Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/NXwDVZABd3p4a0yMyLVaEUu993w.roa
File: NXwDVZABd3p4a0yMyLVaEUu993w.roa (raw, json)
Hash identifier: lhUXJxfjstspXt3/27XnZ9HzN1ZpRrwcEX2KjNAybVU=
Subject key identifier: 35:7C:03:55:90:01:77:7A:78:6B:4C:8C:C8:B5:5A:11:4B:BD:F7:7C
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: 019420D635BE1E3695DF73CBB58CD21C4817
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/NXwDVZABd3p4a0yMyLVaEUu993w.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139070
IP address blocks: 66.22.228.0/23 maxlen: 24
66.22.228.0/24 maxlen: 24
66.22.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:35:be:1e:36:95:df:73:cb:b5:8c:d2:1c:48:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=357c03559001777a786b4c8cc8b55a114bbdf77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:03:79:a2:54:b4:ad:4e:02:c6:38:f6:b1:
0f:02:ce:a1:c9:6a:59:3a:25:c5:10:97:e0:1f:ca:
f6:3a:54:c0:05:56:68:38:af:70:56:d5:f9:99:87:
26:66:42:c2:9c:8e:77:46:b1:e6:eb:3b:1a:5b:ad:
3a:5a:78:e5:dd:00:45:da:e0:6e:c7:68:4d:9f:ec:
e2:51:2c:64:65:6a:54:a8:3e:d9:e9:bc:53:7c:a2:
ff:c8:0c:3b:c5:ec:50:06:3a:73:0d:77:fc:67:07:
fa:9b:57:f8:3d:73:52:d9:51:a2:2c:22:ee:a2:85:
72:88:92:0a:85:7a:2c:f0:33:7f:83:9d:d0:34:a4:
ce:85:e9:92:ae:82:ae:55:f1:2b:da:fc:ad:12:b3:
0a:e7:c5:54:e1:29:6d:d4:6b:89:17:d5:9e:14:39:
23:2a:6e:dd:56:df:81:35:ae:34:b8:42:d8:19:1d:
1c:48:cd:7a:dd:00:fb:1d:ac:a0:7a:5b:2d:5c:e1:
6d:d0:44:2f:78:b7:75:19:71:ca:26:b1:2f:ae:72:
53:4e:41:bf:37:2b:cf:c2:92:be:34:c8:42:56:be:
a3:94:89:3a:f5:7a:7c:30:ab:01:eb:c4:87:21:69:
74:b5:7c:47:c2:4c:21:7d:4d:a5:26:47:2e:ac:2a:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7C:03:55:90:01:77:7A:78:6B:4C:8C:C8:B5:5A:11:4B:BD:F7:7C
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/NXwDVZABd3p4a0yMyLVaEUu993w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.22.228.0/23
Signature Algorithm: sha256WithRSAEncryption
50:08:c7:37:55:f8:a2:a3:77:ec:8b:58:86:62:e2:4c:c4:ed:
be:35:b3:0a:88:87:d9:a2:43:a1:8c:f5:11:54:ee:3d:b5:41:
ca:2c:0e:ac:6a:ab:f1:fa:b5:ae:4a:4d:bc:42:3f:7a:9d:ea:
a7:42:ee:a0:f5:32:52:67:77:90:28:16:4e:86:d0:e4:c6:12:
6a:fe:8c:b4:c0:b0:09:fc:7f:13:29:41:2a:9f:d1:17:f1:53:
8a:f1:87:22:bd:19:2b:33:92:e1:68:a6:55:d4:24:0d:d4:91:
d9:99:a3:32:a2:65:ca:42:fd:50:96:e2:f5:00:ab:e6:9a:30:
6a:5b:49:b4:3c:a2:9e:8b:b0:1c:74:2d:60:a6:2d:bd:b2:88:
94:a5:f0:ee:63:84:cb:10:2d:5a:80:4f:6d:4c:a6:dc:3e:07:
c5:ca:f4:4e:73:d6:ff:0d:32:ca:90:eb:8a:20:3a:aa:af:0d:
ff:10:57:76:35:72:c0:a1:98:73:3b:2f:c4:bb:ac:1a:84:3b:
3a:98:dd:92:39:ce:10:2a:4d:ba:74:b1:32:28:be:34:42:44:
1b:27:a0:da:a8:ae:d1:93:93:75:b2:2d:0a:cb:b1:fd:f5:f9:
b4:e5:86:13:45:9b:5d:8c:8a:6a:f3:14:5a:f9:5e:6c:38:ae:
ad:07:3a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:25:11 2025 by rpki-client