Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/NQPnV7taNAdtfXxvQ-xhCav1x98.roa
File: NQPnV7taNAdtfXxvQ-xhCav1x98.roa (raw, json)
Hash identifier: +ogbQ4IOQIb1aVAiBrCGh9Ug+96DExtvEZ8W9Ayjx+g=
Subject key identifier: 35:03:E7:57:BB:5A:34:07:6D:7D:7C:6F:43:EC:61:09:AB:F5:C7:DF
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019588BAFAB16815E356952534BAD8C56ABB
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/NQPnV7taNAdtfXxvQ-xhCav1x98.roa
Signing time: Wed 12 Mar 2025 05:01:50 +0000
ROA not before: Wed 12 Mar 2025 05:01:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214567
IP address blocks: 178.239.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:ba:fa:b1:68:15:e3:56:95:25:34:ba:d8:c5:6a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Mar 12 05:01:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3503e757bb5a34076d7d7c6f43ec6109abf5c7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fa:27:95:58:b8:76:27:51:da:fe:5c:4f:37:
f1:86:13:19:ab:dd:c5:d3:c2:a9:52:55:4b:01:69:
38:e5:60:71:d8:c4:ab:81:ec:71:1d:d8:86:36:75:
5b:dd:29:6c:5f:ce:e4:29:64:64:69:7f:d2:61:1f:
d1:95:96:e9:5a:74:45:35:e5:a7:34:34:dc:ff:bd:
64:9f:a1:0d:b1:f5:e8:35:0b:10:63:28:84:eb:78:
f5:97:f2:a7:d3:ed:d5:9e:3c:95:09:1e:a8:b0:dc:
f9:c2:25:8e:7b:80:c5:9e:50:dd:d5:6b:df:25:c2:
70:6e:36:f5:5b:be:af:e9:6f:d2:bf:5a:8f:f7:96:
7b:ee:3e:5b:6d:97:12:e1:d3:35:6e:6d:d0:7d:3e:
f9:92:b2:67:6f:17:f7:36:1b:56:7d:7b:aa:e2:13:
ab:48:6b:4a:03:07:c8:6f:95:ee:39:79:ea:66:c6:
a5:fd:76:64:ff:d7:f3:e7:5f:e4:9c:e7:6e:ec:7e:
a2:a3:72:42:b4:c7:8a:57:b8:66:dc:75:91:98:49:
bd:10:70:2d:6e:1b:02:f8:ea:09:b6:3b:23:bb:8a:
04:22:07:aa:5a:4a:12:ca:f3:ed:c5:53:a5:ff:bc:
39:81:25:0f:58:51:ff:40:95:2d:a3:80:5a:07:14:
22:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:03:E7:57:BB:5A:34:07:6D:7D:7C:6F:43:EC:61:09:AB:F5:C7:DF
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/NQPnV7taNAdtfXxvQ-xhCav1x98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5f:43:d5:38:68:69:ee:d6:83:0a:85:4a:16:38:ee:bd:1d:
c9:d4:2c:d2:52:0c:3b:03:39:a6:5d:44:82:2d:ec:fa:01:ab:
62:fe:f6:e6:c8:71:ac:de:4d:0d:64:80:05:fd:51:f0:9d:3d:
2e:17:07:ed:7f:54:47:6b:ab:42:d6:13:f9:0d:c6:d7:c3:16:
57:ff:25:c9:70:cd:6c:b7:e3:91:be:79:1a:9c:df:1f:91:82:
14:5e:e3:06:85:a3:d5:13:89:6a:90:41:a6:45:34:e7:c4:b8:
2e:96:28:6e:97:13:c2:55:d4:fc:61:cb:b9:8d:02:2c:8a:52:
be:ad:c2:1c:6c:e9:f5:76:19:d0:f4:6c:c6:de:df:c8:71:7a:
05:c4:cb:62:8a:a4:4b:c9:0b:9c:64:7f:87:32:29:eb:38:34:
d3:45:60:35:66:dd:13:b3:80:a7:3a:18:4f:c1:14:b7:db:ec:
a8:08:a7:28:77:68:de:8e:1a:e5:11:59:9a:8c:e1:04:d4:61:
25:f1:c8:cc:8e:6c:9c:f8:95:3a:c6:cb:0c:42:8f:7e:d5:59:
8b:83:77:bd:5b:ee:2b:4e:ef:47:ff:e0:fb:e7:1c:ff:47:05:
b7:13:03:84:7b:97:de:9f:4f:e3:cb:39:f4:2c:ad:7c:5a:2f:
4f:7b:ed:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:21:43 2025 by rpki-client