Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/NI9PA3DeuJZ8C4Z38jjkQp55Z9M.roa
File: NI9PA3DeuJZ8C4Z38jjkQp55Z9M.roa (raw, json)
Hash identifier: myYnnl24PT+xu1fTWXRtQwS1Z11gqqABXPED52Nni8U=
Subject key identifier: 34:8F:4F:03:70:DE:B8:96:7C:0B:86:77:F2:38:E4:42:9E:79:67:D3
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 01942067E4A2D2FCDD7764498B422CD48BBE
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/NI9PA3DeuJZ8C4Z38jjkQp55Z9M.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62317
IP address blocks: 185.40.132.0/22 maxlen: 22
185.66.76.0/23 maxlen: 23
185.66.78.0/24 maxlen: 24
185.69.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e4:a2:d2:fc:dd:77:64:49:8b:42:2c:d4:8b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=348f4f0370deb8967c0b8677f238e4429e7967d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fe:1b:f7:1a:ef:1e:31:d0:de:f4:15:5d:bd:
82:81:c5:c7:1f:ad:4e:aa:95:29:d3:e0:af:07:96:
73:d3:dc:a9:c6:f2:4b:4f:cc:3b:45:13:c3:59:f7:
7d:df:04:8d:6c:f7:2c:2c:f0:61:4e:1c:36:9f:0f:
6f:df:49:12:dc:20:f0:2d:a1:04:3c:22:cf:43:7a:
80:fb:b8:a0:58:ff:76:f2:59:13:5e:fe:97:2c:d6:
7e:f3:63:c4:e2:ec:55:2e:19:e2:c1:9a:12:9d:92:
cb:68:8c:10:9e:96:98:32:ed:bf:b2:80:76:1c:3b:
21:5c:e9:01:91:bf:8f:fa:a8:e8:4d:06:79:9c:c5:
f6:16:eb:36:28:83:b7:5b:5b:a4:a1:62:21:4a:fe:
32:ae:e4:1f:87:b1:6b:ce:b6:1a:ea:5f:8d:5c:2c:
94:39:1c:6a:80:a2:35:2a:7b:b7:76:72:b3:52:f4:
45:5b:64:d3:6d:5e:c6:f6:10:f0:2a:3e:ba:d7:ff:
6c:53:32:8d:a3:a5:21:e7:22:f7:fd:18:45:af:ff:
89:cc:64:04:60:bc:21:6a:ec:e6:f2:20:e1:f3:41:
ba:f2:e4:5d:90:75:66:5f:14:dd:f4:10:b8:fe:90:
c5:b3:f7:ad:4d:35:93:f1:4e:f6:44:75:96:4d:df:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8F:4F:03:70:DE:B8:96:7C:0B:86:77:F2:38:E4:42:9E:79:67:D3
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/NI9PA3DeuJZ8C4Z38jjkQp55Z9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.132.0/22
185.66.76.0-185.66.78.255
185.69.200.0/22
Signature Algorithm: sha256WithRSAEncryption
64:59:d7:98:59:da:97:80:c3:5b:2b:fc:12:93:96:cd:ee:07:
7e:e5:f0:34:a8:a0:4b:d1:c7:dd:81:12:98:15:4b:99:68:9b:
13:77:46:c8:0e:61:c1:cd:06:7c:1c:1a:0a:4a:a6:70:51:ca:
6d:f8:9a:98:a1:99:30:19:a8:d9:0e:2b:9b:3d:f0:72:0a:94:
64:94:67:5f:c0:8e:77:ea:2f:fb:9e:63:75:5a:2c:bb:13:08:
e1:5c:5e:c0:74:8c:fa:ef:15:ca:e8:4a:4c:8e:a0:6b:fc:b0:
f4:18:76:f0:85:21:0a:9f:ec:4f:f2:28:09:15:6e:d5:19:20:
af:b3:cd:41:26:6d:1e:bf:7c:6b:06:ef:ac:7e:69:a2:3e:b2:
b6:ca:55:25:95:c1:8b:4a:a8:5c:82:57:15:c1:2d:d4:3c:6b:
4d:13:5e:6a:88:3b:03:d6:41:73:7c:64:ff:8f:51:e2:6c:bb:
23:e6:3b:46:c4:ee:39:0b:23:69:00:b0:3d:72:9b:9d:b3:44:
87:42:cc:0b:0a:98:98:53:d6:31:e2:8a:f7:6e:ec:65:a6:fd:
c6:37:de:c8:b6:94:16:33:e2:93:01:bb:b1:c2:83:49:7d:7c:
19:87:72:a2:96:dd:50:c2:18:0b:73:75:41:3d:55:d3:86:3b:
dd:d8:f5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:30 2025 by rpki-client