Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/N1_eJlCZb3ETGGXcyIle3qD0zxM.roa
File: N1_eJlCZb3ETGGXcyIle3qD0zxM.roa (raw, json)
Hash identifier: ZUSIabtzDxcJVnD57wreF1I3FajQaelaynE8r9qpwLA=
Subject key identifier: 37:5F:DE:26:50:99:6F:71:13:18:65:DC:C8:89:5E:DE:A0:F4:CF:13
Certificate issuer: /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Certificate serial: 01941FFA48AB8180606CDB2EC830A55008E7
Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/N1_eJlCZb3ETGGXcyIle3qD0zxM.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.22.0/24 maxlen: 24
185.1.143.0/24 maxlen: 24
2001:7f8:c6::/48 maxlen: 48
2001:7f8:de::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:48:ab:81:80:60:6c:db:2e:c8:30:a5:50:08:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=375fde2650996f71131865dcc8895edea0f4cf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:91:fd:ca:94:44:cf:ee:54:ce:c9:08:aa:
db:50:a0:f8:55:0e:d6:0a:0d:12:75:ce:86:e3:b6:
38:f5:0f:f2:39:9a:44:30:38:47:ca:8c:1f:eb:ea:
27:29:43:8d:0f:b2:72:b1:87:01:b6:fb:cf:fb:90:
bd:b0:fc:26:66:b7:b0:07:34:93:a9:16:7b:e5:36:
3b:cf:f8:5d:8d:bb:ac:1f:0a:d6:1f:5b:5d:fb:ad:
4d:0d:c6:ec:69:5b:16:a6:ec:84:60:3f:65:82:4c:
39:56:f4:7a:6e:96:7d:d4:32:f7:bb:9a:39:2c:de:
50:d7:88:df:c3:a8:c7:24:b0:52:92:d9:c0:da:6b:
b9:31:6e:17:fc:65:e4:0b:5f:3a:0e:78:c1:dd:63:
70:10:e9:b9:ee:2e:db:6e:f1:07:ed:db:ec:5a:09:
38:e7:fc:29:54:ee:8b:4e:36:aa:78:0c:c8:e7:c6:
85:56:29:d6:87:a0:e2:b8:7f:b3:0b:80:1b:8e:8d:
9a:92:27:e4:c0:bb:d5:38:fa:83:f1:4e:8b:ee:6b:
45:1c:4a:d9:f6:7f:64:fe:e5:3b:ee:e7:9d:0d:97:
7d:27:17:59:16:ad:14:f3:d9:95:c8:36:c4:51:13:
c8:36:ed:66:a5:29:a5:12:66:59:d1:65:98:ba:58:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5F:DE:26:50:99:6F:71:13:18:65:DC:C8:89:5E:DE:A0:F4:CF:13
X509v3 Authority Key Identifier:
keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/N1_eJlCZb3ETGGXcyIle3qD0zxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.22.0/24
185.1.143.0/24
IPv6:
2001:7f8:c6::/48
2001:7f8:de::/48
Signature Algorithm: sha256WithRSAEncryption
64:4e:43:fc:1f:e6:7c:ec:78:7e:28:4c:8f:1e:a9:58:c3:54:
3d:ce:a1:2a:e4:e4:7e:1e:a0:4c:94:4f:a5:e3:4b:a6:b1:39:
b0:a0:52:e0:0f:e2:49:4d:fb:35:64:ed:e1:5e:c9:f8:8e:b5:
7d:e0:a3:c1:d2:7c:75:e6:05:4e:2f:fc:3b:12:9c:3d:1e:74:
c5:96:06:40:4b:64:32:c4:31:5a:2a:c9:fc:e9:b2:fb:7c:9c:
7d:09:5d:c8:77:28:79:b2:23:72:e7:d1:cf:04:57:fb:23:c2:
be:6f:9b:3d:46:a9:a7:e4:b3:5c:4a:b2:5d:24:a1:43:fc:fa:
0d:0b:55:a4:84:f1:d9:5f:e6:ad:43:e9:a2:16:5d:c8:c5:44:
de:a8:c0:ef:14:a6:f4:ad:92:0e:a6:5a:f3:bc:21:01:44:62:
46:1c:80:3e:0c:c5:51:e8:b0:6f:41:ad:0f:7e:0f:55:20:b3:
21:60:4a:41:95:c5:b5:74:2d:88:a0:d2:30:3d:a9:83:a2:8d:
d2:69:fe:f9:97:66:56:35:43:8f:82:ef:51:7e:30:21:9e:b3:
47:71:ad:cb:cd:c7:20:ee:c9:82:e3:a5:0e:9d:52:78:ed:c6:
25:29:4c:98:c6:2d:b3:dc:21:ee:e6:0b:5f:5d:c9:79:41:c5:
b4:fb:7a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:31 2025 by rpki-client