Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/NfzO8bH3NibNfN58e3A_8qYMtVk.roa
File: NfzO8bH3NibNfN58e3A_8qYMtVk.roa (raw, json)
Hash identifier: iIrZttFf5AZYY+2EMyN0Abx46ICaDa9vvFFaHPcIzvE=
Subject key identifier: 35:FC:CE:F1:B1:F7:36:26:CD:7C:DE:7C:7B:70:3F:F2:A6:0C:B5:59
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A51EEAB2AA29C302E20F14A67D8EE
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/NfzO8bH3NibNfN58e3A_8qYMtVk.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1101
IP address blocks: 145.99.0.0/16 maxlen: 16
145.102.4.0/23 maxlen: 23
145.111.0.0/16 maxlen: 16
145.192.0.0/12 maxlen: 12
145.208.0.0/13 maxlen: 13
145.216.0.0/15 maxlen: 15
145.220.0.0/16 maxlen: 16
2001:67c:6ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:51:ee:ab:2a:a2:9c:30:2e:20:f1:4a:67:d8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35fccef1b1f73626cd7cde7c7b703ff2a60cb559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:02:8c:d0:7a:85:a9:08:b5:85:4f:c0:77:
a7:88:a4:05:81:9e:9d:70:2e:5f:42:35:6b:69:0a:
21:37:f3:8b:44:41:56:1c:94:f3:8b:ad:68:69:f5:
dd:85:33:a7:74:17:d5:bf:3a:c3:b3:36:b2:38:b6:
87:51:b8:5a:7e:8b:9f:9c:bf:2f:89:4a:7a:9c:8f:
f4:7b:f0:7a:cb:a4:59:74:ec:1a:37:6f:44:98:49:
6d:3a:5f:68:58:9f:20:aa:de:64:ab:0d:35:ee:1f:
49:e7:1e:b3:3f:69:5d:2e:db:e4:57:d9:75:7a:c9:
06:5c:f6:5c:f5:ad:9e:c9:32:c8:b3:e3:de:09:9b:
f5:14:47:28:09:8a:ba:29:00:d5:b9:d0:57:9a:8f:
0f:68:b1:20:7b:5e:9d:63:b7:7e:03:a7:d6:fb:6d:
3a:0a:6a:ec:6e:bd:2c:bf:3a:05:a7:c2:93:21:ca:
d4:36:d0:bb:15:7a:9b:3d:1c:c9:27:b2:33:74:84:
dc:14:1f:5b:93:f9:00:ae:5f:75:68:c2:f5:e4:ea:
52:4a:db:c0:5e:5e:03:df:62:d1:cb:9d:f2:a5:91:
36:d0:d1:45:96:cb:b1:ac:f6:33:25:2a:b9:0d:e7:
06:70:f6:49:40:cb:73:35:af:af:26:aa:37:c2:4a:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:CE:F1:B1:F7:36:26:CD:7C:DE:7C:7B:70:3F:F2:A6:0C:B5:59
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/NfzO8bH3NibNfN58e3A_8qYMtVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.99.0.0/16
145.102.4.0/23
145.111.0.0/16
145.192.0.0-145.217.255.255
145.220.0.0/16
IPv6:
2001:67c:6ec::/48
Signature Algorithm: sha256WithRSAEncryption
4a:3c:83:75:28:d4:83:07:92:ba:59:b5:37:9d:09:2e:49:4b:
42:74:5d:bd:65:5e:72:f8:c9:ce:7b:13:72:c2:9c:15:04:4b:
01:34:e5:72:70:85:06:69:0a:3b:29:00:95:56:fd:5f:f0:24:
0e:fb:70:c7:e1:4f:cf:69:89:a3:d1:a1:0b:8b:0b:28:0b:1e:
5a:84:45:d4:29:26:e9:39:ec:04:9c:f8:81:fb:25:11:e9:61:
5a:e3:36:21:ff:74:7f:12:cd:96:54:6d:0b:f1:ca:28:a6:a3:
24:c8:0a:df:3c:29:6a:fe:b8:8b:66:49:a7:9a:82:6d:b5:8e:
d8:67:bd:a2:ce:e6:c0:51:71:f2:b8:0a:41:c3:81:19:1d:37:
c1:df:51:be:71:5d:ae:61:b6:ed:24:24:d4:af:05:a2:b5:9b:
7d:76:85:82:30:5d:79:90:3f:ba:6c:a7:80:2d:5c:aa:93:80:
0e:15:33:6c:b5:42:34:d8:27:f9:3f:73:8f:fc:3a:f1:7f:a5:
ce:e5:ef:b5:ea:d8:92:0a:7c:4e:c6:c6:46:ca:bc:f6:25:0f:
38:59:d5:3e:7f:0b:44:8f:4c:ad:96:9d:3e:c9:6a:de:10:bf:
d0:32:43:e6:b4:e8:b7:a6:1d:ca:34:bc:b1:38:4e:b1:91:3c:
7c:5d:de:46
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZQjalHuqyqinDAuIPFKZ9juMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMTAxMTk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWZjY2VmMWIxZjczNjI2Y2Q3Y2RlN2M3YjcwM2ZmMmE2MGNiNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFECjNB6hakItYVPwHeniKQFgZ6d
cC5fQjVraQohN/OLREFWHJTzi61oafXdhTOndBfVvzrDszayOLaHUbhafoufnL8v
iUp6nI/0e/B6y6RZdOwaN29EmEltOl9oWJ8gqt5kqw017h9J5x6zP2ldLtvkV9l1
eskGXPZc9a2eyTLIs+PeCZv1FEcoCYq6KQDVudBXmo8PaLEge16dY7d+A6fW+206
Cmrsbr0svzoFp8KTIcrUNtC7FXqbPRzJJ7IzdITcFB9bk/kArl91aML15OpSStvA
Xl4D32LRy53ypZE20NFFlsuxrPYzJSq5DecGcPZJQMtzNa+vJqo3wkpNrQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFDX8zvGx9zYmzXzefHtwP/KmDLVZMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvTmZ6TzhiSDNOaWJOZk41OGUzQV84cVlNdFZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAnBAIAATAhAwMAkWMDBAGR
ZgQDAwCRbzAKAwMGkcADAwGR2AMDAJHcMA8EAgACMAkDBwAgAQZ8BuwwDQYJKoZI
hvcNAQELBQADggEBAEo8g3Uo1IMHkrpZtTedCS5JS0J0Xb1lXnL4yc57E3LCnBUE
SwE05XJwhQZpCjspAJVW/V/wJA77cMfhT89piaPRoQuLCygLHlqERdQpJuk57ASc
+IH7JRHpYVrjNiH/dH8SzZZUbQvxyiimoyTICt88KWr+uItmSaeagm21jthnvaLO
5sBRcfK4CkHDgRkdN8HfUb5xXa5htu0kJNSvBaK1m312hYIwXXmQP7psp4AtXKqT
gA4VM2y1QjTYJ/k/c4/8OvF/pc7l77Xq2JIKfE7GxkbKvPYlDzhZ1T5/C0SPTK2W
nT7Jat4Qv9AyQ+a06LemHco0vLE4TrGRPHxd3kY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:06:15 2025 by rpki-client