Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/NpE70Fe0tVgvjhxL3dXp9bHr4as.roa
File: NpE70Fe0tVgvjhxL3dXp9bHr4as.roa (raw, json)
Hash identifier: z8UXn+KxDQlE7C8JL0d1yU/c5KyJRmTt3aqFfwUBK+U=
Subject key identifier: 36:91:3B:D0:57:B4:B5:58:2F:8E:1C:4B:DD:D5:E9:F5:B1:EB:E1:AB
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747D97B206CF8A39ED1EE9FAC4EB051
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/NpE70Fe0tVgvjhxL3dXp9bHr4as.roa
Signing time: Thu 02 Jan 2025 13:50:07 +0000
ROA not before: Thu 02 Jan 2025 13:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214367
IP address blocks: 46.8.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d9:7b:20:6c:f8:a3:9e:d1:ee:9f:ac:4e:b0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36913bd057b4b5582f8e1c4bddd5e9f5b1ebe1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:4a:01:97:c9:31:a0:bf:70:d7:35:b9:13:
a7:99:e9:72:2b:9d:78:36:7d:ac:9d:40:9d:cd:4e:
c2:a1:dc:a5:c5:00:5f:e9:ac:da:ce:19:c3:1e:bc:
cc:bf:39:ca:29:64:41:c3:5d:a7:7e:f0:56:82:0f:
d0:c1:cd:c2:4a:4e:c2:4d:69:02:76:11:12:e9:86:
bf:e6:9b:2d:3c:70:06:b8:fc:09:b0:c5:ee:fd:89:
71:f1:51:27:a0:b9:82:bd:cb:ce:ac:0e:6f:d1:56:
15:77:f7:f3:6c:53:33:17:42:a2:23:b4:2a:c6:1c:
11:ec:82:f8:09:2b:b9:52:c9:17:f0:f5:4a:8a:c8:
a0:06:64:97:4d:2e:64:b0:f7:72:38:1c:aa:d1:41:
3e:9d:03:55:03:a3:c5:ea:4c:61:0a:87:2e:f2:c6:
9d:11:79:8c:59:1a:8b:5b:db:2f:f1:90:1b:dd:80:
3f:cf:28:2c:e1:d8:4f:5f:6b:ff:4c:46:c9:8c:fb:
72:1e:28:2f:41:fb:cf:8b:8c:b6:49:8b:e3:08:28:
80:66:f7:2d:9f:43:49:3f:7e:1a:b6:02:5f:2a:00:
51:d8:63:08:f1:bd:6f:41:0b:6e:cd:96:31:b2:e0:
58:93:43:06:68:d3:3b:e0:45:0b:67:17:cf:0d:92:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:91:3B:D0:57:B4:B5:58:2F:8E:1C:4B:DD:D5:E9:F5:B1:EB:E1:AB
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/NpE70Fe0tVgvjhxL3dXp9bHr4as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.207.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a3:f5:98:1c:67:15:e4:45:7f:bf:a7:aa:9f:1b:6f:3b:b6:
a9:60:3e:7c:0e:1c:93:bc:e8:14:fa:14:e6:8d:74:9b:1f:1a:
c2:0b:49:fb:33:7f:7a:3a:c7:73:c8:ea:36:e5:de:d0:71:b7:
1b:e2:d3:ec:6b:e9:10:0c:26:d5:99:e9:a5:4a:95:f9:6b:d5:
d4:90:da:d0:1f:9f:c0:88:cb:64:1b:ca:b7:93:c1:22:ed:77:
07:8d:16:72:3f:7c:88:de:46:0e:57:83:49:8d:2f:2e:d2:56:
e2:96:58:3d:90:f6:91:d7:97:3d:cd:c3:9f:92:c0:e6:f8:11:
d7:41:72:63:0b:15:46:89:1c:35:68:19:ae:86:9d:49:c6:1b:
f8:d9:94:03:5c:88:f3:52:1b:16:d5:27:ae:85:c0:41:4b:b3:
26:af:49:8d:03:45:1c:05:a6:fa:f8:bc:f7:63:88:b9:82:2b:
1a:14:94:df:35:ed:f8:ca:49:1e:08:a3:bb:24:ec:6f:93:88:
ce:c3:22:10:5b:4c:5d:ed:33:36:fc:a9:4b:1e:8d:e8:9d:65:
85:e2:93:52:9d:91:19:32:b7:fa:bd:2a:7e:3f:8f:24:31:eb:
c2:ce:bc:ce:4a:f4:30:19:5b:23:23:13:c0:7f:d9:b9:b4:6c:
db:15:93:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:30 2025 by rpki-client