Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/t_NbSs-XXGA2hJOmPF5KDsf8NBI.roa
File: t_NbSs-XXGA2hJOmPF5KDsf8NBI.roa (raw, json)
Hash identifier: JV/IL0dl+HkqTXg2lbPq+hlj4zrD/nsTv5bCVFs7sqo=
Subject key identifier: B7:F3:5B:4A:CF:97:5C:60:36:84:93:A6:3C:5E:4A:0E:C7:FC:34:12
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B2695D8E14095419DCB4B28B01AF8F
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/t_NbSs-XXGA2hJOmPF5KDsf8NBI.roa
Signing time: Wed 01 Jan 2025 11:48:48 +0000
ROA not before: Wed 01 Jan 2025 11:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202989
IP address blocks: 85.143.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:69:5d:8e:14:09:54:19:dc:b4:b2:8b:01:af:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7f35b4acf975c60368493a63c5e4a0ec7fc3412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:fc:93:41:45:89:5c:91:54:e3:a1:c0:fb:
86:60:d9:fb:c1:e8:6b:fc:1b:e8:c8:8e:ee:9a:45:
a6:8c:05:25:95:fd:18:6b:65:1b:ab:1b:a3:64:d1:
ad:b6:79:cd:54:cd:95:9e:81:c7:5b:cc:c4:b2:b2:
59:7d:89:47:38:49:21:54:98:5b:c4:aa:3f:82:7e:
d6:88:c8:7a:7c:24:85:5b:c3:46:c5:14:72:f8:93:
72:f1:0d:b5:fb:5f:4a:06:e7:9c:45:59:ff:64:9d:
29:bf:eb:e3:f1:da:b9:64:83:12:5a:cb:2a:0f:6b:
82:8c:65:e3:cb:53:96:12:bb:13:cc:7d:e7:c9:c3:
21:8f:f3:65:a6:d8:d7:fd:47:a4:bf:48:e3:90:15:
0a:0a:bc:b7:cb:21:37:41:79:22:e8:c9:d9:77:3f:
e0:24:2f:19:c9:3f:56:a8:d5:a9:21:2a:af:d9:89:
c7:d9:8a:d8:a2:55:5b:1f:6a:02:b6:1d:68:c6:75:
f3:6e:2d:a4:ad:67:ab:e7:62:d2:df:b7:83:55:64:
40:db:17:e4:41:a0:8a:7d:67:dd:83:8e:e5:43:ca:
09:47:0f:70:4e:34:53:2a:df:a4:b0:98:9a:a8:93:
4d:77:0b:62:17:38:46:0c:09:49:af:08:8c:22:24:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F3:5B:4A:CF:97:5C:60:36:84:93:A6:3C:5E:4A:0E:C7:FC:34:12
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/t_NbSs-XXGA2hJOmPF5KDsf8NBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.248.0/24
Signature Algorithm: sha256WithRSAEncryption
70:3c:23:bc:de:85:c5:bc:25:86:7a:bd:76:c2:e0:59:48:7b:
57:e3:57:a0:7e:59:05:cc:f5:11:50:27:78:bb:83:45:70:07:
5c:42:92:09:92:60:b9:c8:7d:6b:09:0f:4d:34:3e:27:ab:0a:
f7:b4:4f:3e:5c:b7:ad:5e:ba:4d:37:52:e0:93:0f:b6:2a:70:
03:18:7d:5f:11:b2:fe:37:73:1a:4f:4c:be:7f:38:aa:85:68:
bd:34:dc:51:33:c4:c3:b6:9f:ce:c8:ec:71:4e:06:17:70:61:
ed:21:d7:4f:dc:11:41:41:5f:47:d7:50:28:65:53:c6:45:66:
5b:d8:82:44:a0:6e:b1:0e:ab:35:19:ea:35:d6:eb:78:d8:eb:
67:7c:f9:7f:9a:58:0e:b4:f2:a2:81:5f:78:10:4b:c7:80:f6:
52:83:a7:6d:2c:a9:91:80:e0:56:49:0f:e0:c0:fe:38:f6:29:
04:d3:d0:1f:56:3b:ce:06:64:cc:76:98:ff:3e:55:a9:33:7a:
93:92:3f:09:38:5e:03:cd:4c:c4:04:c0:a9:16:d8:7b:79:dd:
40:72:f4:9e:a2:6d:68:1c:8c:e0:a5:22:2c:1c:67:70:77:2c:
53:41:58:ec:dd:e8:bd:53:e4:1c:d8:de:5a:10:b8:d4:34:95:
29:12:57:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:30:08 2025 by rpki-client