Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/N7TBLk6ijg60Rw5drnJxmPzvOok.roa
File: N7TBLk6ijg60Rw5drnJxmPzvOok.roa (raw, json)
Hash identifier: Gzj1MrzdxuXElz1N9UYhs6KigXCuOfoYMXiwL2fVYSQ=
Subject key identifier: 37:B4:C1:2E:4E:A2:8E:0E:B4:47:0E:5D:AE:72:71:98:FC:EF:3A:89
Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial: 019426D9EE653CB50CD1724E26542072ACD2
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/N7TBLk6ijg60Rw5drnJxmPzvOok.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 80.67.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ee:65:3c:b5:0c:d1:72:4e:26:54:20:72:ac:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37b4c12e4ea28e0eb4470e5dae727198fcef3a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:6b:09:6a:c5:61:35:57:ae:eb:dd:28:6e:
57:c0:58:56:b9:cd:6d:e4:9c:f9:13:d3:91:cf:88:
40:3a:83:e8:27:ff:ab:c2:db:14:97:34:3c:7f:43:
f8:88:38:7b:04:54:a4:29:fb:a5:9e:61:45:11:70:
16:29:08:af:5a:b5:c9:ff:88:31:05:53:3f:92:cd:
8a:e0:2a:76:e4:fd:56:24:a6:40:9b:ce:9a:d0:19:
9b:28:f1:9b:ee:fd:d8:ff:65:05:65:14:8a:c7:25:
ee:60:a2:a5:57:9c:3c:5f:d9:4f:bb:88:f1:df:60:
ae:49:35:67:dc:f9:20:c7:1c:9c:c9:4d:2a:93:83:
de:77:a3:39:dc:48:0d:96:9c:df:58:fd:e3:e3:4f:
f3:b6:68:89:ed:37:c7:b0:2b:95:44:cb:df:c1:07:
8c:33:83:28:74:a0:3b:ac:80:17:70:d6:49:85:d4:
ab:5d:ea:11:11:71:71:0b:ff:75:4d:61:4f:90:e4:
a8:ff:ac:19:06:fd:ad:c2:7f:1b:02:48:fc:98:63:
1b:d7:2b:b4:c5:5e:db:87:79:d2:ae:5e:d5:b7:87:
cd:37:2e:c2:26:6d:e8:88:e9:d5:ed:ee:8d:dd:e5:
05:58:02:f3:e1:c3:dd:7f:91:a8:69:00:de:12:67:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B4:C1:2E:4E:A2:8E:0E:B4:47:0E:5D:AE:72:71:98:FC:EF:3A:89
X509v3 Authority Key Identifier:
keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/N7TBLk6ijg60Rw5drnJxmPzvOok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
94:1e:6e:5a:1d:f2:9c:c2:1f:65:df:a2:01:0c:36:af:20:29:
d6:aa:2b:a1:52:07:a4:26:e6:f7:85:cd:21:ff:ec:97:fb:43:
95:a6:1b:1f:b9:d1:7f:dd:4f:fd:f1:e7:d6:a1:b0:ad:11:32:
f1:c0:96:99:95:12:f9:e1:15:83:dd:3e:72:d0:33:89:f2:29:
0f:1d:84:1b:57:db:01:30:b2:bc:b6:f9:95:a5:a3:09:3c:0c:
ef:ff:d1:60:a9:8e:0b:09:a0:f2:eb:38:e9:a0:0b:83:72:ad:
b1:ee:7b:3c:05:a1:d0:6d:b1:23:aa:ad:92:80:5b:a8:bc:19:
97:2c:87:b4:8e:8f:9c:0d:d0:6d:54:10:68:97:39:2f:ad:14:
aa:70:96:62:03:fb:6c:45:eb:47:d6:03:72:ec:01:a6:ff:06:
f7:82:d8:2f:be:fd:d3:8d:ce:ac:ec:42:ea:3f:10:ba:37:ee:
fa:d5:88:e6:e6:1a:6a:8c:80:42:c6:12:26:d0:f6:87:8a:55:
f7:36:70:79:88:28:4e:36:c9:d5:ed:8c:1d:37:33:9f:82:fb:
c4:f8:23:fc:23:2a:f9:fd:28:73:9b:6f:c7:c0:dd:8b:4c:76:
f8:b5:40:af:c5:57:58:76:f8:f2:64:2f:11:90:c9:60:de:0c:
3c:d2:91:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:39:55 2025 by rpki-client