Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nBCs47rBzrSQKz6-eIcyegiDe4g.roa
File: nBCs47rBzrSQKz6-eIcyegiDe4g.roa (raw, json)
Hash identifier: DKKXN9cmMjVRGS+HI+x6R9B+P7k15aRkXyGMj3g7QTQ=
Subject key identifier: 9C:10:AC:E3:BA:C1:CE:B4:90:2B:3E:BE:78:87:32:7A:08:83:7B:88
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0195135E4F357A9FF99AACB28FF682F9FADD
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nBCs47rBzrSQKz6-eIcyegiDe4g.roa
Signing time: Mon 17 Feb 2025 10:05:02 +0000
ROA not before: Mon 17 Feb 2025 10:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 5.57.33.0/24 maxlen: 24
185.26.32.0/24 maxlen: 24
185.26.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:5e:4f:35:7a:9f:f9:9a:ac:b2:8f:f6:82:f9:fa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 17 10:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c10ace3bac1ceb4902b3ebe7887327a08837b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:b9:b2:13:77:b8:ee:a4:0f:82:d4:a8:c5:
b6:30:54:9b:88:84:1a:fa:46:b5:9e:ed:12:16:45:
19:47:e0:6b:9f:68:48:75:2e:6b:d9:04:e0:a2:a8:
23:20:dc:c7:6d:4b:a1:dc:c7:92:9c:01:ff:a4:b5:
54:e5:3f:28:e0:31:b1:b1:a0:3b:50:b9:6b:97:e0:
a2:92:ca:0a:12:90:d9:e1:d9:26:9f:cf:98:e1:13:
b7:96:7a:92:3d:0b:89:d1:ca:3a:0d:18:cd:25:56:
90:e4:2b:22:de:0e:4a:6e:e6:50:81:8e:72:0b:ff:
63:f1:3b:13:91:96:9b:f4:f6:cd:dc:e5:32:ae:b0:
71:2f:b4:33:35:d2:37:40:58:21:24:55:66:4c:de:
d7:25:c1:49:02:07:43:2d:75:0e:80:1a:cd:98:81:
be:58:63:d6:3e:30:87:ec:85:bc:f7:f9:cf:92:b0:
e0:14:35:f9:14:40:b3:17:e4:b6:41:6a:a3:17:a6:
81:2a:68:fc:6e:d8:6d:41:30:c9:00:69:fc:40:aa:
08:18:ca:54:4d:a7:c5:5d:2b:ce:2c:6c:d1:28:c1:
1a:49:f1:fb:88:66:1c:11:63:54:77:ed:e2:95:ea:
13:ca:9d:83:e2:36:c9:ae:fd:00:7c:30:74:2b:af:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:10:AC:E3:BA:C1:CE:B4:90:2B:3E:BE:78:87:32:7A:08:83:7B:88
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nBCs47rBzrSQKz6-eIcyegiDe4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.33.0/24
185.26.32.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:07:c7:a8:c1:84:5c:b5:55:8f:40:7e:48:39:30:c3:10:d1:
67:53:d8:3c:73:ac:b1:60:e9:4e:3c:b3:c2:c9:de:2c:60:cd:
f6:3b:d3:56:bd:75:f9:2f:e4:48:5d:de:eb:b7:89:c5:91:37:
0a:43:ce:a5:5b:6e:72:9a:42:e5:9a:e6:16:3f:59:0b:9e:d2:
95:8b:02:13:e2:6d:f0:a5:f3:78:62:b9:c3:30:73:d8:a8:6c:
a6:63:d3:ee:38:5b:11:bd:9d:7e:49:ed:4a:22:72:7d:1f:8f:
aa:d8:6c:5f:cf:86:01:ba:4a:d5:8e:06:26:4d:b9:d4:81:5a:
9f:b1:e4:95:c3:55:37:63:bb:da:1c:3c:18:c4:e5:5d:4e:17:
be:2b:f3:a7:85:94:44:ba:f7:74:51:07:25:05:cd:af:dc:d6:
cb:55:57:a4:06:65:e2:65:73:e1:a7:5e:8f:60:4c:90:8b:59:
64:d7:83:c9:10:30:b0:ca:2d:f9:68:af:97:48:1d:b3:d6:36:
45:8a:54:77:f8:89:fc:03:56:eb:b5:18:27:fa:40:2d:ad:65:
c8:00:98:95:64:48:c6:ab:e9:51:44:6d:05:55:63:3a:8f:16:
ef:d8:64:d1:ea:77:96:d9:bc:64:58:7f:30:de:88:d0:e1:35:
5d:4d:a9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:20:57 2025 by rpki-client