Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/njV-GA0Ii5_5OkqbA6b8eDCoFt4.roa
File: njV-GA0Ii5_5OkqbA6b8eDCoFt4.roa (raw, json)
Hash identifier: 3zM9PD2sx2obkpcLLLOA9+i/X09CCKUBp/Xzom7yXUE=
Subject key identifier: 9E:35:7E:18:0D:08:8B:9F:F9:3A:4A:9B:03:A6:FC:78:30:A8:16:DE
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 019422FB05448B8F487B9D1ADBE260F90C3E
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/njV-GA0Ii5_5OkqbA6b8eDCoFt4.roa
Signing time: Wed 01 Jan 2025 17:47:43 +0000
ROA not before: Wed 01 Jan 2025 17:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210544
IP address blocks: 192.124.252.0/24 maxlen: 24
193.28.64.0/23 maxlen: 24
2a12:6900::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:05:44:8b:8f:48:7b:9d:1a:db:e2:60:f9:0c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Jan 1 17:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e357e180d088b9ff93a4a9b03a6fc7830a816de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:83:d3:ec:43:7b:64:5e:37:42:0d:9e:31:33:
51:2e:8e:61:77:d2:e9:eb:eb:bb:a6:ff:45:fa:5a:
97:a9:da:87:0c:ea:ca:c6:20:80:34:79:b7:d3:05:
a6:3b:e0:e0:95:fb:46:a0:dc:51:b8:95:bb:44:83:
05:e5:ce:34:9e:d8:76:0d:b7:7b:4b:f1:06:80:ef:
d2:ee:77:06:18:69:f1:a8:6f:8c:7b:ab:fb:fe:0f:
e3:f2:c0:0d:b9:6a:19:21:70:ce:39:7b:db:c5:fd:
79:cc:29:ba:69:65:f3:83:81:11:46:b3:7e:2a:ea:
d8:67:c3:21:2d:a6:12:4c:af:b6:5a:32:1c:d1:f8:
17:66:fe:67:54:74:69:21:21:8a:7d:ae:ac:4f:2c:
1e:f3:b4:e9:42:75:fe:7b:45:9a:00:22:ba:94:41:
e7:cb:bb:f3:ad:44:88:9c:72:13:7f:2a:41:97:4d:
80:02:ef:1e:38:69:ba:35:5c:00:09:2a:1c:83:77:
bf:d8:bc:da:9f:21:de:3f:e8:65:53:27:42:da:ec:
30:b3:34:db:3a:97:bb:1f:61:25:44:f7:44:02:aa:
c5:0f:9f:de:ce:29:38:9b:3f:bb:ed:8b:8c:57:72:
54:78:e1:db:c3:07:75:68:4b:64:3b:71:f4:0e:1a:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:7E:18:0D:08:8B:9F:F9:3A:4A:9B:03:A6:FC:78:30:A8:16:DE
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/njV-GA0Ii5_5OkqbA6b8eDCoFt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.252.0/24
193.28.64.0/23
IPv6:
2a12:6900::/36
Signature Algorithm: sha256WithRSAEncryption
29:d7:e2:76:c4:22:0b:3a:da:02:6f:d7:6f:a8:da:0c:e4:84:
18:2a:0a:2c:1c:64:47:69:8c:73:19:a5:2f:35:61:0d:d2:d9:
e4:2b:98:5b:2d:11:df:2f:e1:98:2a:f8:fa:c9:07:80:ca:64:
4f:2e:ec:9f:66:39:08:a4:b3:a2:19:65:a6:03:ac:90:ae:6d:
2f:92:8d:02:d7:7a:96:6d:2c:8a:6a:89:de:71:8d:6f:77:3e:
6e:e3:8c:9c:ca:bb:36:d4:0f:bd:0f:e7:da:40:72:a8:fb:86:
7b:c3:f9:d5:82:b1:b9:60:aa:dd:df:f9:90:f6:3e:d7:13:3c:
55:25:e0:d4:17:6a:93:a1:5c:0d:4e:a2:5b:84:39:94:f5:01:
b8:8c:d0:30:88:d9:c8:b6:83:4e:a6:2d:99:ae:64:48:c9:22:
fe:6e:20:93:24:8d:54:fd:a2:d1:ed:be:6d:e6:88:c4:fd:86:
93:09:2f:c8:04:de:c8:e9:ef:05:8e:dd:53:fb:2e:87:06:7e:
bd:fd:2a:53:a9:b7:05:67:3e:41:74:43:14:af:a0:4c:53:05:
70:c3:b1:b2:b8:a0:02:90:df:b1:be:26:9d:00:75:a1:e5:00:
75:68:8f:8a:a2:08:61:72:16:41:ef:9c:3e:df:b3:b7:00:9e:
80:08:e4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:09:56 2025 by rpki-client