Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/NldJhq1MAVdUgbD6n6XKOd_rYuI.roa
File: NldJhq1MAVdUgbD6n6XKOd_rYuI.roa (raw, json)
Hash identifier: nicnFQBAIXmcU10eabjaRC66nw/nEzjS6x4xuq2azqI=
Subject key identifier: 36:57:49:86:AD:4C:01:57:54:81:B0:FA:9F:A5:CA:39:DF:EB:62:E2
Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial: 0194274731CD32E040E031BD3E5DA34918B9
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/NldJhq1MAVdUgbD6n6XKOd_rYuI.roa
Signing time: Thu 02 Jan 2025 13:49:24 +0000
ROA not before: Thu 02 Jan 2025 13:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51849
IP address blocks: 194.107.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:31:cd:32:e0:40:e0:31:bd:3e:5d:a3:49:18:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Validity
Not Before: Jan 2 13:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36574986ad4c01575481b0fa9fa5ca39dfeb62e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:38:07:78:ce:6b:85:f1:cf:a3:b7:3f:c9:
66:43:e3:eb:20:c8:a3:58:67:09:ef:a5:0a:cb:95:
d3:4e:f4:b8:6d:3c:34:e1:e2:73:da:2c:d6:0e:95:
73:7d:d5:58:7e:b3:f8:a6:63:a7:a5:e5:b5:e3:40:
17:6e:5e:90:62:e3:ce:00:08:ef:06:e3:66:9a:15:
8e:68:f8:92:9d:81:6f:f9:a5:b9:81:3a:fe:50:6c:
3f:92:2a:d8:7a:4c:e4:ca:c3:e5:67:11:38:5a:56:
ad:d5:58:d2:18:b2:0d:31:9e:cb:5b:97:bb:ca:9b:
ee:f3:6b:27:b6:ef:d2:cd:ff:ec:3f:e7:cb:6a:32:
8b:d1:ef:9a:66:aa:c7:4f:dc:e4:e9:35:50:4b:5c:
4b:11:b9:45:6a:26:60:7e:c4:c4:47:ac:d1:4e:cf:
99:b6:10:d1:11:40:51:2e:51:b6:d1:78:db:72:af:
45:de:b1:e0:9b:d4:8b:26:36:9a:41:27:bb:3b:b4:
f8:96:59:43:4d:2b:01:f3:d0:f3:3c:99:f2:11:f8:
2c:91:f7:c9:aa:15:bc:0e:de:83:20:04:7f:b2:c5:
e0:a4:a1:c4:6a:ef:f8:76:07:dd:4b:e7:a5:d2:bd:
55:c3:45:e4:b3:73:5c:49:0d:8c:e7:28:6a:d7:75:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:57:49:86:AD:4C:01:57:54:81:B0:FA:9F:A5:CA:39:DF:EB:62:E2
X509v3 Authority Key Identifier:
keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/NldJhq1MAVdUgbD6n6XKOd_rYuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.121.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ae:22:75:6c:fd:9e:6a:e5:a5:c5:93:36:5b:e0:85:a7:e8:
8a:d1:33:ea:73:be:9b:09:5b:fe:6e:84:73:51:06:25:0a:d3:
3a:6a:86:6b:17:a3:71:36:8b:e8:b7:58:d8:ba:60:ac:d7:3b:
0a:73:5b:15:57:f2:d5:32:02:20:04:d7:fe:28:86:1f:70:81:
5d:cb:10:6b:73:d0:20:46:83:11:ed:a5:fe:8f:0a:ea:2f:c3:
a0:8d:3e:2f:8e:7d:fa:23:76:d7:e9:13:1b:a9:43:8b:e3:0d:
38:1e:1d:4d:ac:8e:77:ec:fa:6b:83:89:22:bd:49:a9:40:4a:
34:d6:82:7c:3f:fa:40:5f:a8:dd:d6:33:17:39:ac:1e:6d:b9:
c1:1e:0b:ac:1a:cb:d7:89:ab:78:8a:39:52:27:56:96:ae:8b:
2f:20:01:ba:a6:ad:31:52:a3:50:67:ce:83:52:d4:7e:fe:8b:
1c:b5:82:37:45:e5:21:ba:bd:e7:71:13:5a:4f:24:c5:e4:2b:
94:99:6a:5a:db:f3:4c:d6:fc:f3:80:6f:0c:87:96:de:d2:05:
4d:4e:30:00:09:57:b3:fe:8d:c5:25:78:4c:fb:32:ce:6a:39:
08:c1:7c:40:4e:2d:f4:1c:f6:d6:d9:76:6f:30:3e:46:08:03:
87:f4:02:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:36:13 2025 by rpki-client