Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/nWo0tpDau55F6w13btny_cDnsxQ.roa
File: nWo0tpDau55F6w13btny_cDnsxQ.roa (raw, json)
Hash identifier: 0rGHbbB1R/aeoWAFQ77wWiu6xM9tDdjXU9lR6GTg5GU=
Subject key identifier: 9D:6A:34:B6:90:DA:BB:9E:45:EB:0D:77:6E:D9:F2:FD:C0:E7:B3:14
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D720E859A268EA9EE6BB3467C6C6E7
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/nWo0tpDau55F6w13btny_cDnsxQ.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204154
IP address blocks: 46.17.107.0/24 maxlen: 24
92.118.10.0/24 maxlen: 24
185.172.129.0/24 maxlen: 24
185.200.191.0/24 maxlen: 24
2a04:5201:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:20:e8:59:a2:68:ea:9e:e6:bb:34:67:c6:c6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d6a34b690dabb9e45eb0d776ed9f2fdc0e7b314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:3b:59:0e:fa:f7:6b:8e:b6:5e:a4:2b:6b:
30:c7:d9:1d:49:5a:a6:ec:d4:fa:2a:62:8c:f5:5c:
b0:b1:bd:c2:a0:21:df:90:8c:6c:4a:37:04:37:da:
a7:68:c7:24:4e:08:23:54:c7:df:a7:7e:7c:47:9f:
ed:9d:16:9e:14:25:bb:c9:3e:e3:af:92:75:19:da:
51:53:e8:83:1a:43:73:cb:b4:73:0d:4c:fb:10:a5:
99:66:92:da:02:aa:7b:97:d9:40:0f:e9:fa:94:c1:
fc:8e:df:bd:cd:cc:38:93:1a:9a:7c:a1:57:55:77:
ec:95:0f:e6:cb:ef:60:fa:70:07:b7:07:e3:75:9e:
31:a4:e5:f0:51:05:64:ae:62:9c:e0:2b:2c:7e:70:
b9:51:a7:18:0a:1c:ef:05:0c:6b:11:e8:b6:2d:6d:
86:36:b7:11:21:ea:e1:f3:a4:6c:c2:64:3e:27:96:
65:bd:53:2e:a3:44:91:ac:da:c3:78:d7:54:59:3c:
e9:a4:c4:b3:e4:56:2f:1f:62:72:d4:cf:01:3b:7c:
c7:81:49:03:73:3b:cd:e6:6f:68:35:dd:c1:e6:aa:
14:cd:1e:ed:3b:91:01:e2:72:6e:8d:6d:7b:f2:a1:
0d:61:b1:ad:07:ed:b2:60:dc:d9:b6:8a:b3:4c:da:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6A:34:B6:90:DA:BB:9E:45:EB:0D:77:6E:D9:F2:FD:C0:E7:B3:14
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/nWo0tpDau55F6w13btny_cDnsxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.107.0/24
92.118.10.0/24
185.172.129.0/24
185.200.191.0/24
IPv6:
2a04:5201:1::/48
Signature Algorithm: sha256WithRSAEncryption
4a:91:83:a3:06:4e:59:61:c2:28:4a:08:4e:fb:a4:ff:2c:e9:
dc:4b:34:f3:7f:33:3d:17:68:9c:d9:13:38:5e:d0:48:11:41:
ca:51:e5:12:ab:a3:54:37:e8:93:5c:80:22:e1:ce:97:ce:b4:
45:0e:7f:3f:12:81:23:dd:0f:8b:75:9d:d6:7b:29:a1:c4:da:
e6:18:ae:6b:d0:60:98:f0:0a:71:64:f7:62:5a:5e:75:d9:b5:
bc:c3:18:ad:8b:ea:6a:fd:6e:c5:d2:a8:ee:e4:3a:18:37:36:
04:62:6d:80:73:f0:f2:b6:b4:e2:67:64:aa:14:21:c8:f4:2c:
b8:be:4b:bd:a9:67:57:d9:24:99:91:cb:14:0f:46:fa:d5:00:
53:90:be:63:23:53:46:1a:b4:2b:89:85:b1:7b:ca:f1:2a:38:
e2:1d:e9:fb:3c:af:45:ad:eb:ca:05:bb:cd:bc:f5:45:c5:30:
bc:93:28:98:14:d9:65:90:f3:24:58:c5:a1:51:da:cd:0b:98:
08:b7:c9:65:74:d8:ae:77:2d:81:ed:10:2e:0e:5e:7b:aa:ff:
97:63:27:a9:d2:d7:77:1f:4b:f1:68:fc:82:2a:ea:b6:38:07:
08:64:8c:67:fb:b7:a5:67:18:54:4b:20:5c:75:e8:db:ad:fb:
84:1a:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:35 2025 by rpki-client