Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa
File: NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa (raw, json)
Hash identifier: FrMf82dKiOwRXnPTbOvJcW2xGJFytZk+POr0sPYgteE=
Subject key identifier: 35:57:D2:AB:60:D8:E1:C0:F7:FC:57:A6:2B:1A:B7:90:55:9D:35:B4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 01942067F818FF3B4BABDE8FA0400F4CE937
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34141
IP address blocks: 217.198.16.0/20 maxlen: 20
217.198.16.0/21 maxlen: 21
217.198.24.0/22 maxlen: 22
217.198.28.0/23 maxlen: 23
217.198.30.0/23 maxlen: 23
2a02:7d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f8:18:ff:3b:4b:ab:de:8f:a0:40:0f:4c:e9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3557d2ab60d8e1c0f7fc57a62b1ab790559d35b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:21:cf:10:b1:cd:8d:e1:cf:c9:87:42:11:
bc:cb:b5:13:48:ad:e6:01:e5:62:cd:2a:02:c4:2f:
77:bd:7b:d0:4b:59:b1:e9:25:0a:aa:44:bd:94:ab:
13:18:35:1b:f2:f3:21:c3:ef:fc:60:9b:4c:3c:8d:
7a:9d:7e:9f:b8:8d:af:c8:bd:f4:51:ec:61:da:fe:
c2:6e:83:8c:5b:af:cc:c9:88:77:47:d3:ad:c3:78:
b3:87:11:00:cd:e5:ee:1b:1c:b6:da:d6:6d:4c:19:
b7:ce:d0:08:e1:2b:df:b1:16:0b:16:89:2e:06:e6:
01:eb:81:75:6b:c7:d6:eb:96:77:65:28:92:3f:55:
0c:9f:e1:ff:29:63:2d:8f:59:99:5e:03:d5:7f:d1:
8e:18:bb:41:9b:47:87:50:fc:21:82:90:f2:b6:7f:
6c:2e:4c:af:e6:76:15:1b:c0:2a:da:d2:6b:06:0a:
8c:55:5d:24:65:cf:14:2f:d5:70:1b:2e:a5:29:ae:
00:63:5a:41:55:82:95:de:e1:e9:99:0a:d8:df:0e:
1d:36:35:24:84:89:c2:7a:14:2a:b8:26:5c:55:97:
41:d9:20:e6:fb:9d:57:b4:dc:02:b6:b9:8d:01:e3:
ba:51:0c:f8:6c:52:1b:f5:3b:e2:e6:4c:ee:bd:f3:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:57:D2:AB:60:D8:E1:C0:F7:FC:57:A6:2B:1A:B7:90:55:9D:35:B4
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.16.0/20
IPv6:
2a02:7d0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:ba:98:94:b9:c3:ff:a9:e5:46:aa:3f:ba:69:c6:c3:67:9f:
fb:1c:b6:56:13:ea:cb:21:10:b1:b4:c4:3d:4e:0f:11:47:1e:
8a:8a:60:c8:3a:37:e1:40:35:44:39:d7:5e:04:64:3c:82:18:
29:d0:e4:89:e3:d2:d0:a4:60:fb:61:32:3f:1e:0f:b1:ec:18:
38:33:73:6f:6d:02:80:5b:cb:07:59:d1:b5:04:bd:a2:37:64:
ec:70:00:ae:5a:b3:13:55:5e:dc:0d:98:07:08:6f:ff:f4:46:
1e:9e:2f:c0:ad:b2:d4:21:95:5d:ee:05:45:d8:20:90:44:d8:
89:fa:2d:8a:93:ff:72:aa:a9:d5:7c:d7:57:8d:a2:10:bd:9f:
40:19:3b:bf:0c:8e:b5:cf:de:f0:7c:04:c0:32:97:15:07:ab:
80:e5:73:d5:e3:80:32:41:60:c3:d4:2d:43:40:e5:41:7d:65:
90:6c:58:c2:59:d4:13:14:a7:bb:54:91:48:a9:a9:f9:e0:78:
0a:0c:95:bc:3b:8d:7a:4a:d0:76:4a:58:09:a8:62:14:03:99:
66:99:4d:c8:aa:a4:3c:ca:7b:d6:f8:93:a1:65:38:95:0b:d3:
65:90:c9:f6:5d:57:62:ae:1f:65:dc:b9:23:37:71:ec:a9:a4:
34:c9:8c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:52 2025 by rpki-client