Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/NSnb3tUKAteQgCjg27tPwCtQsow.roa
File: NSnb3tUKAteQgCjg27tPwCtQsow.roa (raw, json)
Hash identifier: T1WF6yYvKdtCTApOo5YD7M1OyQOqRaWtXv4eJm96bms=
Subject key identifier: 35:29:DB:DE:D5:0A:02:D7:90:80:28:E0:DB:BB:4F:C0:2B:50:B2:8C
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B58A5CEEE44317C32CB4D2AFE9930
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/NSnb3tUKAteQgCjg27tPwCtQsow.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56856
IP address blocks: 212.21.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:58:a5:ce:ee:44:31:7c:32:cb:4d:2a:fe:99:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3529dbded50a02d7908028e0dbbb4fc02b50b28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:7b:c6:26:fe:df:66:72:cc:80:94:55:89:
7e:48:63:3b:c9:68:0a:a9:b0:5c:fe:fb:7c:8e:6d:
bc:1a:a5:3c:ac:58:af:74:73:20:2c:fb:59:0d:f3:
ec:fd:9b:35:01:9a:98:e9:36:26:5a:99:13:8e:86:
1c:7c:9c:19:3f:a1:c9:35:58:83:ed:29:9b:8f:ec:
b2:8b:c5:2e:ff:37:e1:e0:f4:28:dc:2e:be:cf:76:
09:d6:f5:75:6e:9d:4d:90:7f:47:be:c4:81:20:c8:
fa:73:93:85:f6:33:72:c6:f4:6b:af:a5:a7:4d:0f:
e3:8f:97:f3:ac:c6:b2:f7:8e:7f:4a:f2:ae:e2:85:
e8:8c:28:a0:80:6d:b4:ad:b4:d6:b4:ed:6d:df:5d:
89:e1:e5:f0:98:a4:ab:91:e9:d0:93:10:f9:99:78:
43:99:f5:5f:09:4e:29:42:14:dc:f6:2c:f4:32:40:
5b:be:82:61:81:78:42:f3:58:70:ae:04:34:a5:f1:
c9:72:e5:8d:a7:24:83:af:de:e9:92:68:82:42:77:
4b:67:3c:20:9f:08:2d:94:24:f5:1c:fd:f4:92:21:
ad:cb:32:ba:e8:21:2f:43:2e:df:9a:00:6e:89:7e:
fa:61:57:13:70:35:c9:ec:93:10:3a:f7:a6:59:ab:
d8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:29:DB:DE:D5:0A:02:D7:90:80:28:E0:DB:BB:4F:C0:2B:50:B2:8C
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/NSnb3tUKAteQgCjg27tPwCtQsow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.139.0/24
Signature Algorithm: sha256WithRSAEncryption
79:6a:a0:3b:e2:12:8c:43:ba:b3:b9:45:ec:b0:0e:6e:15:56:
69:71:f6:9f:f8:4c:1d:7d:ef:b2:66:af:a0:6e:66:e9:89:c2:
7f:a9:2e:83:6f:92:43:fa:ab:32:62:9d:75:80:22:2c:d2:04:
1d:04:f1:13:93:66:a0:17:62:cf:56:6b:c1:fa:61:07:5f:3e:
2f:72:04:39:1e:1d:26:c5:91:ee:d1:7d:4c:a8:41:b3:7d:7f:
2b:b0:e1:2a:b7:07:c1:09:f1:8b:3c:53:4c:7d:41:ca:69:f5:
78:22:57:c5:f0:dd:a2:3a:6c:86:1b:b0:b9:41:bf:51:bb:b9:
03:59:fc:aa:0e:01:7c:19:1d:19:8d:0e:d3:e3:16:89:80:2e:
56:8c:2a:61:9d:3a:9b:45:b4:3b:e7:2c:0c:25:8b:d9:55:e4:
8a:14:6a:81:1e:28:82:e8:38:41:7f:dd:de:c0:1e:01:dc:43:
de:90:b3:75:97:03:d3:f3:f1:a5:25:95:9c:96:83:5a:9f:f6:
18:62:98:03:13:51:ae:43:fe:b0:24:e7:59:f8:17:e4:29:ba:
fc:59:68:c5:08:3b:c8:d2:fd:6a:b8:58:ab:98:cd:4e:ff:2a:
e4:46:c4:66:f4:02:a8:68:aa:0c:a2:fc:5b:c0:8d:25:d0:fc:
70:b8:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:07:29 2025 by rpki-client