Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/NeDUni-C3uHplhagAy2lf9i4WwQ.roa
File: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (raw, json)
Hash identifier: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=
Subject key identifier: 35:E0:D4:9E:2F:82:DE:E1:E9:96:16:A0:03:2D:A5:7F:D8:B8:5B:04
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 019422FBFD4E56992B0C246B9D60AA032E2F
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/NeDUni-C3uHplhagAy2lf9i4WwQ.roa
Signing time: Wed 01 Jan 2025 17:48:47 +0000
ROA not before: Wed 01 Jan 2025 17:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.133.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fd:4e:56:99:2b:0c:24:6b:9d:60:aa:03:2e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Jan 1 17:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35e0d49e2f82dee1e99616a0032da57fd8b85b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:09:6d:37:81:59:ce:4b:c6:83:d6:5d:31:0b:
38:d7:b1:6d:ec:10:23:75:6b:6c:f6:f2:5a:15:dc:
8c:6e:04:34:f7:15:00:3c:8b:a9:e6:45:74:08:88:
b8:54:58:f6:26:80:bc:ef:c0:c2:1a:82:da:e7:17:
d2:74:d0:de:7c:0c:d1:af:c1:15:63:76:1d:43:fd:
52:d3:da:f2:5c:22:bf:c6:e4:b1:56:9b:04:09:5e:
15:1b:82:02:36:96:4e:d8:5f:45:d8:db:a5:c2:2a:
0f:92:a9:7a:58:b3:5d:8b:82:d0:8c:a5:36:46:9c:
fe:91:91:91:26:67:36:d4:dd:32:e6:c8:a3:e7:c4:
20:3b:43:2e:2c:a3:88:b8:0b:2e:2e:db:fa:fb:b4:
67:9e:2e:9c:88:25:79:73:2e:f0:d6:6c:23:ea:56:
32:3f:41:e6:e9:5e:52:2a:8f:ee:83:33:8a:ab:4f:
03:67:e4:88:58:df:38:6e:03:6d:c2:a9:dd:05:0d:
ea:f4:c7:c2:e9:43:c8:1a:4f:00:00:09:28:f6:ef:
6e:9e:7c:52:a1:98:88:8b:32:4b:bd:1b:b6:a9:c0:
cf:d5:46:95:3a:1d:19:f2:3e:bf:a2:b5:f5:31:bb:
be:5c:34:7e:3d:65:aa:00:66:ad:a0:00:c7:97:66:
a6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E0:D4:9E:2F:82:DE:E1:E9:96:16:A0:03:2D:A5:7F:D8:B8:5B:04
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/NeDUni-C3uHplhagAy2lf9i4WwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.138.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8d:05:84:36:43:a0:96:3d:08:d8:0c:85:de:59:ff:f6:cd:
0f:3f:08:79:93:d0:51:e8:cc:72:3a:b3:05:85:21:69:df:74:
65:d8:07:a3:06:d7:3f:aa:8f:65:a9:68:47:8e:c8:2a:d3:12:
23:02:9d:51:da:60:dd:5a:2f:a3:a4:7b:a2:63:34:a8:81:7b:
19:7b:6c:cc:6f:8a:05:ff:b9:26:38:53:db:de:52:a6:b3:68:
bd:fb:c2:9e:e5:64:8f:a5:13:6c:4e:88:d0:95:7b:4d:89:18:
b1:dc:28:57:35:a6:81:e3:29:8a:b9:3c:bc:52:09:10:5d:c4:
52:33:d6:a3:20:f7:5f:81:db:5c:ec:9c:1c:ae:1f:84:2f:aa:
c7:0b:49:0b:1b:22:18:fa:27:ea:e1:19:c8:39:23:20:9d:b4:
f1:f3:d6:1a:ce:1a:77:d2:41:79:94:d3:b7:11:a5:78:36:08:
72:61:a4:a2:ea:2f:e4:50:21:d9:32:13:43:c4:36:c0:45:1b:
68:ae:36:0f:db:4e:26:3a:87:ae:b0:81:a8:e0:61:9e:18:40:
91:5f:65:3e:49:69:6e:78:e8:3e:fa:ed:0c:ec:82:08:b6:15:
50:2c:07:77:0a:68:2e:3b:20:80:e1:27:e0:fb:d0:17:d8:27:
0b:1d:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:55:18 2025 by rpki-client