Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/NvmfsV1sm7XmyjVKzPOWhb7earQ.roa
File: NvmfsV1sm7XmyjVKzPOWhb7earQ.roa (raw, json)
Hash identifier: r7bWWSDXyiXMj/Swi3flONfAIYfEqRkATWw60gas71A=
Subject key identifier: 36:F9:9F:B1:5D:6C:9B:B5:E6:CA:35:4A:CC:F3:96:85:BE:DE:6A:B4
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 01942368D9CB0DEB434174E77BCD9921FED7
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/NvmfsV1sm7XmyjVKzPOWhb7earQ.roa
Signing time: Wed 01 Jan 2025 19:47:41 +0000
ROA not before: Wed 01 Jan 2025 19:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.40.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d9:cb:0d:eb:43:41:74:e7:7b:cd:99:21:fe:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Jan 1 19:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36f99fb15d6c9bb5e6ca354accf39685bede6ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:6b:b9:ca:91:63:7c:02:ab:28:e1:6c:84:
3e:a5:f0:b3:89:f1:4e:1a:40:86:7e:c6:e1:ba:58:
ac:10:04:6e:97:68:47:11:83:bc:39:14:a8:8f:d4:
ed:b7:c7:4d:59:70:65:e0:63:54:8b:8e:0f:f3:4e:
2c:a1:a5:14:49:e3:67:02:b2:16:e6:14:e1:b7:ea:
4a:f9:aa:00:88:08:32:4a:fa:0b:7f:98:e0:0d:e3:
b1:f6:7b:ec:59:c3:b2:d3:3d:ff:42:4d:4a:55:d0:
6f:2d:bf:fb:1f:83:01:8b:2b:37:80:59:8a:4a:da:
91:27:af:14:e1:e9:47:fe:07:b4:2f:1c:53:88:df:
15:7c:c7:7f:b8:ea:d6:40:6c:fc:dc:8c:c0:27:0e:
1b:6e:4c:8f:24:bb:34:e7:1a:a8:e2:a2:a8:c1:98:
16:40:aa:b4:69:d9:a1:f2:16:cc:01:a4:0e:02:05:
3c:82:0a:70:5e:34:d1:a1:31:1a:78:81:4e:0e:60:
1a:1c:5a:2f:18:63:b4:7a:2a:03:95:12:f2:5f:aa:
0d:65:4a:96:ab:51:95:11:15:30:89:e1:84:39:34:
10:d5:7a:db:7e:3c:bb:7d:96:bb:9f:fb:1c:26:86:
c7:db:17:27:f4:b6:e3:27:04:42:fb:23:84:41:72:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F9:9F:B1:5D:6C:9B:B5:E6:CA:35:4A:CC:F3:96:85:BE:DE:6A:B4
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/NvmfsV1sm7XmyjVKzPOWhb7earQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.110.0/24
Signature Algorithm: sha256WithRSAEncryption
52:52:b3:2f:cf:34:bb:e2:b7:9b:36:6d:f7:97:a0:3d:12:26:
d5:11:1b:12:54:bc:ac:71:33:ff:76:23:c9:9d:26:d8:a6:bb:
63:b3:80:a9:bd:c5:12:ad:73:86:27:da:5a:ce:e1:cc:81:1b:
3b:cb:e6:61:33:c4:c5:60:0b:23:5d:88:ab:1a:4a:5a:77:0b:
1f:21:2a:52:cf:41:0d:34:cb:77:65:4b:42:8d:20:93:93:dc:
e6:3d:2b:cb:05:c0:fa:77:f0:19:58:d7:bd:a9:ac:b7:12:5b:
63:6a:78:f9:d6:f4:08:b9:79:2d:e5:7d:4b:5b:b3:c9:fe:7e:
a2:42:dd:ba:56:00:41:5c:d1:19:49:40:14:85:ed:0b:82:d4:
2c:f8:d8:68:28:7c:d8:53:75:0f:86:7c:19:16:c6:72:d6:08:
d0:d6:e7:45:12:89:7e:ab:12:f2:43:1b:ea:6d:ad:d2:eb:52:
12:84:60:da:b0:a8:44:cd:b0:ee:54:56:b8:be:09:0a:5b:49:
17:16:ca:6b:cc:70:55:41:78:46:aa:bd:2c:cb:d6:c1:8d:ee:
2b:c2:d9:c1:ec:e9:3e:13:01:47:40:6b:9d:59:d0:68:f8:8a:
75:2c:7b:ee:d9:35:55:02:48:e9:a5:ab:52:a9:a5:c0:4f:b5:
b1:6a:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:18 2025 by rpki-client