Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Nv_TvnMqAMMFtfnF6aIG2zODv2g.roa
File: Nv_TvnMqAMMFtfnF6aIG2zODv2g.roa (raw, json)
Hash identifier: 2ZJWEwGORlzp4pd2YY536wXtwIOXCGDZBEDqwDoxehw=
Subject key identifier: 36:FF:D3:BE:73:2A:00:C3:05:B5:F9:C5:E9:A2:06:DB:33:83:BF:68
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0194DAEB2469997A1A0ABCEDB79506CB4F9E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Nv_TvnMqAMMFtfnF6aIG2zODv2g.roa
Signing time: Thu 06 Feb 2025 11:00:30 +0000
ROA not before: Thu 06 Feb 2025 11:00:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 84.32.87.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
88.216.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:eb:24:69:99:7a:1a:0a:bc:ed:b7:95:06:cb:4f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 6 11:00:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36ffd3be732a00c305b5f9c5e9a206db3383bf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:2a:05:d1:76:a1:88:1d:34:a7:20:4f:c4:
66:96:f9:bc:02:16:63:cb:d9:02:c4:2b:ec:0a:50:
7a:65:53:0d:1b:c3:cb:6d:99:46:e8:f6:ce:f3:19:
98:1f:b9:8b:a6:e8:69:d7:ac:11:89:ad:20:26:3f:
ad:85:ea:ab:b4:68:79:51:39:5c:f5:d4:ad:a5:b7:
16:87:20:d8:a0:7a:e3:be:b6:de:5c:36:06:76:f5:
81:84:3a:bc:74:1a:fe:3a:80:a7:00:1b:b8:0e:28:
ff:df:c3:cf:b9:17:d5:8a:d8:2c:fd:c3:03:b1:7b:
2f:d7:af:71:3d:bc:0a:77:47:69:7c:d2:23:ab:19:
53:e5:20:ba:43:51:25:82:f5:e9:6c:37:26:3e:b1:
cc:71:26:69:87:37:62:32:62:1f:bf:2d:25:94:28:
96:dc:50:37:4c:cc:0b:a4:72:83:8c:c3:5a:86:0d:
7a:5e:55:dc:70:9c:12:04:8b:24:75:6b:9a:6c:f2:
94:14:24:cd:af:3e:d9:41:02:77:5c:d6:bb:c9:a6:
d9:c9:9b:41:c5:ec:d7:e8:5d:bf:5d:90:05:28:29:
3f:93:df:e6:bf:01:70:03:cc:43:a4:7a:d5:79:64:
73:58:dc:a3:6e:2f:1d:51:54:11:c1:4b:6d:a1:26:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FF:D3:BE:73:2A:00:C3:05:B5:F9:C5:E9:A2:06:DB:33:83:BF:68
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Nv_TvnMqAMMFtfnF6aIG2zODv2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.87.0/24
84.32.95.0/24
88.216.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:65:de:05:49:63:87:d5:b3:7e:89:12:b2:f5:7e:c8:ae:a5:
22:7e:eb:8f:16:22:52:b6:8f:35:1c:dd:57:ad:3c:9b:a2:b6:
10:88:1d:5b:54:ab:dc:1f:a7:2d:4b:c4:3d:eb:3c:8a:ce:51:
a4:65:cd:89:7a:5e:3b:fc:ca:57:80:ca:97:8a:0c:50:b8:62:
2a:c1:07:6a:9b:64:fa:7b:ef:79:55:17:58:a4:71:f0:23:53:
c2:02:63:e9:4c:a9:c5:2b:b5:06:14:7a:4a:8f:4b:bd:ac:8d:
a7:dc:ce:62:8e:1c:e0:20:97:c9:17:08:23:7d:48:5c:30:bb:
cc:f1:db:92:07:70:d8:98:f3:c4:05:75:f7:95:fd:24:32:db:
5d:d0:95:76:f6:6f:b9:53:ab:78:77:58:32:a1:8f:4c:f4:2e:
51:17:8f:0a:52:26:2c:8c:46:71:8f:cd:2b:18:99:88:05:d4:
ad:f3:c6:17:ac:3f:a5:00:ba:be:af:d8:0e:aa:e9:5a:cc:a8:
d0:de:a1:58:39:1d:44:11:0b:ae:0f:05:4a:f2:2e:1f:42:e8:
c2:cf:f4:7d:8d:ff:f3:b2:b9:3f:f0:7c:20:00:21:2a:5b:69:
27:ee:50:b2:fa:74:b4:3f:5b:25:e0:d8:3b:30:56:8a:6f:af:
3c:55:1f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:04 2025 by rpki-client