Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/NBJiMu1brPzEal7P3N6cPAqoIL0.roa
File: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (raw, json)
Hash identifier: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=
Subject key identifier: 34:12:62:32:ED:5B:AC:FC:C4:6A:5E:CF:DC:DE:9C:3C:0A:A8:20:BD
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 019421B1A1A233C22EFD470EC979142FC7D8
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/NBJiMu1brPzEal7P3N6cPAqoIL0.roa
Signing time: Wed 01 Jan 2025 11:47:56 +0000
ROA not before: Wed 01 Jan 2025 11:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 91.239.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a1:a2:33:c2:2e:fd:47:0e:c9:79:14:2f:c7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Jan 1 11:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34126232ed5bacfcc46a5ecfdcde9c3c0aa820bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:67:5f:a8:6f:94:32:89:74:dc:7b:33:dd:
c6:e8:18:cc:d2:49:44:f0:e7:bf:65:32:b8:a8:ad:
35:77:45:22:d2:bb:62:8e:d8:16:8d:e7:22:58:6c:
15:af:78:94:55:2f:b8:1c:c2:60:84:53:ec:e6:64:
fa:7f:ca:15:aa:ec:66:ef:94:ba:ae:3c:ed:01:e7:
a1:22:15:9c:b4:3a:cf:0d:cc:68:42:1c:7e:eb:67:
75:34:5c:a3:54:87:4e:da:9b:c4:85:28:91:4f:8b:
39:81:af:23:87:9a:90:11:24:41:96:b7:67:62:d9:
f9:f2:d1:e8:df:a5:d1:06:31:f9:8a:6d:aa:e3:34:
49:35:75:94:33:ce:c2:ee:1e:24:ac:89:ac:78:82:
f1:cd:06:8e:94:a3:b5:69:a6:6a:3c:4f:82:63:77:
8a:4e:ec:d5:88:08:d6:57:dd:32:d1:d5:9f:ad:a8:
fd:07:9b:60:67:56:0e:14:60:50:05:b3:2f:be:e8:
22:78:b4:b4:46:b2:47:de:3c:80:d7:ab:00:28:a6:
df:6a:e2:2c:16:3e:4b:e5:bc:da:1b:a2:98:d1:17:
69:59:72:03:c3:ea:fa:80:c7:a1:2a:b3:10:30:b5:
83:50:87:b5:46:9f:4c:23:81:d6:6a:e9:34:f0:d9:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:12:62:32:ED:5B:AC:FC:C4:6A:5E:CF:DC:DE:9C:3C:0A:A8:20:BD
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/NBJiMu1brPzEal7P3N6cPAqoIL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.25.0/24
Signature Algorithm: sha256WithRSAEncryption
84:dc:52:c6:34:bb:3f:74:bb:1a:42:9b:e6:ef:7c:50:f8:9f:
4d:fa:6f:5b:03:71:36:c7:63:f1:aa:50:52:c4:ca:4b:cd:35:
8a:cd:46:a7:4f:6d:8f:22:c2:6e:59:63:40:0e:5b:c6:0f:6a:
e1:03:1c:c4:60:6c:b5:b8:9f:43:d9:79:16:ff:a8:47:4d:6e:
aa:58:be:9a:cd:aa:ab:0a:6f:c7:17:d1:9d:4f:9b:df:99:e1:
67:59:0b:8f:b4:31:af:af:41:88:fc:02:ec:e7:45:23:37:0a:
bc:68:c5:cd:5c:41:f7:96:36:41:fc:b2:4f:46:80:97:a6:ca:
15:10:95:45:15:29:e6:86:6c:a7:5a:f0:4d:53:df:af:f8:9f:
d8:51:fb:d7:aa:db:ac:5f:2a:27:c3:36:14:61:90:8e:ec:83:
1d:a3:3c:e3:91:9c:3e:7d:2e:9b:d1:bb:8a:e0:54:35:0b:0f:
69:0e:00:86:47:6e:ee:12:c3:2d:3f:e2:91:70:e6:36:e9:76:
fb:d5:11:0c:84:8d:38:12:59:c8:33:dd:68:d6:19:98:ec:04:
5d:f9:48:1f:46:f1:98:3c:eb:14:1f:f0:e6:a0:9b:8a:38:2f:
4a:a4:23:a3:87:ce:d4:6d:5e:a8:74:32:a3:94:98:11:84:b1:
c9:9f:0f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:33:41 2025 by rpki-client