Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/NAlGVYpV8OEmdD2nIMiqn334k0M.roa
File: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (raw, json)
Hash identifier: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=
Subject key identifier: 34:09:46:55:8A:55:F0:E1:26:74:3D:A7:20:C8:AA:9F:7D:F8:93:43
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01942369BF0E7C720FAF484AA36DB4466204
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/NAlGVYpV8OEmdD2nIMiqn334k0M.roa
Signing time: Wed 01 Jan 2025 19:48:40 +0000
ROA not before: Wed 01 Jan 2025 19:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 81.199.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:bf:0e:7c:72:0f:af:48:4a:a3:6d:b4:46:62:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 1 19:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=340946558a55f0e126743da720c8aa9f7df89343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:e1:da:bf:36:c0:c6:d4:4f:69:61:24:e9:
2f:3e:30:ae:f0:8e:23:23:23:36:e1:ad:22:b7:3b:
cc:69:06:84:a4:2b:67:7e:36:3c:38:44:f8:d1:ed:
33:5b:4c:cd:bc:63:c6:12:6a:07:1d:39:3f:4e:21:
9b:90:3e:14:d3:09:9b:4b:32:08:9d:bf:44:30:b7:
1f:8b:26:3f:51:11:2e:d0:c8:c3:0b:d6:09:d2:85:
23:20:b1:61:9d:18:6e:e5:1d:d7:ca:17:80:d9:f6:
71:8f:9e:46:fd:06:b5:0b:b6:e4:8a:65:a5:3b:98:
a1:ce:2a:f0:31:ff:fa:72:df:02:42:dc:b6:3a:f3:
6b:c1:4e:f8:3d:64:e1:4e:16:7f:23:35:3b:59:64:
e3:8e:2b:cf:47:0a:81:c3:7a:e4:f3:a6:23:a9:4d:
3d:0c:8b:5d:84:1e:cf:0e:4c:d5:ad:7d:70:0e:fe:
44:92:fc:a4:9b:7b:7f:43:d9:8b:1c:44:50:da:78:
43:dd:fd:e0:50:75:21:94:9b:67:16:f1:1f:c6:e5:
90:78:90:a2:d5:6a:76:c9:6b:df:e4:48:2e:09:15:
d2:95:9f:29:40:3a:3c:15:0b:56:28:29:47:8b:2e:
17:fa:69:71:13:14:30:25:e7:50:99:4e:97:46:35:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:09:46:55:8A:55:F0:E1:26:74:3D:A7:20:C8:AA:9F:7D:F8:93:43
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/NAlGVYpV8OEmdD2nIMiqn334k0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.29.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:75:c9:72:fe:63:d0:24:ca:f4:74:7d:01:8b:80:4f:52:d3:
5e:aa:b9:89:b0:98:9a:32:6e:ad:e9:5c:9c:a8:d8:76:e2:b8:
ed:c4:65:b5:7b:63:a4:6d:93:34:03:73:d3:e1:a7:7f:40:4e:
32:32:55:1f:42:fc:b8:04:da:da:99:8b:82:30:f2:f3:fe:d3:
4b:35:14:49:47:78:80:a2:1f:be:6c:8a:42:82:17:eb:2a:23:
81:2d:95:00:41:23:2f:58:80:31:b6:5a:48:4a:a2:44:ad:8e:
d7:48:34:98:72:10:50:e6:8f:f5:fb:ed:5e:48:da:ae:f4:0e:
64:ad:f9:bf:23:f5:47:6a:b1:b4:db:6f:af:53:f6:a5:6e:10:
c9:a5:88:26:e9:d3:9a:a0:02:86:22:bf:c9:57:35:af:e5:fb:
cf:77:6e:e2:f1:a7:38:84:34:65:3f:04:a7:84:93:b9:41:3d:
33:9c:15:38:32:b8:be:54:80:a1:9a:44:fc:b7:fd:a6:6f:ab:
d3:04:a0:ef:58:73:9e:77:65:c8:05:db:d7:33:6a:cc:5c:f9:
01:5d:ce:6b:51:9e:61:6a:7e:9e:dd:5a:2e:f9:e4:0b:2e:a7:
46:cc:fc:20:1d:de:d5:74:0c:43:dc:d6:09:e8:0a:89:e5:c4:
25:36:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:50:15 2025 by rpki-client