Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/NU7LpjX_c-YRDnvo18YVHXBujbY.roa
File: NU7LpjX_c-YRDnvo18YVHXBujbY.roa (raw, json)
Hash identifier: odut5lYelTDd0ROdgEZa5uhbKyC1bMMR57mT+YqgUgc=
Subject key identifier: 35:4E:CB:A6:35:FF:73:E6:11:0E:7B:E8:D7:C6:15:1D:70:6E:8D:B6
Certificate issuer: /CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Certificate serial: 01942826F458E2A5D7A3C77FE544064054C8
Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/NU7LpjX_c-YRDnvo18YVHXBujbY.roa
Signing time: Thu 02 Jan 2025 17:53:48 +0000
ROA not before: Thu 02 Jan 2025 17:53:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60592
IP address blocks: 91.207.188.0/24 maxlen: 24
91.207.189.0/24 maxlen: 24
185.28.192.0/24 maxlen: 24
185.28.193.0/24 maxlen: 24
185.28.194.0/24 maxlen: 24
185.38.108.0/24 maxlen: 24
185.38.109.0/24 maxlen: 24
185.38.110.0/24 maxlen: 24
185.38.111.0/24 maxlen: 24
185.82.212.0/24 maxlen: 24
185.82.213.0/24 maxlen: 24
185.82.214.0/24 maxlen: 24
2a00:a160::/32 maxlen: 32
2a00:fea0::/32 maxlen: 32
2a03:6920::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:f4:58:e2:a5:d7:a3:c7:7f:e5:44:06:40:54:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Validity
Not Before: Jan 2 17:53:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=354ecba635ff73e6110e7be8d7c6151d706e8db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:8b:f9:0f:a3:49:e2:70:40:14:0d:57:5c:
7e:38:fb:04:be:16:7f:e1:25:92:da:62:73:8a:f5:
a2:d9:47:2b:d2:72:42:60:3b:58:3e:b1:a6:eb:d3:
95:17:a9:40:8c:14:36:e0:cd:f0:c5:62:7b:e1:d6:
9d:bc:f5:09:c1:46:d2:cf:0e:5b:dc:fc:66:a2:08:
b9:26:29:60:e2:ac:30:88:9b:f9:e2:93:6f:09:58:
a9:67:d8:fe:fc:45:87:b0:33:3b:14:a6:63:6b:99:
5b:55:0f:c7:5f:f4:c2:e4:70:d9:7b:7a:a6:19:95:
04:06:dc:94:37:0e:c4:9b:87:91:bf:83:08:e5:c6:
99:55:f7:71:bb:a5:b2:15:40:7e:7c:cd:33:c4:46:
63:bf:30:b5:ec:26:17:b4:e6:63:d7:8b:d3:26:6a:
7c:5e:9e:c6:cb:a2:71:81:e0:71:63:4e:d9:42:ae:
47:ea:a5:d9:ba:4f:f5:89:51:a3:99:d7:ea:e7:39:
98:40:21:37:13:fd:e0:b4:74:dc:36:14:ea:dc:51:
fb:c1:d0:91:1e:cb:6b:d0:db:c5:59:b7:06:59:a2:
08:27:59:8d:37:75:b1:09:a3:2b:ba:61:f5:39:01:
b6:ba:60:a8:ee:ab:67:7d:41:85:f6:dc:0d:46:70:
76:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:CB:A6:35:FF:73:E6:11:0E:7B:E8:D7:C6:15:1D:70:6E:8D:B6
X509v3 Authority Key Identifier:
keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/NU7LpjX_c-YRDnvo18YVHXBujbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.188.0/23
185.28.192.0-185.28.194.255
185.38.108.0/22
185.82.212.0-185.82.214.255
IPv6:
2a00:a160::/32
2a00:fea0::/32
2a03:6920::/32
Signature Algorithm: sha256WithRSAEncryption
60:bd:1a:28:61:11:ff:73:82:0b:cc:68:09:16:0d:16:03:7c:
e2:3a:52:6e:41:56:8c:9d:28:9b:1e:1e:4e:16:46:6e:4e:ff:
bf:47:72:76:92:89:de:d1:fa:3c:53:d6:f0:fa:ae:13:cc:e3:
0a:db:ed:a8:f0:2d:44:cd:1a:9b:22:63:53:b8:27:5e:bc:87:
3f:38:ca:5f:1e:6d:06:23:23:74:c0:54:d7:49:a2:22:36:b1:
86:85:37:dd:56:56:66:60:b6:57:83:df:fb:66:61:81:dc:5e:
76:76:db:7a:f0:15:85:6f:5a:67:38:c8:2f:2c:0e:fe:36:4d:
04:50:21:5e:c1:4f:11:12:4f:66:78:d1:48:fb:6a:51:f4:be:
6f:c1:d5:46:d5:32:35:69:7a:c0:fd:f5:a5:24:d7:24:68:0f:
4b:d0:cd:e5:63:fc:1a:3e:6a:33:4d:79:2e:ed:9e:8a:60:cf:
60:0a:13:3b:f5:f8:ee:91:6d:ad:48:19:93:a7:4c:9e:03:30:
ba:2f:9c:6b:94:95:3f:9b:92:0d:fd:b0:b5:c4:f0:ba:0d:8e:
c3:83:02:cc:c5:b5:39:c2:40:bb:cb:17:02:97:d0:88:ff:30:
f6:86:eb:4c:90:40:7f:a6:f4:5a:4d:8e:5f:85:3f:b6:b3:a1:
ca:c0:ab:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:55 2025 by rpki-client