Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa
File: Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa (raw, json)
Hash identifier: zHFP35lrOV5ykmqGRdLeDFScFpQtr+Xab1k7m30xSdw=
Subject key identifier: 36:CF:F6:59:3C:A4:25:75:81:29:E0:19:CB:C6:50:41:31:88:67:88
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01942444EDAC6E401C8ACCA1CFBD5633C4E6
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa
Signing time: Wed 01 Jan 2025 23:48:04 +0000
ROA not before: Wed 01 Jan 2025 23:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.92.0/24 maxlen: 24
193.108.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ed:ac:6e:40:1c:8a:cc:a1:cf:bd:56:33:c4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jan 1 23:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36cff6593ca425758129e019cbc6504131886788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:c9:5d:2d:44:7e:23:80:60:31:71:39:d1:
69:35:b9:8c:11:48:42:75:ad:59:6f:13:0c:51:c7:
42:d6:19:3f:02:a8:64:4a:6c:0c:ba:25:81:94:81:
96:51:cf:cf:57:99:4f:61:95:7d:08:14:97:ae:20:
c4:10:0a:4d:b6:e7:33:f9:c3:c6:0c:62:ea:71:bd:
70:62:17:85:e4:dd:81:de:cf:7d:69:33:01:ca:3e:
39:83:c4:49:4d:72:4d:cd:7d:7d:54:d3:e0:2e:78:
03:4b:d2:23:1e:78:d1:75:db:c0:b5:8d:38:ea:e0:
70:06:72:eb:ad:82:93:3f:7c:6d:2c:df:c6:a6:ba:
16:3f:06:72:c9:dc:74:33:02:03:f6:23:fc:1e:30:
35:af:f9:7b:c8:d6:a4:ee:2e:87:16:92:ac:58:56:
41:57:ca:ff:88:0f:d1:2c:2a:fb:4b:e3:08:a2:c2:
f1:07:27:f2:17:60:14:6b:5b:7b:01:b9:aa:d2:36:
6d:bf:5c:d9:e5:17:48:d0:22:94:20:6e:c5:bc:6b:
9d:15:1a:5e:c4:41:95:c7:2c:19:cd:ea:3c:82:f1:
d1:d2:8d:8e:15:b0:33:e9:98:af:23:00:6e:7a:0c:
55:09:3a:51:b8:43:8e:f8:41:8d:ea:b8:f2:17:f5:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CF:F6:59:3C:A4:25:75:81:29:E0:19:CB:C6:50:41:31:88:67:88
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.92.0/24
193.108.131.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5f:6f:f5:a3:ea:4c:61:af:9d:49:42:1a:bc:6a:6e:5d:f8:
f6:f4:2f:db:0f:d2:30:d3:9c:b1:d2:d1:fb:9a:78:c0:16:14:
59:d3:17:48:aa:a0:60:90:d2:6e:59:ac:e4:98:26:ad:1e:e5:
b0:0e:ca:35:da:f0:ce:f9:77:be:cf:c5:2c:7c:f1:11:60:03:
07:e0:6f:8b:50:a9:ff:64:0f:2f:3a:e2:9a:40:51:27:9a:ae:
ba:5f:fa:78:be:8f:6a:5f:38:4f:64:c9:ba:7e:dc:10:be:10:
83:0c:00:5d:d1:c9:c5:6d:bf:fe:eb:9e:55:91:25:98:3b:9a:
47:07:ff:2a:23:11:fd:72:cb:f2:82:15:df:f0:bb:8b:82:1b:
08:02:78:3e:3a:2f:8d:03:65:f6:90:25:46:2e:ec:b5:3b:d7:
8b:8a:dc:42:5e:6f:cd:ed:5e:39:5e:f1:24:f8:00:0b:fe:25:
7b:06:c2:1c:28:ae:db:e8:fa:cf:14:a5:ee:7f:14:5b:ad:fb:
90:dc:03:ac:f3:55:e0:4c:c0:06:22:2a:85:db:50:22:41:8e:
d0:d7:98:bf:bf:48:22:0e:92:7f:80:49:f0:03:ce:e4:65:01:
5d:7b:3c:67:d0:92:2e:da:51:98:19:3c:9d:fe:d9:a2:51:e5:
39:a9:bd:1f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRO2sbkAcisyhz71WM8TmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw
ZTJjZDgwHhcNMjUwMTAxMjM0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmNmZjY1OTNjYTQyNTc1ODEyOWUwMTljYmM2NTA0MTMxODg2Nzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlazJXS1EfiOAYDFxOdFpNbmMEUhC
da1ZbxMMUcdC1hk/AqhkSmwMuiWBlIGWUc/PV5lPYZV9CBSXriDEEApNtucz+cPG
DGLqcb1wYheF5N2B3s99aTMByj45g8RJTXJNzX19VNPgLngDS9IjHnjRddvAtY04
6uBwBnLrrYKTP3xtLN/GproWPwZyydx0MwID9iP8HjA1r/l7yNak7i6HFpKsWFZB
V8r/iA/RLCr7S+MIosLxByfyF2AUa1t7Abmq0jZtv1zZ5RdI0CKUIG7FvGudFRpe
xEGVxywZzeo8gvHR0o2OFbAz6ZivIwBuegxVCTpRuEOO+EGN6rjyF/VwEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDbP9lk8pCV1gSngGcvGUEExiGeIMB8GA1UdIwQY
MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt
M2JlY2NhYWUzMzZkLzEvTnNfMldUeWtKWFdCS2VBWnk4WlFRVEdJWjRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk
LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkRcAwQA
wWyDMA0GCSqGSIb3DQEBCwUAA4IBAQBGX2/1o+pMYa+dSUIavGpuXfj29C/bD9Iw
05yx0tH7mnjAFhRZ0xdIqqBgkNJuWazkmCatHuWwDso12vDO+Xe+z8UsfPERYAMH
4G+LUKn/ZA8vOuKaQFEnmq66X/p4vo9qXzhPZMm6ftwQvhCDDABd0cnFbb/+655V
kSWYO5pHB/8qIxH9csvyghXf8LuLghsIAng+Oi+NA2X2kCVGLuy1O9eLitxCXm/N
7V45XvEk+AAL/iV7BsIcKK7b6PrPFKXufxRbrfuQ3AOs81XgTMAGIiqF21AiQY7Q
15i/v0giDpJ/gEnwA87kZQFdezxn0JIu2lGYGTyd/tmiUeU5qb0f
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:31 2025 by rpki-client