Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Nbnelf0nsfgXp5be-X59zDzayzE.roa
File: Nbnelf0nsfgXp5be-X59zDzayzE.roa (raw, json)
Hash identifier: WDRYAagH2zbCCOx+f1nJ8TikWZXwdLXUb0hnu220mNY=
Subject key identifier: 35:B9:DE:95:FD:27:B1:F8:17:A7:96:DE:F9:7E:7D:CC:3C:DA:CB:31
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5CF1C9C54EF86750C4A4FDA3911EE
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Nbnelf0nsfgXp5be-X59zDzayzE.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49770
IP address blocks: 185.149.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cf:1c:9c:54:ef:86:75:0c:4a:4f:da:39:11:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35b9de95fd27b1f817a796def97e7dcc3cdacb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:63:95:46:4c:53:f3:07:f2:85:1b:4c:a7:f7:
73:e3:b4:b7:8a:ec:20:5c:95:3a:49:b1:8f:18:e1:
e1:66:e0:21:f8:6a:7f:f4:be:3a:fa:06:a6:c6:d4:
9b:ba:9a:cd:61:1e:d7:d3:bb:8f:c4:44:e2:7c:a4:
5c:c2:02:a1:f4:15:54:7d:74:a8:25:4d:b5:54:bd:
8f:e5:62:8d:26:66:85:bd:66:f3:a8:ec:4c:d9:0d:
3e:4d:ec:da:21:0d:bb:cc:3f:33:f0:f1:56:fb:ee:
61:09:72:57:5e:8e:d0:06:94:0f:83:7e:75:14:22:
f2:75:1c:76:57:7b:3b:ce:f6:b8:61:7d:08:85:30:
a6:15:d6:7b:38:fa:56:8d:0d:d1:8e:da:ad:de:2e:
fd:4a:05:ff:84:69:ea:6e:36:8d:91:94:a5:56:8a:
e7:82:01:20:60:aa:d5:f7:b1:40:b7:36:f1:f3:b9:
3c:2f:a9:44:54:8c:82:ff:cb:4c:f9:70:ca:70:6d:
f1:6c:f3:be:a7:bf:96:21:38:af:e9:a6:77:47:99:
75:b4:fb:12:4d:69:e2:1b:b3:f6:20:57:ef:75:d2:
5d:07:19:d4:02:f0:24:bb:85:f8:70:f7:dc:78:e5:
24:ae:1b:8e:d7:f8:27:bb:aa:ee:62:83:88:69:00:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B9:DE:95:FD:27:B1:F8:17:A7:96:DE:F9:7E:7D:CC:3C:DA:CB:31
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Nbnelf0nsfgXp5be-X59zDzayzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.123.0/24
Signature Algorithm: sha256WithRSAEncryption
19:69:31:3f:79:1c:b5:20:c8:fe:0b:3e:87:81:46:7e:57:df:
ae:50:63:97:e8:40:74:0b:fa:9e:47:2b:28:79:e1:f6:da:e9:
64:41:96:37:0b:f9:a3:1a:16:ee:5e:23:21:c1:1c:d3:86:72:
43:56:c7:01:27:58:69:e1:be:a6:b5:a8:c5:96:c7:c0:32:ab:
62:48:62:e3:68:ca:19:f6:2f:7d:3b:28:bd:7c:a5:fe:1b:48:
30:5d:18:7c:65:15:8d:94:5e:55:e9:6a:c1:0d:26:5d:c4:b0:
cb:3d:3b:de:8b:27:ee:ab:9f:1c:51:d8:2e:e2:56:4b:90:94:
da:20:65:fa:84:e0:6b:d3:f0:42:2a:99:4e:15:2a:d1:01:43:
e2:6f:0f:16:84:78:71:a3:fc:d1:75:e9:ea:26:cb:0c:ee:e4:
86:ed:5d:80:63:1a:53:24:a3:23:f8:7e:f2:15:9a:3d:f8:b4:
ee:8b:b8:4c:0f:bb:09:7a:55:2f:05:55:79:87:ab:df:75:1f:
22:eb:48:d1:5a:66:a2:05:92:5e:c1:db:e0:66:93:27:df:d6:
a3:95:44:de:3c:4e:8e:61:e8:60:52:dd:a8:5f:38:85:9b:ea:
66:2d:d3:65:99:ce:8f:69:36:e5:d1:89:64:90:f8:41:1c:12:
32:b5:2d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:43 2025 by rpki-client