Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Nfx8vYo0Iw2mKW22aaFXxinTCeE.roa
File: Nfx8vYo0Iw2mKW22aaFXxinTCeE.roa (raw, json)
Hash identifier: kS8qePPaEpHOmCFvTOSpxxrssJ2O6avqSBnIhzOfnwA=
Subject key identifier: 35:FC:7C:BD:8A:34:23:0D:A6:29:6D:B6:69:A1:57:C6:29:D3:09:E1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01942827698A2B77CD46C970F96FB28135BF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Nfx8vYo0Iw2mKW22aaFXxinTCeE.roa
Signing time: Thu 02 Jan 2025 17:54:19 +0000
ROA not before: Thu 02 Jan 2025 17:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210715
IP address blocks: 212.192.28.0/24 maxlen: 24
212.192.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:69:8a:2b:77:cd:46:c9:70:f9:6f:b2:81:35:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35fc7cbd8a34230da6296db669a157c629d309e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:43:4e:3c:a8:d7:07:80:9f:f7:84:e1:36:
e9:6f:c7:3b:7f:54:22:2b:f2:91:b4:b5:7f:f6:59:
6a:e8:76:2e:d1:10:a0:3a:89:a9:95:c0:fb:48:7c:
c4:f7:f5:86:93:f8:af:79:8c:3a:16:25:64:15:c1:
dc:c1:6b:f0:c1:a6:b2:07:1b:90:bf:58:e9:95:40:
68:ab:d4:53:7b:09:2b:22:a1:f5:ae:2f:ad:16:63:
52:fe:39:de:fd:15:f6:11:33:98:4e:54:e1:e8:ce:
3b:c8:8a:05:7c:3a:a6:4f:a5:d8:57:77:4f:e5:df:
00:75:f7:3d:db:5f:ab:b3:11:1b:1c:e2:43:6b:87:
31:cc:52:10:2a:7a:c0:10:fb:e9:a5:c7:b6:2e:0a:
48:dc:fc:4d:69:73:9d:ae:78:bf:35:71:2e:d9:09:
74:a8:66:3f:ad:89:5c:4d:17:cc:85:8d:ec:11:cb:
75:f6:ad:55:e4:35:24:de:3f:95:f7:41:60:67:26:
fc:71:65:4c:2a:40:86:3f:18:86:45:fe:20:14:48:
d6:68:47:8e:bb:e9:e6:ff:ba:da:5e:f2:de:38:c5:
53:dd:cc:7e:55:bb:aa:c9:37:fd:7a:9b:74:41:a8:
95:0a:15:fd:73:db:07:61:fe:c0:f3:04:82:b3:f6:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:7C:BD:8A:34:23:0D:A6:29:6D:B6:69:A1:57:C6:29:D3:09:E1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Nfx8vYo0Iw2mKW22aaFXxinTCeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.28.0/23
Signature Algorithm: sha256WithRSAEncryption
89:1c:d3:3b:d8:46:3b:dd:a1:a7:b2:8b:f3:98:4b:36:c2:42:
c3:95:78:07:38:1f:fc:4c:63:79:11:8d:64:86:4f:48:00:39:
0e:78:8f:3d:8f:8f:32:4d:8e:35:ff:b2:2a:d7:68:39:1e:5d:
9a:75:cb:08:bf:1e:14:03:6d:ff:dc:44:88:47:3c:21:2f:b9:
e4:57:66:23:8e:75:a7:5c:17:1f:9d:df:49:23:c8:56:5a:10:
82:b1:b1:57:9f:a7:53:a2:35:8c:46:17:40:7e:1c:98:e1:b4:
30:43:26:8c:25:47:1a:af:d9:4c:d5:6b:cd:7b:bd:55:c0:07:
35:f7:78:84:93:73:5e:ee:49:4c:03:21:b4:51:fc:6d:52:15:
f1:32:a2:82:02:b4:5e:ae:0d:e1:57:e5:b1:d2:4c:f4:91:aa:
a1:4b:15:b0:ce:db:dc:47:ba:63:bb:1d:90:0d:e0:b9:01:0e:
fb:2d:ff:15:54:61:4b:1c:40:21:61:28:c8:0e:81:84:60:e6:
5f:ac:c1:e0:3e:48:74:e9:49:30:84:10:5f:95:d5:52:41:56:
32:dd:af:a0:b6:d5:e1:6c:ce:65:61:a8:8e:25:68:5b:6d:4b:
6d:23:85:4a:9c:4f:95:88:ca:94:13:d1:cc:8f:7b:a3:79:33:
a1:15:6a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:04:56 2025 by rpki-client