Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/NQq8etUndTjVgxrhy44nBmqGCOM.roa
File: NQq8etUndTjVgxrhy44nBmqGCOM.roa (raw, json)
Hash identifier: j7zhzvWt94q6NzpdciEQjpp4LDZ9qKJXwX2H3/CEMus=
Subject key identifier: 35:0A:BC:7A:D5:27:75:38:D5:83:1A:E1:CB:8E:27:06:6A:86:08:E3
Certificate issuer: /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Certificate serial: 019425FC31DF0FA8D444C65CA0B54BA764A0
Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/NQq8etUndTjVgxrhy44nBmqGCOM.roa
Signing time: Thu 02 Jan 2025 07:47:52 +0000
ROA not before: Thu 02 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50925
IP address blocks: 185.188.236.0/24 maxlen: 24
185.188.237.0/24 maxlen: 24
185.188.238.0/23 maxlen: 23
185.188.238.0/24 maxlen: 24
185.188.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:31:df:0f:a8:d4:44:c6:5c:a0:b5:4b:a7:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Validity
Not Before: Jan 2 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=350abc7ad5277538d5831ae1cb8e27066a8608e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:9d:33:69:e8:37:5d:ba:9e:5c:cf:ab:6d:
10:f6:4c:28:58:6a:af:4a:10:e0:4d:8c:f4:57:6e:
54:c6:a1:76:a3:b9:0b:16:07:7a:11:94:33:17:be:
ac:60:c8:12:4e:9c:8b:91:c5:5e:54:d0:da:2b:a7:
e3:aa:a8:ae:ab:d9:58:72:8b:ac:c1:10:1d:19:28:
4a:c8:fe:b1:93:16:1d:aa:36:41:18:24:ce:cd:6e:
2d:91:8f:fb:37:ae:a9:71:7b:04:cb:a6:70:f5:46:
5e:2f:5c:d8:ac:c2:b5:c9:a8:fd:d3:ac:2e:34:8a:
3c:a9:16:b7:47:6e:c5:ea:78:21:bb:c8:f9:f4:51:
ee:55:76:e7:3a:2b:19:d5:54:37:c7:fa:43:60:0e:
23:5e:3b:2e:e8:e7:c9:18:c5:f7:a0:f8:a0:89:4a:
25:a6:2f:37:6c:f2:7d:6c:12:80:b0:62:9f:a2:ac:
53:a7:4b:a6:9a:da:98:21:f6:81:b1:74:5a:d6:ae:
5b:e3:28:a3:18:d6:88:4f:8e:b8:a2:95:0f:44:82:
8c:d3:90:77:b0:7c:6f:3c:a5:c0:d6:b4:27:68:06:
e2:e2:ef:4e:7b:f9:18:99:72:bd:6c:9a:b8:88:84:
1e:2e:ea:26:db:e7:c4:0c:85:7c:dc:e9:04:04:53:
b5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0A:BC:7A:D5:27:75:38:D5:83:1A:E1:CB:8E:27:06:6A:86:08:E3
X509v3 Authority Key Identifier:
keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/NQq8etUndTjVgxrhy44nBmqGCOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.236.0/22
Signature Algorithm: sha256WithRSAEncryption
33:31:ac:b4:47:08:4d:f9:15:27:52:c2:cd:16:90:e1:52:cf:
0b:09:f6:57:c0:f6:5c:0d:09:4e:ad:9d:b8:a4:24:51:bc:0a:
6c:eb:e9:b5:eb:fa:4e:64:f4:0f:73:ce:3d:a2:00:b0:db:c9:
27:f2:f3:0e:ee:f2:84:c7:82:3a:4c:b4:93:bb:98:75:be:d2:
03:91:3c:66:2f:7a:42:12:92:41:a0:65:27:87:28:21:f0:49:
2a:9b:06:1f:2d:a7:f8:07:b2:40:9e:e0:53:88:be:d8:cd:66:
45:91:78:83:d4:76:74:a8:3f:ff:58:fd:b5:b6:e6:9a:fe:6a:
9c:bb:e3:c2:64:23:02:71:ce:5d:9e:c9:97:f2:5f:f8:18:b2:
a6:b1:08:56:5f:ca:3b:88:02:1f:62:9e:2d:91:cf:57:99:17:
f6:12:aa:23:32:c0:0c:7b:b6:2a:1c:72:0b:4d:e9:8b:dc:43:
4b:77:96:62:ef:2f:45:fe:46:c1:f7:aa:0e:ab:92:10:b0:c1:
1e:72:34:66:60:b1:1f:0d:64:35:6d:45:6f:20:c7:57:a4:4f:
15:67:71:aa:8d:38:af:6f:b0:12:b2:ab:55:3f:30:c8:40:3f:
22:dc:8a:82:2e:0a:6b:ec:f7:fe:a5:f0:1a:64:d4:1b:1c:b2:
c7:93:c4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:47:44 2025 by rpki-client