Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/NX37ufqSYiD1gYeM9JFfvxDafG4.roa
File: NX37ufqSYiD1gYeM9JFfvxDafG4.roa (raw, json)
Hash identifier: o4ZMhTU/x1h6ROCAWrUAsFe+H+ucb3EYKWBn0+x/GBI=
Subject key identifier: 35:7D:FB:B9:FA:92:62:20:F5:81:87:8C:F4:91:5F:BF:10:DA:7C:6E
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA3FC21D8D0D76F246FE1E9CBADC4D
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/NX37ufqSYiD1gYeM9JFfvxDafG4.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207958
IP address blocks: 89.39.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3f:c2:1d:8d:0d:76:f2:46:fe:1e:9c:ba:dc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=357dfbb9fa926220f581878cf4915fbf10da7c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:97:62:4b:52:2b:cb:d8:e3:fe:00:09:29:bd:
bd:f1:3e:ad:97:02:64:5d:f3:0c:8a:dc:6d:0f:1b:
47:75:31:2b:6b:7e:00:04:5c:4f:a4:86:4a:c1:52:
88:20:34:2f:6d:40:0d:dc:7d:a7:4b:e3:cb:c3:03:
af:b2:ae:e5:92:6e:9a:81:76:18:09:89:b2:06:d7:
02:87:82:18:cc:d1:b3:58:d0:43:73:9a:95:9f:cd:
66:76:b3:1a:29:84:ee:f6:5a:74:3e:11:3a:39:32:
88:c8:06:5f:ba:84:0b:f4:52:df:e5:6c:d3:c4:f3:
13:dd:b5:0b:2d:36:07:38:05:48:c2:96:f2:28:71:
58:43:87:ca:fb:ea:9c:22:dc:56:d7:7f:92:9e:39:
89:f5:a3:1e:f0:7a:a5:b8:1f:20:b9:ef:5e:b3:78:
24:e7:75:3e:a3:7a:2a:db:19:76:ee:b6:89:07:f2:
d1:57:89:91:42:f9:fb:e4:9d:53:0b:4f:02:75:a4:
88:90:13:d3:31:46:b6:65:3f:d0:df:eb:79:e6:35:
56:c6:c8:d4:bf:47:ae:ed:81:d1:8c:1e:6f:3b:9b:
51:d5:78:17:d1:f6:13:b1:71:52:b9:13:6a:30:c2:
5c:bc:0b:b3:19:e7:69:58:a3:02:7c:3f:09:d4:b0:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7D:FB:B9:FA:92:62:20:F5:81:87:8C:F4:91:5F:BF:10:DA:7C:6E
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/NX37ufqSYiD1gYeM9JFfvxDafG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e4:95:2a:e9:88:d2:f3:34:88:82:e7:3c:0b:73:49:5f:90:
61:9b:e5:2d:10:6a:eb:9c:ec:26:39:e0:ff:dc:c7:d0:9f:de:
5d:a7:ae:c8:4c:02:72:66:50:da:0f:31:b6:9e:98:63:dc:36:
b9:24:bd:65:be:93:6e:3f:6f:d4:ac:88:b5:b6:f6:38:90:81:
27:31:77:52:46:83:aa:23:9a:f1:2a:9e:64:1b:54:48:2a:99:
ee:d8:a5:2d:fc:44:3b:73:18:8f:97:2e:c7:bf:cd:74:d1:3d:
b9:08:e1:f6:d5:f3:66:04:ef:7b:f0:35:3b:6c:3e:db:3c:0f:
99:85:e2:c1:ee:e9:2d:57:e9:eb:92:f1:a6:61:08:06:76:34:
9e:13:bb:68:92:3e:b5:72:64:14:89:96:71:f8:ce:a6:ae:3c:
f9:1f:c7:34:2d:86:21:37:75:38:fb:f7:6f:5f:f4:3b:a3:5f:
b0:7b:46:a1:cd:1a:d6:3f:7d:6e:81:d4:26:50:4d:07:58:b9:
2c:48:a5:48:07:a0:8e:93:76:47:44:42:62:08:67:e0:00:c4:
75:46:c7:f9:97:91:47:58:21:11:18:03:f7:6f:19:5a:12:df:
61:c6:db:9e:10:c0:22:53:12:56:e1:55:fd:da:a8:7a:52:de:
b0:33:19:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+j/CHY0NdvJG/h6cutxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm
NmMxNGMwHhcNMjUwMTAxMDM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTdkZmJiOWZhOTI2MjIwZjU4MTg3OGNmNDkxNWZiZjEwZGE3YzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35diS1Iry9jj/gAJKb298T6tlwJk
XfMMitxtDxtHdTEra34ABFxPpIZKwVKIIDQvbUAN3H2nS+PLwwOvsq7lkm6agXYY
CYmyBtcCh4IYzNGzWNBDc5qVn81mdrMaKYTu9lp0PhE6OTKIyAZfuoQL9FLf5WzT
xPMT3bULLTYHOAVIwpbyKHFYQ4fK++qcItxW13+SnjmJ9aMe8HqluB8gue9es3gk
53U+o3oq2xl27raJB/LRV4mRQvn75J1TC08CdaSIkBPTMUa2ZT/Q3+t55jVWxsjU
v0eu7YHRjB5vO5tR1XgX0fYTsXFSuRNqMMJcvAuzGedpWKMCfD8J1LCv5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDV9+7n6kmIg9YGHjPSRX78Q2nxuMB8GA1UdIwQY
MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt
OTc3ODY3NGVkYzk3LzEvTlgzN3VmcVNZaUQxZ1llTTlKRmZ2eERhZkc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3
LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSddMA0G
CSqGSIb3DQEBCwUAA4IBAQBN5JUq6YjS8zSIguc8C3NJX5Bhm+UtEGrrnOwmOeD/
3MfQn95dp67ITAJyZlDaDzG2nphj3Da5JL1lvpNuP2/UrIi1tvY4kIEnMXdSRoOq
I5rxKp5kG1RIKpnu2KUt/EQ7cxiPly7Hv8100T25COH21fNmBO978DU7bD7bPA+Z
heLB7uktV+nrkvGmYQgGdjSeE7tokj61cmQUiZZx+M6mrjz5H8c0LYYhN3U4+/dv
X/Q7o1+we0ahzRrWP31ugdQmUE0HWLksSKVIB6COk3ZHREJiCGfgAMR1Rsf5l5FH
WCERGAP3bxlaEt9hxtueEMAiUxJW4VX92qh6Ut6wMxke
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:45 2025 by rpki-client