Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/NsLrBAx4ehVwnuRuIxV4GC6AKlY.roa
File: NsLrBAx4ehVwnuRuIxV4GC6AKlY.roa (raw, json)
Hash identifier: bd0jFVShVRoxlQ2yZQX5k4g9HNjTW4iyAU7DLnrdQJs=
Subject key identifier: 36:C2:EB:04:0C:78:7A:15:70:9E:E4:6E:23:15:78:18:2E:80:2A:56
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D65322F62B92302356924151BCDEF5
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/NsLrBAx4ehVwnuRuIxV4GC6AKlY.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 5.35.192.0/21 maxlen: 24
85.204.160.0/22 maxlen: 24
88.135.96.0/20 maxlen: 24
89.39.172.0/23 maxlen: 24
94.26.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:53:22:f6:2b:92:30:23:56:92:41:51:bc:de:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36c2eb040c787a15709ee46e231578182e802a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:64:cd:cb:23:3f:26:96:c2:49:e0:0e:df:
8b:e2:d6:1f:c0:4a:11:4f:7c:ce:66:d2:0b:9b:c7:
06:c9:d0:16:1d:6a:cd:19:b0:20:47:4c:56:54:61:
9a:f0:79:20:9a:23:a2:67:48:07:1b:03:77:fb:55:
48:9f:5d:d1:fc:49:7d:a5:a7:d5:2e:2e:9d:c1:8d:
c8:6f:79:35:f4:7b:57:64:bb:91:73:d5:5c:83:67:
8a:3d:67:93:d3:02:83:5c:37:32:5c:00:4d:e9:52:
8a:97:e4:e2:00:f3:c4:17:46:37:5c:0b:b2:d3:05:
e1:52:ff:20:57:08:95:7c:33:5f:ff:54:ab:89:f9:
c0:20:0f:24:ca:99:15:d8:6c:c7:34:8d:f9:15:6d:
ea:4d:1b:70:6f:27:97:6e:2c:20:89:f8:08:f4:1e:
af:8e:99:34:9a:dd:14:99:21:ac:7c:96:10:c6:be:
76:67:b4:31:14:19:de:45:ed:d8:3e:89:09:50:b1:
4c:a3:93:c1:1a:27:57:39:21:33:96:e6:d9:68:8e:
b1:2d:a6:06:c5:71:9a:18:ee:9a:b4:35:95:72:3e:
d8:06:79:cb:83:87:22:46:cc:56:37:07:2c:0e:27:
4d:9b:35:42:a0:01:88:5d:46:25:ee:fc:b1:78:44:
61:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C2:EB:04:0C:78:7A:15:70:9E:E4:6E:23:15:78:18:2E:80:2A:56
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/NsLrBAx4ehVwnuRuIxV4GC6AKlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
85.204.160.0/22
88.135.96.0/20
89.39.172.0/23
94.26.64.0/23
Signature Algorithm: sha256WithRSAEncryption
49:b8:d4:25:7f:5d:98:d4:51:57:f2:df:f9:6e:63:4d:fd:fb:
c2:c2:41:66:1f:2f:3c:cb:3a:77:7a:0b:44:d3:4f:83:db:e9:
25:e4:de:94:4d:c8:16:6c:c0:10:1e:d6:17:e6:4f:e2:b2:ea:
7f:9e:eb:cb:7f:dc:c7:01:be:e2:2a:78:89:f1:cc:01:18:cd:
12:1f:19:61:06:9e:d2:bc:af:df:7c:b4:ba:88:da:22:6e:da:
17:d7:cd:9f:22:10:ac:dc:90:75:07:d6:b8:0d:03:9c:44:d0:
db:bb:87:48:55:d1:e1:6f:25:7e:3b:d0:d4:2d:4a:59:cd:29:
c9:e3:d5:02:4e:36:07:de:43:03:d8:66:d8:de:f2:e2:20:56:
2c:43:93:18:1a:8a:02:6a:f4:a2:28:a0:0f:b3:ff:9a:53:40:
af:dd:a1:dd:49:34:02:ed:49:aa:68:cc:e5:7d:91:3b:ab:7c:
85:60:c1:a2:72:25:d7:f9:f5:78:bb:8b:52:30:c0:3a:33:9c:
03:e3:ce:b1:d8:12:93:47:ab:ad:34:7d:13:59:42:c0:0f:29:
a9:ed:4c:0d:ef:8c:09:94:ff:72:66:2a:f9:39:03:92:0b:7b:
b7:d5:7d:35:2e:80:72:ef:9e:90:44:be:a3:7c:87:cf:83:e7:
b2:fb:71:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:55:05 2025 by rpki-client