Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa
File: NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa (raw, json)
Hash identifier: 1fbP+50M9LhkCXd17Y2+Euhe18E6Q+JHRhqDIhYbeMs=
Subject key identifier: 34:AF:D6:3E:16:2F:0D:CD:DE:12:96:05:09:0F:60:7B:9D:86:32:F9
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019422202E0C744ECDEB594F941BF4169689
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 45.159.249.0/24 maxlen: 24
141.98.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 17:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2e:0c:74:4e:cd:eb:59:4f:94:1b:f4:16:96:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34afd63e162f0dcdde129605090f607b9d8632f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:0a:28:b1:76:b6:88:a5:3c:5a:aa:f6:38:
a6:28:ca:97:93:42:f0:b5:da:13:3a:88:8d:75:6c:
94:04:3e:d1:82:8a:7c:cf:f7:f1:e3:43:a3:9b:82:
d0:0f:23:f5:f1:5a:4f:56:21:02:db:3d:32:d6:51:
f3:9e:14:78:0d:70:a1:ac:5e:29:d9:93:26:a8:64:
4a:2d:41:18:29:5a:bb:5d:54:09:53:e4:df:ce:32:
a3:dd:8f:ab:58:68:bb:a5:9b:ee:64:a6:1b:7c:5a:
6f:8f:93:50:a3:9b:17:46:f8:cb:dd:4f:a7:22:a6:
b9:7b:17:1f:45:3a:23:42:54:23:98:de:91:42:cb:
d5:f9:4c:a7:d2:41:d8:e0:6a:a1:97:32:98:b4:78:
0c:14:0a:0e:33:0b:28:90:89:1c:56:d0:23:4a:b2:
47:91:c8:8f:94:25:08:15:54:93:ef:98:f7:56:b5:
32:86:74:5a:a6:d2:75:93:62:a8:48:06:b4:a7:3d:
76:d3:ed:2f:56:5e:3a:76:49:a5:f1:6b:c4:06:e8:
0d:cf:c8:cb:36:b3:ec:53:b8:b4:99:04:d2:c0:19:
9a:39:6b:97:36:2e:51:de:7a:08:6e:e4:e5:35:ae:
c6:82:fd:50:5a:0e:f3:f9:a5:96:6e:be:85:eb:e8:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AF:D6:3E:16:2F:0D:CD:DE:12:96:05:09:0F:60:7B:9D:86:32:F9
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.249.0/24
141.98.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:4b:59:40:fd:71:62:2c:40:7b:5d:fa:f8:a1:f3:b4:04:fc:
ed:2d:d9:92:02:ab:e2:c2:57:f9:ab:fe:74:8a:a6:a0:be:0d:
c2:7d:5f:63:e9:01:ce:fc:24:d3:ef:c8:c9:a9:47:e0:53:d2:
be:92:a5:b1:eb:ff:33:69:93:e7:d2:d4:7f:e2:fa:c5:b1:b7:
90:36:4c:f8:e9:0d:d7:64:dc:57:f2:bf:46:39:b3:b6:15:e4:
18:2a:fc:08:22:c2:d7:07:ab:9b:f4:af:3b:91:67:44:b9:73:
09:89:4d:67:ed:67:4f:37:2d:1f:c8:0e:63:48:92:3c:07:48:
e1:22:93:91:db:48:47:52:2b:d8:14:90:e7:b5:da:f8:89:5a:
68:7c:bd:b4:49:b9:1c:06:be:ca:e2:fc:7e:5a:10:e1:57:c2:
0b:24:70:59:fe:93:e4:d0:bf:b5:7b:f4:2f:59:37:cd:f0:88:
35:cd:a1:20:d0:8f:7d:5a:d0:32:cc:1d:54:8d:8a:91:c6:9a:
57:d1:47:69:79:77:e2:b0:92:4d:ba:5c:2b:a0:ca:73:1d:b4:
b0:74:fb:6d:8d:97:2b:c3:49:dd:d0:40:89:ad:a6:e1:b9:e5:
22:c5:7e:ff:6c:f6:3f:a9:d8:33:d2:d0:c5:73:cc:44:23:29:
80:66:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:24:26 2025 by rpki-client