Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/nNVHHKEfsJfG44XdxGfL73GAMRg.roa
File: nNVHHKEfsJfG44XdxGfL73GAMRg.roa (raw, json)
Hash identifier: NI/XC0iPPtIGOryqbltBIbJFjdHoTuU2EzfphzNeVjU=
Subject key identifier: 9C:D5:47:1C:A1:1F:B0:97:C6:E3:85:DD:C4:67:CB:EF:71:80:31:18
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 01942826CD2A2D591BE8457F980595304A13
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/nNVHHKEfsJfG44XdxGfL73GAMRg.roa
Signing time: Thu 02 Jan 2025 17:53:39 +0000
ROA not before: Thu 02 Jan 2025 17:53:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 212.68.172.0/22 maxlen: 22
212.68.172.0/24 maxlen: 24
212.68.173.0/24 maxlen: 24
212.68.174.0/24 maxlen: 24
212.68.175.0/24 maxlen: 24
212.68.176.0/22 maxlen: 22
212.68.176.0/24 maxlen: 24
212.68.177.0/24 maxlen: 24
212.68.178.0/24 maxlen: 24
212.68.179.0/24 maxlen: 24
212.68.180.0/22 maxlen: 22
212.68.180.0/24 maxlen: 24
212.68.181.0/24 maxlen: 24
212.68.182.0/24 maxlen: 24
212.68.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:cd:2a:2d:59:1b:e8:45:7f:98:05:95:30:4a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Jan 2 17:53:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cd5471ca11fb097c6e385ddc467cbef71803118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:91:c0:09:dd:c9:94:88:35:ee:d1:37:2a:
49:ca:94:4f:3a:e4:e9:d0:02:c1:41:9f:d4:67:3b:
63:4f:5c:d4:1c:55:cc:b1:84:cc:58:75:4c:48:90:
67:4f:50:96:fd:c5:fb:d0:c7:b6:c3:f0:81:e4:03:
97:ee:50:f9:e5:cd:b0:0a:6e:8c:3f:c0:c0:c4:36:
bb:fe:eb:1e:6e:cc:c1:4f:b2:93:7b:9a:60:fd:f2:
d1:41:0c:40:00:fd:9b:a1:88:3a:4e:9f:9e:97:50:
87:de:e3:b5:65:d4:3f:24:9b:fd:de:fe:6d:c1:43:
2d:25:54:41:db:08:f0:df:73:6c:6c:5a:9d:c8:9d:
3c:ec:2c:57:63:42:9a:64:bd:f1:88:ab:b1:08:2a:
3b:ba:99:7e:f1:d5:84:45:62:8b:cc:36:5d:44:40:
3b:56:01:6a:e1:c7:10:f3:c1:95:4b:96:16:4f:49:
62:cb:4b:37:c6:38:81:ed:3f:c5:c4:3c:7a:42:38:
45:a0:ec:70:b0:53:13:ae:53:9a:8b:da:69:ca:bc:
b3:de:f0:9a:20:e1:97:89:82:ae:e8:6f:4b:c2:ec:
88:f5:50:21:2d:25:a4:e5:81:d5:ce:2b:cf:81:8b:
ef:5b:dc:d8:af:df:ac:03:18:d6:ce:5b:49:bd:51:
66:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D5:47:1C:A1:1F:B0:97:C6:E3:85:DD:C4:67:CB:EF:71:80:31:18
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/nNVHHKEfsJfG44XdxGfL73GAMRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.172.0-212.68.183.255
Signature Algorithm: sha256WithRSAEncryption
27:c9:82:c0:bf:83:0c:03:4c:42:76:bf:52:f1:0d:37:84:38:
0b:23:72:57:a0:50:b2:22:29:85:69:cc:5a:35:f4:7a:3c:53:
60:8d:81:58:bb:29:11:07:f0:56:ad:22:a7:ae:e9:b9:2d:6c:
17:2f:50:91:54:9d:bc:01:bf:94:5f:c2:e4:9c:a9:48:2f:b0:
f6:d1:5c:e8:b0:58:91:3f:0e:20:42:4d:94:5a:76:71:87:c7:
1d:54:62:fe:7e:56:43:cb:cf:e4:d2:14:b3:6c:b1:12:fa:aa:
38:15:c3:e2:87:65:26:47:69:67:1b:1f:b8:62:e6:29:89:b6:
ea:cd:17:f7:02:ae:8a:be:5f:d0:8a:ce:ec:d5:b4:6a:1b:54:
9a:69:c4:ea:da:b3:5c:78:ca:e2:31:b3:1e:8d:19:24:76:c6:
f1:d8:a9:2b:d9:15:d7:4b:5e:69:06:5d:51:ba:49:23:62:2c:
ba:67:45:36:3a:94:3a:7e:07:63:b1:d8:a7:f6:14:c1:82:01:
32:ec:5e:51:d8:a0:00:26:d9:fe:4c:7b:b7:9d:66:0a:1c:07:
b9:fc:27:40:c3:af:27:0c:6e:ee:7b:b5:f1:e4:2f:b4:c6:8b:
98:70:75:4a:33:7f:d3:89:56:f0:15:4a:59:dd:7e:06:34:85:
3f:73:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:55:25 2025 by rpki-client