Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa
File: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (raw, json)
Hash identifier: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=
Subject key identifier: 9D:74:0F:2E:23:B5:D8:CD:D8:FC:CC:D4:F3:C3:AE:55:83:19:E7:F5
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 01942144101954BC945ADCB1BC6AC0B0C164
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59989
IP address blocks: 185.82.32.0/24 maxlen: 24
185.82.33.0/24 maxlen: 24
185.82.34.0/24 maxlen: 24
185.82.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:10:19:54:bc:94:5a:dc:b1:bc:6a:c0:b0:c1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d740f2e23b5d8cdd8fcccd4f3c3ae558319e7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:15:70:82:c2:ff:81:e2:a1:dd:51:fe:58:
fc:45:40:f5:5e:f7:af:de:33:67:75:9e:a1:e4:77:
e2:72:44:d5:09:00:e0:58:cb:4e:61:14:a0:02:66:
7e:0f:7b:5d:93:3d:53:5e:e9:23:da:8c:32:43:e3:
e5:95:17:db:7c:a7:18:03:a9:91:a5:3b:ed:60:4b:
5c:3c:2e:82:e7:27:52:77:32:70:c2:f0:d3:c0:81:
d7:e5:e4:da:d8:63:bc:4f:60:3b:7b:46:4d:e4:58:
34:bd:33:47:fb:2b:f3:72:15:1f:9e:bd:b2:79:8d:
d2:37:b7:d2:38:bf:a0:46:f6:7b:f4:d9:61:b0:f7:
87:30:fd:ee:9a:98:87:64:6a:17:54:18:24:1e:44:
4e:5e:6e:1a:27:c6:21:b2:69:95:87:c5:1f:8e:c1:
89:e9:d6:1b:ce:48:3f:19:82:fd:b1:90:3f:aa:4e:
9e:05:3a:cb:34:f3:85:3a:95:02:65:9b:ed:00:06:
3b:d1:1f:9c:20:7b:e2:20:f0:85:71:b0:bc:3c:ea:
e5:48:b2:1f:bb:c4:e5:e8:09:da:a9:ce:08:37:1c:
f9:be:e0:d4:9e:54:eb:1c:38:53:2c:3e:6c:7a:db:
97:99:0a:18:74:4c:ce:ed:89:b3:e7:9a:51:0a:99:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:74:0F:2E:23:B5:D8:CD:D8:FC:CC:D4:F3:C3:AE:55:83:19:E7:F5
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.32.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:ae:7f:15:e7:31:d7:6b:0c:0f:ac:a8:6a:b5:94:8f:62:fc:
6d:b1:9a:69:57:d8:32:50:3f:6b:b6:00:5a:9e:d0:65:b9:1c:
cc:0f:76:d2:f1:aa:6d:86:27:3b:5e:5e:37:5a:ce:c9:91:bb:
be:e5:1b:d2:c6:71:c1:57:c6:27:70:c7:3a:b7:85:a2:e5:75:
f0:84:27:bc:ad:e0:8d:7b:f5:c0:56:25:23:48:d4:a3:65:66:
07:2d:a6:2d:19:53:f5:77:2b:e8:ae:c5:ca:e7:05:ae:cf:84:
e4:a9:84:36:50:a9:b1:29:f1:63:a9:98:be:90:3d:b9:87:c5:
f0:3e:24:2e:cb:cd:1c:0a:db:f9:59:09:ea:1a:86:70:bb:3b:
80:37:ce:d8:ba:85:17:61:9e:9d:74:05:8d:a2:6f:fc:15:bd:
82:e7:44:6a:73:24:ca:e4:80:5a:d8:77:86:f0:9a:c5:e2:21:
57:2c:7f:5d:43:48:ad:fa:94:ee:fc:cf:5d:83:a8:f4:ac:0c:
0f:35:d6:47:4e:43:44:3c:9f:4e:a1:c7:f4:b7:fa:d9:4a:c6:
ae:b8:ba:7b:f7:0e:5e:82:05:90:64:8e:6f:6c:4a:7a:b1:20:
1e:88:6c:4c:5e:40:9f:4b:bb:76:ff:97:b7:0e:4c:5e:65:bc:
d0:ef:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:42:15 2025 by rpki-client