Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/NCJsjpTQWxI0n5NAackGxmLU8Ko.roa
File: NCJsjpTQWxI0n5NAackGxmLU8Ko.roa (raw, json)
Hash identifier: 6TfkgUsG2HVnXozc83DWJO6FnPYzO18qDayvSPxdcok=
Subject key identifier: 34:22:6C:8E:94:D0:5B:12:34:9F:93:40:69:C9:06:C6:62:D4:F0:AA
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 019428238DC730FA84891BEAD6214FFB6C16
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/NCJsjpTQWxI0n5NAackGxmLU8Ko.roa
Signing time: Thu 02 Jan 2025 17:50:06 +0000
ROA not before: Thu 02 Jan 2025 17:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 139.156.0.0/16 maxlen: 16
145.54.0.0/16 maxlen: 16
195.190.224.0/19 maxlen: 19
213.162.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:8d:c7:30:fa:84:89:1b:ea:d6:21:4f:fb:6c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 17:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34226c8e94d05b12349f934069c906c662d4f0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a3:f1:4e:82:ad:b7:80:4b:f9:d5:0b:b5:26:
1a:df:db:13:99:f2:9b:01:44:8a:28:82:cd:4d:c3:
58:a1:90:99:fc:c2:58:54:ac:1b:c7:09:d0:3b:93:
cc:72:02:ea:06:4c:5a:6b:00:7e:eb:95:f3:8d:24:
b2:fa:52:a2:dc:d6:aa:54:b8:1c:9d:01:49:a6:1e:
c8:f0:ae:5f:48:2b:a6:b0:d1:75:fb:06:d4:43:4c:
20:c3:c2:c3:02:a1:b8:7d:b5:c1:83:e8:97:be:20:
e3:d8:8b:1f:a3:75:c8:40:40:77:b5:de:a0:42:07:
b9:5d:14:14:ec:de:cd:08:0c:ba:de:6e:7c:8c:98:
4f:72:43:4a:a7:20:06:25:2e:5c:8b:7a:0b:da:60:
58:f3:4a:db:c8:69:0b:77:a3:fa:61:5a:57:4a:19:
26:9e:eb:80:ab:65:86:9c:d9:df:7d:2f:88:9c:25:
90:ba:c9:02:7b:53:d5:e1:f4:0c:a4:2a:ea:59:d2:
11:e6:db:5a:70:af:7f:77:79:1c:c2:f9:70:aa:c7:
bf:9b:1f:f3:d6:23:cf:69:fb:ca:d5:91:69:38:67:
68:df:ce:71:70:ca:08:7f:d7:d7:cc:1f:c7:42:09:
cd:9c:6f:75:40:a2:72:57:f7:72:58:c9:a1:59:15:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:22:6C:8E:94:D0:5B:12:34:9F:93:40:69:C9:06:C6:62:D4:F0:AA
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/NCJsjpTQWxI0n5NAackGxmLU8Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.156.0.0/16
145.54.0.0/16
195.190.224.0/19
213.162.160.0/19
Signature Algorithm: sha256WithRSAEncryption
69:f3:d7:be:88:96:3a:ec:3c:ea:5a:f8:f5:3b:6c:92:8a:b4:
e7:36:75:9e:a9:45:ef:79:d8:0b:19:97:a3:ea:d8:2e:fa:40:
f3:fc:d9:38:2c:bf:0c:c6:bc:b0:73:8c:70:5e:fc:a7:c2:f2:
62:eb:2d:50:47:61:d2:97:92:f9:46:bf:c7:19:54:39:12:b0:
3b:2c:23:6f:ad:95:d6:64:e5:ed:77:a7:6a:3b:23:f2:55:d0:
6c:da:ae:07:55:eb:23:ed:c7:d6:45:ed:a2:97:21:74:bd:cd:
ce:2f:bd:fa:f3:3a:46:f8:9e:d2:c1:1c:10:bd:4c:56:b7:42:
55:cb:09:54:17:03:4f:83:bf:51:64:21:20:00:ac:1e:bb:8f:
65:c2:ff:54:bf:c5:a9:df:e7:57:44:35:ef:6d:a0:a0:27:70:
2e:d2:99:b9:bf:cc:10:ec:bf:01:8d:f2:9c:d2:ee:c3:76:2c:
37:8a:2c:3f:0b:59:c3:15:2b:01:b7:aa:a1:a0:b3:cd:32:2d:
52:68:24:ab:cf:4b:c8:b8:ab:f6:09:b7:b6:22:79:72:11:68:
10:3c:61:99:46:20:52:68:55:c3:bd:3a:fa:e5:b8:94:28:c2:
fd:dc:44:5e:be:60:d1:a4:2a:3e:c6:65:cc:e9:d3:a6:59:ab:
14:97:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:58 2025 by rpki-client