c:35:18:49:e2:95:8d:8d:62:0a:5b:0d:
46:0d:03:20:bc:0d:0d:85:f8:88:e0:4c:c3:19:d5:f6:29:d7:
3e:7f:a7:5e:af:13:8d:f8:8d:f3:e7:30:b5:22:e6:d5:f5:94:
f5:29:7c:a8:0b:08:70:76:41:b1:24:a3:16:7c:5e:29:c3:86:
ff:33:98:60:9d:7b:ed:62:67:8e:be:d8:12:73:a8:31:21:8f:
ef:61:86:63:f8:35:ef:f0:0f:b6:41:1e:e7:1a:66:f2:11:80:
00:de:d1:1a:f5:60:c0:0f:f2:73:4a:4b:03:a7:7b:2c:9b:02:
74:69:00:a4:89:49:40:7e:a1:bc:72:7a:7d:33:98:5f:74:9f:
3e:81:40:f1:50:70:d9:31:e1:c0:82:6c:0b:90:3b:80:d2:fd:
b2:cd:fa:07:ab:cd:cb:7a:87:20:35:a8:3e:1e:d8:c0:ba:cb:
e6:fe:19:68:c6:3d:b5:e6:8d:54:b9:95:1a:a5:21:4a:c9:5d:
fb:22:be:aa:58:a9:17:a2:f4:74:b0:b2:1b:c5:a2:64:9a:59:
63:7b:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:32:15 2025 by rpki-client