Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/NsCamS0MlFkmbAx5_LAOWrtBals.roa
File: NsCamS0MlFkmbAx5_LAOWrtBals.roa (raw, json)
Hash identifier: LDrv3G809jHIGwEDwg2A1Kbn0Oo37yQBk0cRSClCqYU=
Subject key identifier: 36:C0:9A:99:2D:0C:94:59:26:6C:0C:79:FC:B0:0E:5A:BB:41:6A:5B
Certificate issuer: /CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Certificate serial: 0194282635045F4312CD2CFC5D9473844F11
Authority key identifier: AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/NsCamS0MlFkmbAx5_LAOWrtBals.roa
Signing time: Thu 02 Jan 2025 17:53:00 +0000
ROA not before: Thu 02 Jan 2025 17:53:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48451
IP address blocks: 94.124.40.0/21 maxlen: 21
2a00:f78::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:35:04:5f:43:12:cd:2c:fc:5d:94:73:84:4f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Validity
Not Before: Jan 2 17:53:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36c09a992d0c9459266c0c79fcb00e5abb416a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:30:65:17:e3:c3:5f:28:95:9b:fe:ea:ab:72:
be:da:09:36:4f:17:81:b7:3e:21:ad:08:06:5d:63:
44:70:92:0d:77:d8:a3:35:4f:70:c2:4a:77:04:2c:
70:75:8e:36:e4:1f:fb:b4:d0:1a:76:2b:a2:19:cd:
46:29:ea:da:2f:8b:8f:de:ef:ce:c4:a9:c9:ca:ec:
d5:ca:8d:96:6e:88:4b:06:2f:13:84:07:72:c8:81:
e7:d9:4b:02:e0:07:d6:e8:a1:37:06:b9:ea:65:cc:
74:ef:be:89:b7:e8:ff:1b:bf:e0:3e:92:07:ed:13:
de:b8:13:16:75:02:1f:2c:90:94:39:7d:8f:45:db:
a5:85:72:cf:d7:c2:1c:25:c0:3e:6b:5b:98:14:78:
27:97:bb:03:42:ec:bf:b3:be:e1:e8:8e:a8:d3:01:
17:83:2a:06:7e:61:96:45:66:36:89:f7:81:c2:c2:
40:a2:cd:64:3b:57:e1:a8:9b:d1:98:89:27:d8:fc:
49:3f:48:73:d5:2f:22:58:73:75:df:1d:6e:30:f1:
d9:3a:90:d9:67:04:db:aa:80:81:25:55:ef:d8:34:
c3:72:56:8d:06:c6:a1:54:b3:04:0a:c2:3a:63:54:
21:44:45:a6:de:75:44:91:e9:a7:84:b7:38:14:9a:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C0:9A:99:2D:0C:94:59:26:6C:0C:79:FC:B0:0E:5A:BB:41:6A:5B
X509v3 Authority Key Identifier:
keyid:AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/NsCamS0MlFkmbAx5_LAOWrtBals.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.40.0/21
IPv6:
2a00:f78::/32
Signature Algorithm: sha256WithRSAEncryption
40:60:fe:2b:ed:47:60:3b:23:20:ba:4b:4c:c9:cd:19:01:cd:
c6:12:52:39:e8:8a:86:e7:87:7a:dd:c9:6b:32:13:d2:16:cd:
0b:24:77:c3:13:7a:ea:da:3c:dc:6a:9d:c8:ed:c9:72:7b:6b:
00:4e:d7:01:86:53:45:fb:78:31:a6:26:0f:c7:9e:77:e2:b5:
b8:62:e1:86:a6:d0:cb:40:f8:ff:1a:05:92:53:2b:e3:21:a6:
d4:e7:db:6b:02:5b:a9:d2:6e:26:1b:5b:5d:a6:62:12:89:6c:
a3:7b:a1:fa:7c:a4:a9:b0:4b:f9:98:45:81:8e:8c:a3:81:ef:
59:e0:ab:aa:8e:38:f0:88:1a:9f:42:16:a1:5e:0c:0c:dd:c7:
f9:7c:95:7b:99:76:14:fc:a9:21:78:10:d5:98:d3:52:80:e2:
18:e4:47:4a:b2:1c:d4:72:b1:70:d7:54:4b:24:e6:5a:09:f6:
65:bb:a9:a3:a6:6e:7b:98:41:99:c4:71:37:a6:70:20:ea:07:
f1:c2:f8:d6:f2:06:a5:7c:a6:d3:ca:b6:38:a0:72:0c:9f:b5:
e7:17:ae:73:88:9e:7d:ca:39:c9:33:93:04:af:ce:7d:8a:c8:
43:f1:8d:e7:57:6a:9b:c8:60:4f:c2:1f:38:37:96:8b:03:4a:
7a:16:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:02 2025 by rpki-client