Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/NJkr6UX1dyZbz9hAAHSEva9N1dU.roa
File: NJkr6UX1dyZbz9hAAHSEva9N1dU.roa (raw, json)
Hash identifier: dH1+iQ8jrIWNeK4bcaaw6PWPrPpzci2xfb2T6H4KeWY=
Subject key identifier: 34:99:2B:E9:45:F5:77:26:5B:CF:D8:40:00:74:84:BD:AF:4D:D5:D5
Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial: 0194266B2265550E3FC604C310610E7C089F
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/NJkr6UX1dyZbz9hAAHSEva9N1dU.roa
Signing time: Thu 02 Jan 2025 09:49:02 +0000
ROA not before: Thu 02 Jan 2025 09:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204983
IP address blocks: 185.233.172.0/22 maxlen: 22
2a0c:eb00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:22:65:55:0e:3f:c6:04:c3:10:61:0e:7c:08:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
Validity
Not Before: Jan 2 09:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34992be945f577265bcfd840007484bdaf4dd5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:35:ea:c2:f7:b6:9e:3d:5b:73:09:37:c6:
33:df:c4:a5:0e:4c:7d:25:89:7c:a8:aa:ed:1c:f7:
0f:21:9b:a0:19:a1:e5:01:67:ee:52:b1:bc:dd:61:
a9:bc:19:32:eb:21:eb:77:07:fd:c6:1a:0c:6f:f5:
c9:a7:af:c1:89:b4:27:6e:fb:91:0f:2f:a6:5e:e5:
5c:a2:77:3a:c6:c2:59:c3:bb:3d:9c:4c:2b:e6:97:
c3:6d:b4:63:06:9c:4c:9a:9f:b5:84:c4:82:67:23:
e6:b0:d7:84:aa:57:ff:bd:57:13:e2:c6:c1:ab:2e:
ff:32:ea:ca:53:62:b5:fc:e5:7d:3f:08:17:e4:6a:
61:57:1f:b7:49:ce:78:62:50:f3:fe:0e:72:01:eb:
9c:19:bc:5b:c3:a3:13:a9:93:e0:93:73:35:9c:ba:
0e:4a:d3:0d:8b:ec:69:a2:40:af:1d:cf:33:03:26:
8b:3a:ba:e3:2f:54:f8:69:65:e2:74:73:e4:6a:b5:
77:48:e0:7b:42:b7:6c:be:ad:99:5d:46:4b:45:ba:
5d:ca:ad:3b:71:a0:b0:ce:5a:53:5f:4d:12:09:24:
3c:d0:da:25:db:51:37:2e:c0:8b:b8:e8:b1:cd:29:
2d:24:f4:61:50:37:1c:3d:05:b7:d2:f7:19:6a:22:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:99:2B:E9:45:F5:77:26:5B:CF:D8:40:00:74:84:BD:AF:4D:D5:D5
X509v3 Authority Key Identifier:
keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/NJkr6UX1dyZbz9hAAHSEva9N1dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.172.0/22
IPv6:
2a0c:eb00::/32
Signature Algorithm: sha256WithRSAEncryption
9f:a3:0c:1c:2d:92:b9:6c:9e:0e:76:5b:63:fd:75:8e:c8:90:
d3:9f:ee:c9:16:bd:3b:44:fb:37:21:cf:c7:7e:db:93:c7:0a:
2a:d4:07:4e:ce:a2:8e:f6:9e:20:ba:9c:c8:d8:bc:24:e6:53:
c8:03:06:d6:58:77:4e:8e:73:69:d0:38:d2:10:04:31:4d:d9:
23:33:e4:3c:ca:b3:dc:8e:2f:3b:c1:e0:d2:c5:1a:bb:2f:fe:
9e:31:11:de:9b:b5:77:3b:cc:2d:38:9f:1d:ce:e2:cb:46:5c:
55:e7:ea:7a:cc:57:bb:f0:43:5c:ab:e3:39:4f:d1:64:d1:89:
42:96:96:86:7d:2d:4f:b1:01:dd:cb:d7:6a:b5:7d:19:39:07:
3a:3a:d1:b5:e3:75:b4:0d:e5:af:4c:f3:5f:24:a9:87:cc:f7:
0b:fd:1d:ea:9a:2e:06:e6:4d:d1:1b:b5:f0:2e:1e:8c:8c:9e:
3a:09:41:6b:16:58:27:f6:29:b0:0d:45:27:a9:d0:de:76:82:
a5:6d:a2:e2:96:84:a4:70:05:8b:36:3c:28:c4:49:d6:5d:d7:
5c:b4:52:22:40:13:be:58:36:ce:c9:3e:5a:6e:f2:b9:4d:73:
d1:43:22:2f:d4:d4:91:b5:a9:9c:e2:75:48:66:93:ea:d1:56:
92:e8:be:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:04:32 2025 by rpki-client