Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/na93BrU5ShpCOO3gSaEqJY-3lT4.roa
File: na93BrU5ShpCOO3gSaEqJY-3lT4.roa (raw, json)
Hash identifier: jsEtQ0ZWxD7UTjfus61ic0m3WTlswJgMUxwjfxzFL4E=
Subject key identifier: 9D:AF:77:06:B5:39:4A:1A:42:38:ED:E0:49:A1:2A:25:8F:B7:95:3E
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7E2CD74890ED1C66C436F16B8F53F
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/na93BrU5ShpCOO3gSaEqJY-3lT4.roa
Signing time: Wed 01 Jan 2025 21:48:58 +0000
ROA not before: Wed 01 Jan 2025 21:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48108
IP address blocks: 185.120.56.0/24 maxlen: 24
185.120.57.0/24 maxlen: 24
185.120.58.0/24 maxlen: 24
212.22.64.0/24 maxlen: 24
212.22.75.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
2a06:c3c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e2:cd:74:89:0e:d1:c6:6c:43:6f:16:b8:f5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9daf7706b5394a1a4238ede049a12a258fb7953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:9d:64:72:b2:30:52:f9:04:e6:c9:72:be:
ee:e1:83:e3:cc:8e:7d:ac:ef:55:3b:c7:f8:81:a6:
97:16:17:36:f9:42:d0:25:c6:28:27:a4:54:2a:84:
29:80:dc:47:f8:c8:43:d2:81:05:98:a7:21:d0:cd:
aa:f5:61:8c:d0:cd:f6:36:fa:0a:5b:55:f4:5c:8e:
12:05:cf:8c:b6:43:f0:38:8e:dd:d2:4e:d5:f8:ac:
52:07:d0:d6:ea:4c:f9:33:54:fa:da:c8:cb:0b:13:
fd:8f:de:5f:90:65:e1:0b:2c:0e:23:66:8f:e1:5b:
10:1d:37:24:47:b7:77:45:be:ef:e5:b2:8c:d6:00:
ac:ea:30:56:c5:a1:01:d8:7a:6c:16:59:9a:5c:e4:
27:e1:3d:9f:b8:da:3d:75:48:aa:80:64:66:b9:d2:
5a:df:dc:d3:60:88:e4:13:b9:23:27:8e:44:1a:da:
ed:26:c8:7c:f7:27:26:7c:01:07:fc:03:ed:b6:c4:
fe:d7:4e:fe:f3:e0:3f:44:4d:f0:d3:aa:f1:47:fd:
5f:dc:b1:f5:6f:02:0a:e0:7e:e0:0d:86:42:fe:16:
47:ee:f9:60:42:b7:83:ab:57:e2:64:ae:6f:e3:b7:
7c:c9:fa:03:05:61:fc:72:33:bc:f5:80:5a:ef:a2:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:77:06:B5:39:4A:1A:42:38:ED:E0:49:A1:2A:25:8F:B7:95:3E
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/na93BrU5ShpCOO3gSaEqJY-3lT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0-185.120.58.255
212.22.64.0/24
212.22.75.0/24
212.22.77.0/24
IPv6:
2a06:c3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
88:a2:b0:98:8a:f4:84:45:06:94:25:e5:37:38:20:16:d2:6d:
93:e4:99:a3:16:26:a1:4c:01:7e:2f:e2:b1:1f:cd:95:e7:8e:
3f:4e:8c:72:1c:23:21:33:90:cd:a1:27:00:34:37:5d:38:55:
b6:06:40:bd:40:10:91:0b:d7:f0:2f:c2:bd:ac:47:93:0b:0d:
21:fa:40:59:1f:c8:ad:6d:04:b9:75:2b:cc:8b:15:82:b1:3e:
19:92:bf:df:07:8f:2e:f0:4f:c4:3d:7e:be:14:7d:ae:39:53:
ab:03:7d:24:99:fd:9e:d5:c3:1c:37:ea:3a:ce:58:68:fe:56:
90:f0:f0:23:c1:7e:04:16:ac:6f:c4:d1:08:1e:19:40:1c:73:
81:2b:b3:de:e2:13:0d:60:a8:f1:d8:f5:2f:be:f4:ef:ff:69:
ac:ab:15:06:bd:af:a4:c5:15:9a:47:d7:04:30:1e:ce:e6:64:
90:a2:53:e6:d2:56:9d:ec:78:f0:4e:46:d7:e4:e2:1e:61:95:
20:5c:ef:e9:4b:43:eb:a9:10:b8:c5:1e:23:e5:85:e4:9e:cd:
ba:d6:7b:79:0f:da:1c:7a:83:e7:0f:3c:47:f1:38:41:08:d6:
b4:56:f0:e7:e2:9e:be:6d:0c:ff:c3:f0:28:43:c3:71:55:1d:
1f:32:e8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:06:02 2025 by rpki-client