Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/NbJCCt6mZbGhQhsVck9Ye84ql_A.roa
File: NbJCCt6mZbGhQhsVck9Ye84ql_A.roa (raw, json)
Hash identifier: 1GHJ4CqSoQFt3IGPoRuzPcM9vgZHBXB7ib41DM1rbg0=
Subject key identifier: 35:B2:42:0A:DE:A6:65:B1:A1:42:1B:15:72:4F:58:7B:CE:2A:97:F0
Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial: 0194228DE345E072FAE6DEFB31C49A00971E
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/NbJCCt6mZbGhQhsVck9Ye84ql_A.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208310
IP address blocks: 94.137.128.0/20 maxlen: 20
193.223.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 07:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e3:45:e0:72:fa:e6:de:fb:31:c4:9a:00:97:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35b2420adea665b1a1421b15724f587bce2a97f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:2a:8b:63:a8:86:da:c6:85:f7:79:26:3b:
e3:bb:66:fa:5a:21:45:63:2c:31:3f:1a:5d:d7:0b:
f1:b7:cb:9c:04:52:0e:1c:c8:b6:6e:c4:f9:47:53:
8b:86:2f:05:06:11:18:1c:54:12:12:62:a6:05:10:
d7:67:fc:62:91:82:82:23:1f:44:2a:7c:e2:79:05:
cd:5b:35:76:a9:45:e7:0a:c7:64:16:f9:ee:c6:23:
fe:c3:7b:96:cb:bc:e5:03:63:b0:6c:16:f4:61:9b:
ae:1d:06:c4:40:8b:1a:96:cd:c0:34:f5:d2:b1:13:
4e:b7:a6:af:0a:5a:a9:71:67:e6:f6:ea:4e:6d:3b:
bb:39:2c:c3:b5:3a:c9:49:32:9f:ad:42:0e:d4:39:
62:af:58:82:2d:8f:7c:c1:77:b9:fe:52:6d:39:57:
6e:10:f3:5c:f4:7e:7c:58:2c:65:44:52:cc:ea:33:
5b:f7:39:98:a6:34:a4:91:28:0d:6a:96:d7:e6:db:
67:5f:ca:72:76:ff:d7:bf:d4:ae:9a:76:38:5c:4e:
4c:7f:0d:bc:85:e4:77:da:09:53:d7:c1:07:d3:e2:
cf:98:b1:07:d8:f4:ff:38:ba:77:1f:1f:59:f3:9a:
8e:02:83:32:99:50:c6:d6:30:0f:f9:4d:15:58:81:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B2:42:0A:DE:A6:65:B1:A1:42:1B:15:72:4F:58:7B:CE:2A:97:F0
X509v3 Authority Key Identifier:
keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/NbJCCt6mZbGhQhsVck9Ye84ql_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.128.0/20
193.223.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:76:65:c2:6f:b1:45:5a:d6:0a:eb:a3:c7:57:b1:9e:67:d3:
d5:9b:12:57:53:11:be:53:c1:ac:a2:ce:da:96:d1:36:ad:60:
91:46:18:91:6d:36:fc:9b:7e:57:cb:ea:3d:29:f4:3c:b1:1b:
a0:99:1f:d9:0b:0f:6a:e8:54:1a:f7:89:6c:a0:98:02:16:e5:
d7:ab:21:38:7f:5b:61:4a:08:f4:a7:08:fa:4d:14:2c:93:c6:
59:1e:7c:16:02:2a:0d:8f:83:2e:a5:49:0b:74:8b:d2:bd:9f:
64:4f:ce:ea:4b:dd:cb:92:4c:52:52:16:c9:77:b9:5d:f2:36:
8a:a0:90:a1:b4:2e:b3:7f:3a:9e:79:91:7d:da:8a:bf:80:f2:
a5:b8:c5:88:68:f9:7f:fd:86:46:07:b6:0b:9c:e8:c7:8b:5d:
a0:eb:db:94:5f:97:b4:5d:1d:98:fa:b6:c6:49:62:1c:c3:be:
49:5b:3c:14:11:fd:c5:79:a7:66:ce:c1:83:d1:87:7b:d5:ec:
d5:92:1f:12:48:bf:aa:52:ac:07:56:40:26:11:3b:52:d0:6f:
c6:82:d0:c5:38:70:bf:93:81:8a:20:65:7f:d7:78:c1:95:cc:
b1:04:22:08:30:e7:b3:45:9a:04:a1:a4:e2:3a:d4:a2:3a:58:
a6:66:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:40:39 2025 by rpki-client