Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/NarRGiguJ47YJ26p29Ce-F1nGL8.roa
File: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (raw, json)
Hash identifier: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=
Subject key identifier: 35:AA:D1:1A:28:2E:27:8E:D8:27:6E:A9:DB:D0:9E:F8:5D:67:18:BF
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 0194258FC3DB01568334C159CD50C3C5068E
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/NarRGiguJ47YJ26p29Ce-F1nGL8.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200781
IP address blocks: 45.13.124.0/22 maxlen: 22
45.13.124.0/23 maxlen: 23
45.13.126.0/23 maxlen: 23
45.13.126.0/24 maxlen: 24
185.96.40.0/22 maxlen: 22
185.96.40.0/23 maxlen: 23
185.96.42.0/23 maxlen: 23
2a03:fd80::/29 maxlen: 29
2a03:fd80::/32 maxlen: 32
2a03:fd83::/32 maxlen: 48
2a03:fd84:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c3:db:01:56:83:34:c1:59:cd:50:c3:c5:06:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35aad11a282e278ed8276ea9dbd09ef85d6718bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:d5:c5:68:39:c4:dc:ee:d1:a5:5f:64:a1:
11:1b:4c:44:37:4c:b3:f4:34:c2:ef:a8:05:3e:8e:
6b:f6:77:f6:43:1e:85:89:3b:c3:fb:48:e2:8f:a1:
da:f5:1d:96:f6:20:1d:4f:ab:c8:95:07:77:24:bc:
ab:d8:ba:a1:90:cc:e6:3e:b5:03:f6:84:ca:e3:f7:
ec:c5:f8:f4:e8:71:f8:b9:4a:bd:70:2f:7b:fc:6f:
35:cb:e1:6a:45:ba:07:5c:48:aa:25:7d:86:95:15:
00:0c:f9:7a:56:a5:a3:7b:60:95:d7:dd:cb:9b:1f:
d6:8f:34:c8:a4:23:f2:fc:7a:cf:b2:3e:6b:ee:4c:
fc:5f:8d:32:0e:92:9d:d0:c7:0e:2c:23:67:a0:48:
a5:64:ba:31:b3:fc:16:23:df:fd:93:4d:ae:36:0a:
26:82:6e:af:ce:8c:61:72:aa:ef:dd:c3:d4:af:9c:
18:43:1e:d4:96:cd:ef:07:3e:01:6c:4c:56:e3:fe:
a7:2b:bd:a4:e5:bc:de:a9:2d:51:4b:67:45:99:da:
d4:88:3f:49:31:48:8b:2a:50:98:b0:58:82:37:81:
e7:a5:f1:8d:95:5a:34:30:d4:21:dd:74:1c:e7:d4:
45:db:8b:bc:3c:a7:e5:1e:b9:ff:5b:eb:71:25:72:
08:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:D1:1A:28:2E:27:8E:D8:27:6E:A9:DB:D0:9E:F8:5D:67:18:BF
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/NarRGiguJ47YJ26p29Ce-F1nGL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.124.0/22
185.96.40.0/22
IPv6:
2a03:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
5e:56:ba:67:0d:1b:05:90:3d:83:6e:6c:ac:a7:a3:3d:a2:07:
d1:2f:9c:66:4a:6b:48:43:e2:eb:f8:f5:1a:2e:14:e1:67:24:
8f:6f:51:aa:d6:52:a6:91:63:96:78:e2:83:c0:1f:5c:06:08:
b0:76:ae:4a:b9:22:44:fe:79:c9:23:93:9f:8c:57:16:67:52:
95:f6:1c:29:b1:30:c7:6f:40:1f:de:dd:f0:26:48:6f:f5:ae:
73:32:00:b6:66:a3:c4:19:74:c3:c4:f4:bb:22:7b:13:63:c1:
3e:cf:18:17:19:d3:dc:f6:af:ad:6d:31:fd:1a:9c:3c:a0:c6:
9a:19:b7:ee:c8:03:f3:8e:95:f1:71:f8:9e:3a:87:6b:ea:4a:
3f:19:4a:a6:b0:5a:5f:4e:37:47:2e:40:24:40:fe:ed:97:16:
9c:34:f2:7f:7e:2b:04:fe:36:f8:54:bc:ca:d5:37:f7:78:2b:
99:d5:7b:69:4f:7e:f6:ff:7e:b0:6d:b6:f0:3e:78:74:d5:fa:
0e:2f:05:a1:0e:38:d2:57:af:92:41:a4:18:ed:8b:2f:72:59:
b9:09:0c:65:1a:47:f7:b7:b7:36:f5:2c:24:f2:83:c1:ff:9e:
be:23:6a:45:29:5a:c3:fa:5b:c8:4a:1e:0a:99:eb:bf:fd:67:
81:6e:67:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:07:09 2025 by rpki-client