Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/NTwv9MrFUxU0rREuWqapE-DiajI.roa
File: NTwv9MrFUxU0rREuWqapE-DiajI.roa (raw, json)
Hash identifier: hq+d0ybPFOeu8D+rx2edFf/i0EP0Jbrx83E12M+26zY=
Subject key identifier: 35:3C:2F:F4:CA:C5:53:15:34:AD:11:2E:5A:A6:A9:13:E0:E2:6A:32
Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0
Certificate serial: 019425216B2326E5B4C94F45E1B6AA854690
Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/NTwv9MrFUxU0rREuWqapE-DiajI.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29015
IP address blocks: 195.245.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6b:23:26:e5:b4:c9:4f:45:e1:b6:aa:85:46:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=353c2ff4cac5531534ad112e5aa6a913e0e26a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:54:64:d2:ec:22:82:b6:1f:d1:f8:82:46:
fc:3a:a6:56:6b:d3:ac:88:8b:b3:51:69:4d:3b:6b:
38:ec:97:51:ba:ff:c6:e4:75:8c:8e:6a:87:f6:19:
ab:e3:4f:5f:59:03:bf:34:72:dd:e8:e2:61:6b:e5:
5d:e6:34:12:b4:72:87:2f:4a:82:44:4d:d5:30:f5:
95:e8:5d:a2:d5:35:7a:17:65:0e:fb:e9:8d:c3:40:
b9:2c:c1:30:93:c8:07:30:d3:3a:83:d3:f6:7e:b0:
f2:a2:a6:2b:c6:2c:c2:04:59:47:ac:c4:86:4c:cf:
21:67:38:26:b4:b6:e3:0f:b5:54:32:8e:32:92:44:
31:03:93:0b:ca:91:ce:2e:7e:e7:28:3f:ee:8f:9a:
2e:70:8b:91:8e:29:54:e1:11:17:b4:e3:85:5a:6f:
c4:02:16:ab:60:a6:ce:f4:34:35:b5:df:dd:07:7a:
ba:2c:3f:78:8a:79:88:e5:6e:cf:b5:b8:2a:87:2b:
3a:02:3d:4f:c2:80:f1:af:c2:8c:8b:2f:71:64:e0:
8f:b5:19:92:77:c2:9b:2a:7b:74:b7:71:7a:9d:b8:
09:4c:70:8c:f7:2a:1c:9b:38:5b:84:33:58:08:7f:
03:0e:a9:5a:b4:72:0c:01:bc:42:db:8c:a0:80:36:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3C:2F:F4:CA:C5:53:15:34:AD:11:2E:5A:A6:A9:13:E0:E2:6A:32
X509v3 Authority Key Identifier:
keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/NTwv9MrFUxU0rREuWqapE-DiajI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.250.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:0c:3d:53:c5:06:00:ae:a9:43:fa:ad:a6:fe:b3:9b:49:1f:
7d:af:94:fd:66:69:a5:2e:e3:70:e2:75:02:08:b2:11:06:3e:
b1:66:de:0c:8f:80:d4:b6:65:d2:f3:9d:1e:e4:d5:d9:3d:06:
96:e2:5b:e9:aa:9c:65:3c:28:58:8d:41:10:7b:27:ad:d3:da:
ef:09:63:56:01:00:80:a8:ed:6c:7e:45:80:e9:f4:5d:40:21:
5d:77:a5:ff:9f:b3:67:24:32:4a:65:9d:88:b3:94:65:8e:b2:
18:fb:ed:62:03:86:cb:ed:7f:ad:34:e7:2a:a8:8b:e0:c0:66:
a6:8c:70:49:dc:25:3e:ab:5e:b7:a6:b6:ca:29:41:10:5a:af:
30:c6:12:f2:1e:69:f4:8b:2b:a9:fd:f2:11:81:10:fd:63:22:
4e:34:d7:01:89:55:43:7e:bf:55:ae:10:90:8e:c9:71:0f:6e:
2f:c3:e9:9c:96:08:cb:a4:31:05:ea:c6:c0:f6:9c:84:14:45:
da:4c:eb:fd:bf:70:55:f4:45:8c:ab:05:6f:80:f8:3a:de:47:
9f:63:a7:5c:49:66:71:e7:f7:8c:73:54:a4:d3:ad:14:46:a0:
37:1c:0d:e8:e0:a3:cc:63:bd:56:75:c5:5b:c8:05:66:41:85:
62:61:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:15 2025 by rpki-client