Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NX-2opBalr7pL0lrWzisCa5wk_8.roa
File: NX-2opBalr7pL0lrWzisCa5wk_8.roa (raw, json)
Hash identifier: lJ0bm695pYZyPuC8blM5DF+4+SyaMltHw2L5Lq3j5bk=
Subject key identifier: 35:7F:B6:A2:90:5A:96:BE:E9:2F:49:6B:5B:38:AC:09:AE:70:93:FF
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01942827579A72E9B18EC7D8C6BA411A70F9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NX-2opBalr7pL0lrWzisCa5wk_8.roa
Signing time: Thu 02 Jan 2025 17:54:14 +0000
ROA not before: Thu 02 Jan 2025 17:54:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36666
IP address blocks: 185.141.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:57:9a:72:e9:b1:8e:c7:d8:c6:ba:41:1a:70:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=357fb6a2905a96bee92f496b5b38ac09ae7093ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:97:5c:53:74:92:e9:b4:29:60:b2:09:78:
32:f3:6a:30:a1:44:00:e3:c8:53:37:39:79:17:ca:
0a:e8:ba:6c:af:fa:97:0e:b2:89:58:46:f3:af:bd:
aa:35:2f:b9:91:96:72:65:9f:d0:6f:d0:0a:b9:15:
ec:d2:94:a0:85:9f:1c:2e:84:1b:8a:f3:29:43:cf:
fc:62:67:03:34:cc:89:45:fd:63:2e:cd:55:ab:68:
94:16:aa:96:08:7a:39:94:d0:c0:7d:8a:61:19:c2:
d5:5f:83:16:fd:b0:8c:41:31:43:cd:00:08:df:b8:
bb:52:fb:c3:2f:31:7e:41:65:c4:ee:db:ab:cb:2f:
4e:55:c1:ad:90:ed:0c:a6:2f:7e:63:bb:84:52:17:
22:11:e3:8a:bc:dc:ee:fd:bc:75:7e:c5:c3:74:eb:
0f:95:ce:4b:d5:1a:9e:4e:cd:48:28:ff:f3:b3:ca:
e3:1b:cc:80:2b:e1:24:5d:0e:7e:73:1d:46:31:cf:
e9:37:88:f4:50:87:2d:d3:3d:d4:e7:3a:8e:84:f7:
1f:50:42:6a:29:99:42:9f:16:14:ad:33:b4:68:e2:
c3:0a:77:43:4a:ce:c4:c8:60:b9:5a:54:f7:45:6f:
eb:56:53:11:b5:58:7b:ac:2c:b2:10:80:b3:08:1a:
b1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7F:B6:A2:90:5A:96:BE:E9:2F:49:6B:5B:38:AC:09:AE:70:93:FF
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NX-2opBalr7pL0lrWzisCa5wk_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.218.0/24
Signature Algorithm: sha256WithRSAEncryption
77:82:b8:4c:f2:91:68:b5:71:34:48:55:47:3b:93:ed:34:38:
d9:de:26:28:98:7f:2a:83:0b:14:ab:a8:61:36:c0:fe:c4:e3:
64:8f:29:fb:77:c3:f7:33:75:ea:06:6f:ac:89:4e:63:62:eb:
7b:22:6a:26:ad:e3:4c:3f:75:88:78:f9:13:2d:56:18:5d:18:
59:87:42:a1:3d:02:e2:4a:d0:4c:2b:91:86:62:c4:20:18:6e:
ca:03:ff:89:b9:6f:4e:26:74:5f:e1:49:57:99:a3:5f:78:7f:
a0:df:b9:75:13:06:31:56:dd:ee:69:a3:08:51:96:5b:d4:7a:
00:59:51:31:2f:17:66:1a:c7:a8:29:49:5a:4f:c7:a8:08:26:
6b:65:ba:11:ad:5e:ea:b3:d5:e3:26:2f:60:82:aa:f6:a9:bd:
21:cd:82:22:46:4e:80:cc:f0:29:b0:24:0d:84:c1:0f:f2:30:
75:cf:81:16:76:bd:a4:40:54:50:27:aa:73:f3:71:08:b5:6b:
ba:e8:2b:9e:57:90:df:cf:f3:6a:35:f0:6d:35:b8:44:84:ce:
07:25:c2:a8:48:57:23:c5:19:78:70:dd:b3:f8:a2:10:08:1b:
0b:82:38:87:e8:99:3a:2a:c5:38:fe:4b:83:ff:28:90:fb:1e:
25:58:53:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:57:19 2025 by rpki-client