Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/1-ULf-aQJ3fC-9_w7BYQULZHTnNw.roa
File: 1-ULf-aQJ3fC-9_w7BYQULZHTnNw.roa (raw, json)
Hash identifier: A5jmxQDIS4oGLvhKUV0INjhfzuBh6+1jpId+3WjZlWc=
Subject key identifier: F9:42:DF:F9:A4:09:DD:F0:BE:F7:FC:3B:05:84:14:2D:91:D3:9C:DC
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01941F8C5543513375106597EA6E148A9B0F
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/1-ULf-aQJ3fC-9_w7BYQULZHTnNw.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35600
IP address blocks: 14.102.102.0/24 maxlen: 24
91.221.92.0/23 maxlen: 24
91.221.106.0/23 maxlen: 24
185.48.132.0/22 maxlen: 24
185.56.176.0/22 maxlen: 22
194.117.246.0/23 maxlen: 23
2001:67c:184c::/48 maxlen: 48
2a00:4780::/32 maxlen: 32
2a02:5520::/32 maxlen: 32
2a0e:ac80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:55:43:51:33:75:10:65:97:ea:6e:14:8a:9b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f942dff9a409ddf0bef7fc3b0584142d91d39cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:bd:0d:72:6b:a7:07:96:cf:81:95:71:da:
04:7b:b0:56:0a:59:c4:36:c8:4a:c4:2f:f4:fc:19:
06:e8:8b:66:78:da:20:36:d6:4b:3b:73:85:63:01:
64:0a:9f:18:a8:e7:b1:c2:22:24:bf:35:bb:a3:50:
77:93:80:cd:c5:fe:ac:8c:40:6d:0a:fb:f2:11:93:
0c:2b:75:b4:c8:9c:f3:e7:5f:2d:e1:bc:84:b3:5e:
34:b9:a7:92:07:0f:b6:9d:63:66:e7:af:fd:f3:4f:
23:d8:a6:5c:ef:5e:67:44:32:bf:b0:c6:75:fb:27:
76:9b:00:47:d3:9a:01:7c:09:33:9b:c9:0c:fc:dd:
43:87:5f:db:d8:ee:bc:1f:f0:1d:08:39:e5:b8:23:
5d:d5:62:a4:1e:ae:88:21:85:55:c2:7b:4b:e5:3c:
8b:9c:39:13:d6:f6:f7:fe:82:fc:b2:9d:73:5e:4c:
69:35:c7:e7:ae:c1:8b:58:97:3f:61:7a:86:37:a6:
52:37:16:ed:71:c2:03:3c:04:ae:ef:b7:f7:b5:d4:
d0:85:7c:85:ed:0b:d4:14:c2:02:b8:2e:bd:23:bd:
51:e5:87:8f:50:b2:eb:99:5e:ff:15:78:cb:9e:dc:
61:53:0b:25:42:eb:bd:85:b4:87:92:5f:a7:f1:ba:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:42:DF:F9:A4:09:DD:F0:BE:F7:FC:3B:05:84:14:2D:91:D3:9C:DC
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/1-ULf-aQJ3fC-9_w7BYQULZHTnNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.102.0/24
91.221.92.0/23
91.221.106.0/23
185.48.132.0/22
185.56.176.0/22
194.117.246.0/23
IPv6:
2001:67c:184c::/48
2a00:4780::/32
2a02:5520::/32
2a0e:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
92:97:57:99:40:b6:3b:df:2c:0c:d8:2e:17:e7:5b:a3:fc:8b:
dd:8d:60:37:82:db:d1:2e:a4:b3:20:98:7e:d8:90:a5:2f:33:
ae:ec:10:ef:fa:86:31:54:d7:a9:f5:da:fd:d0:f0:bb:5d:57:
ca:d6:76:2d:a2:7b:6e:13:69:16:e5:00:6f:95:ab:d2:42:cd:
fa:74:54:2e:ca:4e:dc:f7:4d:37:a5:e7:7f:51:8e:94:24:80:
b1:4d:88:41:87:a2:1d:21:95:dc:da:6f:98:49:90:45:14:80:
b1:87:ac:20:2b:72:c2:9e:d3:91:93:93:dd:ad:1a:ae:66:01:
6d:1d:8e:98:27:b5:f2:e4:09:da:93:fc:58:71:6a:60:de:cb:
0a:36:42:df:26:e0:c0:32:9a:f3:ca:b3:68:0b:0a:a7:4f:3f:
b0:bf:ab:69:67:a6:75:46:6d:bd:7b:2c:a1:01:6b:69:53:18:
4b:35:54:2a:42:34:bf:db:89:64:b5:e5:07:84:a1:85:7c:b8:
24:a6:d6:17:4e:17:f5:12:63:45:f3:9f:0d:85:41:62:c4:a0:
d6:36:58:47:64:31:f5:5c:28:06:28:2b:1f:c3:50:a1:4e:5c:
81:f4:07:b4:8c:10:98:60:69:ca:2c:bd:fc:0f:0a:81:40:ff:
46:35:8f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:14 2025 by rpki-client