Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/bL9XDxQqDi4zzbqIbwV9pxg-nag.roa
File: bL9XDxQqDi4zzbqIbwV9pxg-nag.roa (raw, json)
Hash identifier: vqETjbVoGoH82qeAvCJ8Sz1hJwZnPnltJtLCCK0jXFQ=
Subject key identifier: 6C:BF:57:0F:14:2A:0E:2E:33:CD:BA:88:6F:05:7D:A7:18:3E:9D:A8
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 0194266C20D7A49679C57109AF6DD1FD7DA6
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/bL9XDxQqDi4zzbqIbwV9pxg-nag.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48271
IP address blocks: 212.2.224.0/21 maxlen: 24
212.2.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:20:d7:a4:96:79:c5:71:09:af:6d:d1:fd:7d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cbf570f142a0e2e33cdba886f057da7183e9da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:84:8f:21:f5:01:6b:32:f9:0c:31:d6:21:
de:68:e3:e3:01:9f:06:52:b2:dc:12:f4:0e:02:24:
e7:bb:15:19:ac:f6:7e:cc:6c:f8:db:a5:5c:87:37:
90:e8:f1:04:4c:e1:ae:9a:d4:f5:6c:70:65:a1:c9:
c6:14:68:c6:16:b4:ef:45:5e:3e:b4:7c:ec:f5:bb:
8c:57:f4:17:c7:7e:f5:7a:ea:b4:94:58:76:dd:cd:
f3:2e:43:21:56:c2:7c:f4:f1:36:d3:74:68:0a:09:
d1:62:85:69:7e:96:aa:4e:08:00:61:a7:84:e4:22:
29:31:9c:a3:1c:9d:79:62:58:27:cc:31:72:35:6c:
5d:7b:db:98:b8:28:56:93:97:27:08:eb:63:77:36:
83:db:e0:1c:03:91:13:72:9f:68:8b:60:79:de:23:
a8:b7:14:93:6f:e0:03:cc:75:e3:f0:8b:ec:c5:c9:
35:af:7a:9c:d4:88:e3:7e:12:a5:74:3a:5b:c2:1c:
32:16:c0:bb:e9:65:15:c2:8c:d1:ec:aa:96:5c:79:
58:66:6e:4e:ca:f6:ce:1a:7a:4c:27:83:6c:81:d5:
fb:41:8c:8c:0a:fe:a1:b0:75:49:98:c1:38:c0:dc:
b7:52:d7:a9:4b:59:4e:88:20:e3:e6:42:26:68:65:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BF:57:0F:14:2A:0E:2E:33:CD:BA:88:6F:05:7D:A7:18:3E:9D:A8
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/bL9XDxQqDi4zzbqIbwV9pxg-nag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.224.0-212.2.232.255
Signature Algorithm: sha256WithRSAEncryption
61:6a:c0:22:85:62:dd:be:d8:e6:70:23:bf:50:6d:01:fc:ab:
5a:47:0b:ba:c9:6d:42:47:9c:7b:2b:25:29:82:e8:b3:bd:f0:
5d:d5:dc:c5:f2:0d:97:dc:b0:b6:d9:16:c0:ec:2c:97:a1:0a:
97:6c:45:15:3c:94:54:59:da:5d:26:ca:a4:10:b5:63:c5:a9:
07:78:f4:d9:25:b5:d3:55:9c:9f:c8:73:b5:95:fd:db:db:ea:
bb:35:76:04:6e:46:60:86:bb:9b:1b:74:2f:8d:03:4b:3c:1a:
43:74:f2:1c:7f:a9:1f:20:53:ca:fd:00:5e:d8:4d:c5:02:e4:
37:eb:dd:34:07:6a:7b:a0:b4:e6:70:c0:5e:b3:3c:02:13:65:
bd:91:ed:1f:1d:0e:08:87:a2:ab:a7:03:51:f8:81:c1:a5:8a:
15:3b:3d:60:8e:a0:f6:0c:f0:8b:e6:6b:a1:73:9b:27:de:37:
ed:63:2b:84:70:67:6f:0b:c2:96:8e:56:64:45:a1:9d:0c:e2:
4b:d7:10:7c:cb:09:f4:d6:59:bc:dd:7b:18:95:1f:1e:3b:41:
7b:1c:d8:97:ef:d2:fe:51:72:5b:bd:c2:c0:9c:b2:a1:4c:89:
77:23:6c:cb:eb:8b:20:37:2b:e6:5e:43:d0:a6:c0:6d:2a:24:
06:8a:4d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:07 2025 by rpki-client