Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/NpHLaknOdBx60yAQ2jdXnTM161c.roa
File: NpHLaknOdBx60yAQ2jdXnTM161c.roa (raw, json)
Hash identifier: DHFiO4IjvNVYSet3EXaCtdOk+49rGJ5t7Cjuhdf3cqA=
Subject key identifier: 36:91:CB:6A:49:CE:74:1C:7A:D3:20:10:DA:37:57:9D:33:35:EB:57
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01958ECF5F3C1443B885804606965469903E
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/NpHLaknOdBx60yAQ2jdXnTM161c.roa
Signing time: Thu 13 Mar 2025 09:21:49 +0000
ROA not before: Thu 13 Mar 2025 09:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215261
IP address blocks: 213.181.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:cf:5f:3c:14:43:b8:85:80:46:06:96:54:69:90:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 13 09:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3691cb6a49ce741c7ad32010da37579d3335eb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:ea:e4:5c:23:4b:38:d4:2d:ea:d9:cb:f2:
50:fb:99:42:d9:09:64:fd:9d:77:ea:83:f5:0a:66:
e3:ed:be:42:fc:30:6d:ac:1d:19:2c:79:a5:0d:d1:
aa:58:e4:fa:88:ec:c9:2b:d6:73:14:c6:b8:94:17:
bf:e8:e1:4c:3d:b0:03:21:28:40:ea:bf:5d:0c:ac:
bb:76:cf:a2:17:64:f6:0c:5e:65:0d:d4:6f:b5:54:
fc:02:b9:fe:8e:f5:04:f5:aa:8d:96:21:c8:46:cc:
33:78:cd:fe:0d:37:a8:4d:2c:34:7e:67:f7:a3:d5:
2c:16:6f:a5:d3:44:0c:a1:66:21:30:de:62:fc:2d:
1e:e3:7f:d2:3e:82:3d:da:16:1b:28:23:71:40:1d:
b8:18:fb:20:dc:78:fc:16:e7:dc:67:e1:16:81:01:
e4:a0:50:57:1a:9e:de:09:b0:a5:b5:f1:fa:06:3c:
94:9a:cb:8e:9d:41:27:94:e4:70:87:1b:ae:27:30:
ed:03:08:63:d0:4c:1c:ba:11:ba:a7:a4:cc:14:f5:
3c:67:ef:66:d3:e2:15:55:6e:17:86:38:ee:ae:45:
2c:12:58:33:f2:ee:2c:32:0a:31:ec:11:6e:0a:5c:
58:b6:c6:c6:66:2d:05:a0:74:a5:94:97:a3:90:93:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:91:CB:6A:49:CE:74:1C:7A:D3:20:10:DA:37:57:9D:33:35:EB:57
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/NpHLaknOdBx60yAQ2jdXnTM161c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.181.206.0/24
Signature Algorithm: sha256WithRSAEncryption
67:00:90:c4:cf:7b:29:7b:0f:90:8e:a5:c7:ae:ab:c5:cb:39:
a8:dc:0e:ba:27:f1:6f:de:05:ad:94:75:84:df:74:b8:62:8b:
b2:70:93:a0:f2:9d:6f:84:aa:bd:6b:fc:7e:41:ff:6d:90:24:
b1:97:2f:7f:cd:27:7c:97:aa:02:70:e5:70:f1:81:ef:c7:f5:
f0:21:79:05:99:ba:4f:12:eb:4e:36:85:7a:02:50:72:47:a5:
19:7e:b3:24:1a:b8:81:22:ab:6e:af:d0:b9:26:9b:9c:34:57:
75:c3:71:af:95:5e:d3:15:0f:84:4a:ff:81:25:8b:0b:e2:ad:
e4:7a:b1:7c:ce:2d:78:82:c0:ab:24:0f:75:ff:03:2a:57:17:
70:ca:c7:99:a3:98:6a:2b:b8:80:87:60:bc:f7:88:69:49:99:
d2:b8:10:8d:e7:a3:b8:1c:10:61:41:f7:0e:de:e5:f5:ba:81:
bd:bc:f7:18:e9:e8:04:76:0c:13:ae:6e:5a:2e:8f:5c:81:82:
2f:55:4b:9d:78:14:f9:79:e6:f0:33:09:cc:85:23:1d:17:67:
6f:40:23:77:ea:3a:44:bf:2a:5f:ae:d2:b1:04:c7:b9:bf:cb:
a7:5f:08:08:9b:27:f5:57:c1:22:78:e3:f5:1a:18:af:d0:17:
8d:16:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:33:43 2025 by rpki-client