Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/NpvTZ_274K1Bhd3fKXlRT4qqEqg.roa
File: NpvTZ_274K1Bhd3fKXlRT4qqEqg.roa (raw, json)
Hash identifier: O7U2IilgFNx0uKZ0Sr7mdLoGiE/mqht2K9UbhPNacVM=
Subject key identifier: 36:9B:D3:67:FD:BB:E0:AD:41:85:DD:DF:29:79:51:4F:8A:AA:12:A8
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 0194252124C723209A5EDC2C15DB64E6755A
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/NpvTZ_274K1Bhd3fKXlRT4qqEqg.roa
Signing time: Thu 02 Jan 2025 03:48:36 +0000
ROA not before: Thu 02 Jan 2025 03:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60587
IP address blocks: 45.82.168.0/22 maxlen: 22
46.151.200.0/24 maxlen: 24
46.151.201.0/24 maxlen: 24
46.151.204.0/24 maxlen: 24
91.227.230.0/24 maxlen: 24
185.29.88.0/24 maxlen: 24
2a00:a6a0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:24:c7:23:20:9a:5e:dc:2c:15:db:64:e6:75:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Jan 2 03:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=369bd367fdbbe0ad4185dddf2979514f8aaa12a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:b3:a0:a9:79:36:97:c1:f2:c8:9f:37:6a:
1f:25:88:94:49:50:91:2c:d8:e6:03:6c:23:30:16:
fb:90:ed:86:a3:27:99:73:92:ce:8b:77:51:c6:a8:
79:02:1a:c5:a7:fa:48:d8:17:1a:04:4f:a3:43:7e:
9b:c7:20:a3:ae:57:71:64:67:a3:cd:bf:00:4f:8c:
89:ab:37:9e:46:cc:db:14:7c:d3:20:72:5f:f5:20:
dc:a3:f0:f2:bd:84:f7:f5:e9:8a:8f:9d:74:b4:18:
a6:93:25:26:50:d9:26:e9:07:2c:47:ab:12:b4:cc:
2c:4a:ae:d6:18:dc:b7:d7:94:92:d8:1f:0a:f5:4b:
46:0d:af:62:a0:a9:e0:3f:e8:ac:bf:64:54:f5:6b:
4d:f8:81:e1:b5:1c:99:03:24:99:77:dc:87:52:0f:
6b:b0:94:34:f9:91:06:15:5b:e9:d3:51:9c:c8:f6:
35:8e:14:0e:b4:4a:95:64:10:9a:f0:89:f0:db:27:
20:a8:ba:f8:5d:c6:b6:0e:eb:fb:58:c4:e9:f2:75:
71:75:d1:04:f0:9c:52:9d:32:20:67:5c:fb:8d:7e:
ed:a2:f5:42:61:bc:f8:22:02:05:52:23:bd:76:37:
15:e8:5c:3d:6c:93:f4:44:31:fa:79:a7:2b:63:1a:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9B:D3:67:FD:BB:E0:AD:41:85:DD:DF:29:79:51:4F:8A:AA:12:A8
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/NpvTZ_274K1Bhd3fKXlRT4qqEqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.168.0/22
46.151.200.0/23
46.151.204.0/24
91.227.230.0/24
185.29.88.0/24
IPv6:
2a00:a6a0:1::/48
Signature Algorithm: sha256WithRSAEncryption
56:1b:53:af:4b:84:c5:18:56:66:a4:99:0f:ad:dc:fa:be:8a:
92:58:41:1a:d8:cd:48:d5:b1:cf:42:f8:0e:8c:3a:51:c0:d7:
99:9b:19:fc:ad:6e:55:e1:2b:2a:ac:2c:93:5d:a3:be:c6:c5:
9c:31:0b:05:f8:b0:ce:b8:90:d9:90:09:fb:4a:98:bb:25:5c:
d1:53:3f:81:cb:35:ba:df:2d:28:10:8a:a5:d3:50:30:b7:21:
e1:4a:93:e8:28:5b:58:3d:7f:36:0f:74:a5:fa:f6:8b:a1:e8:
e4:70:c4:85:7b:dd:4d:9f:1b:18:85:4a:27:c4:a3:c0:a5:e8:
3d:4f:91:af:1a:59:0d:ca:23:bc:cb:55:99:1c:82:d7:32:e1:
84:11:f5:3b:7b:1b:31:c1:3f:8a:ac:8e:bd:bf:66:79:23:28:
58:15:9f:19:8d:83:15:a0:1c:9a:d4:b3:93:42:ee:fa:9e:5e:
f3:83:f4:07:50:27:f1:3c:28:13:5e:f6:7b:74:f2:80:21:e3:
29:ad:af:2b:48:46:1c:32:dc:5a:c5:3a:6f:92:00:48:ca:d9:
78:ac:06:f7:f6:d5:0d:24:21:ab:6f:be:0a:16:81:a3:81:79:
98:5b:b6:6d:1e:70:b4:6b:42:b6:b6:fb:7d:69:4e:8e:48:a3:
03:ad:a3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:58:48 2025 by rpki-client