Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/NaKshVhSKaYmb3Sdi3LLJdyjmds.roa
File: NaKshVhSKaYmb3Sdi3LLJdyjmds.roa (raw, json)
Hash identifier: d86txPLHJOy87A3pf1/eOV7404HvHGLlpkkFt/51J1U=
Subject key identifier: 35:A2:AC:85:58:52:29:A6:26:6F:74:9D:8B:72:CB:25:DC:A3:99:DB
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 01942369681552CC0EE515BC5B350CA1A616
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/NaKshVhSKaYmb3Sdi3LLJdyjmds.roa
Signing time: Wed 01 Jan 2025 19:48:18 +0000
ROA not before: Wed 01 Jan 2025 19:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203361
IP address blocks: 185.42.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:68:15:52:cc:0e:e5:15:bc:5b:35:0c:a1:a6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Jan 1 19:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35a2ac85585229a6266f749d8b72cb25dca399db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:92:e0:91:2a:ac:11:b6:1b:63:62:e2:d5:
2d:98:42:d8:ef:6a:de:ca:d1:49:d5:12:34:8f:ad:
08:c8:84:b3:fb:59:38:42:88:b8:d0:ce:e0:d2:fb:
fb:f0:aa:04:1e:86:9c:09:8f:05:7e:e3:ec:0c:94:
97:b1:27:01:50:ca:94:c7:6b:37:3f:cf:4d:43:0e:
cb:cc:44:95:bf:c9:00:65:0b:35:41:7f:74:15:8b:
86:d4:e8:9c:47:90:a6:cb:1d:4c:0f:67:dd:97:1f:
aa:27:8c:0f:88:45:df:14:ae:16:85:57:e9:96:13:
b6:34:1b:71:91:12:5e:5b:ee:47:e2:ab:15:7a:ec:
7f:a4:3e:cc:1c:07:34:a9:df:52:bc:e6:67:e8:ff:
5b:75:04:e6:7d:fa:b7:78:d3:dd:1d:6f:06:db:b9:
ea:57:66:3c:22:ea:51:38:a7:89:08:e4:73:59:e8:
e9:ba:34:65:b9:4c:56:41:d2:b3:03:44:d1:92:0d:
d9:6c:b4:aa:ee:4f:ef:d1:f5:a5:cb:fd:95:15:40:
f2:2b:78:2f:fd:66:75:3a:dd:99:eb:ea:a4:b3:0a:
b8:0f:7a:b6:57:ef:90:dc:ca:d3:1a:82:c6:7a:c8:
04:9b:f2:77:4b:5b:ce:8b:03:33:ad:d7:0e:df:0b:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A2:AC:85:58:52:29:A6:26:6F:74:9D:8B:72:CB:25:DC:A3:99:DB
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/NaKshVhSKaYmb3Sdi3LLJdyjmds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:14:67:aa:c4:a6:fd:7f:f6:c0:0f:1c:a4:8f:31:e9:8d:73:
ae:d8:50:a3:49:3a:14:ef:08:dc:bb:98:ac:ba:5c:e5:5b:83:
26:ac:93:34:15:b2:11:6f:5c:8c:f0:2d:72:fb:d1:64:cd:3e:
7e:3f:74:f3:a3:57:4c:f2:ce:d5:1d:e9:f6:b4:31:60:e3:c3:
f1:91:ff:c4:47:50:bb:2d:1d:30:0a:40:44:d5:5e:23:7d:70:
c5:d7:25:9d:7b:49:ed:62:a6:e1:09:07:ba:c5:0a:b4:2d:09:
45:f2:94:5c:21:e2:f2:59:ff:b2:bf:d3:4c:e3:56:97:94:1c:
71:19:d0:82:c1:91:5b:98:45:7d:80:a2:67:86:fb:37:62:5f:
b5:d8:e9:52:b4:b8:27:ad:df:c2:fb:49:94:ca:51:af:c3:6a:
37:3d:05:ff:af:31:7c:a4:08:76:f3:95:eb:41:9e:23:22:f4:
6b:98:c5:df:8c:cd:b1:f1:4d:62:39:c8:cd:8e:69:0b:c4:22:
64:1f:6b:a8:31:25:84:34:ca:8c:42:0e:2c:af:ba:2c:18:eb:
6f:25:68:59:9f:50:bb:5d:fa:b9:0e:a3:8c:9d:f3:75:75:49:
7b:07:19:ed:57:a3:07:31:87:f7:03:51:02:e1:5a:ab:26:59:
72:6f:ba:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:46:48 2025 by rpki-client