Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/NbRmZt6RSfP6iqfHak1bMrr79pU.roa
File: NbRmZt6RSfP6iqfHak1bMrr79pU.roa (raw, json)
Hash identifier: AH4SWAW98wWueZRIy8qKwKk1DzljGkyjoMlDMde17AI=
Subject key identifier: 35:B4:66:66:DE:91:49:F3:FA:8A:A7:C7:6A:4D:5B:32:BA:FB:F6:95
Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial: 01942747642AE4607FC3D15C3E780F75C145
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/NbRmZt6RSfP6iqfHak1bMrr79pU.roa
Signing time: Thu 02 Jan 2025 13:49:37 +0000
ROA not before: Thu 02 Jan 2025 13:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204641
IP address blocks: 88.80.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:64:2a:e4:60:7f:c3:d1:5c:3e:78:0f:75:c1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Validity
Not Before: Jan 2 13:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35b46666de9149f3fa8aa7c76a4d5b32bafbf695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:ac:6d:75:ff:0f:65:ab:10:b4:18:e7:62:
a7:a1:3a:5a:27:ab:5c:74:55:3b:d4:ff:e3:c3:e7:
fd:fc:3b:a9:23:ea:37:27:78:1a:e4:5a:d9:c1:4c:
05:a2:c8:ec:7d:12:99:d4:f3:49:2d:73:f8:ff:69:
3a:68:1c:c0:18:38:ab:13:7b:d8:86:4b:60:5b:8e:
78:a5:77:e6:b1:62:34:cb:81:2b:2c:52:c2:6a:c3:
46:bf:d2:c2:4a:f6:44:a8:48:e9:65:fc:0b:ee:a5:
58:cf:6e:be:47:72:97:cc:79:ec:c6:c5:6d:f4:c8:
95:0c:4f:66:16:d0:af:b6:1b:cb:93:e7:01:86:6b:
82:07:18:24:62:e8:d6:da:3f:75:5f:b3:70:58:46:
38:a4:73:c8:15:07:1c:b5:2d:c8:5a:be:a8:e8:7c:
3f:b9:2a:62:11:37:c6:45:0e:2e:95:ee:93:85:05:
fd:dd:b2:0e:53:16:d2:06:eb:ab:43:f6:e8:ea:d9:
73:e3:dc:31:44:6e:60:3d:7c:1b:68:04:2c:b9:df:
3b:60:c1:d5:68:8b:84:19:74:20:69:18:67:04:bf:
4d:98:aa:82:4f:17:3d:66:fb:a7:1c:42:9d:e4:7d:
05:e0:6f:4e:d1:50:4e:01:b7:e6:86:5f:ed:2a:0c:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B4:66:66:DE:91:49:F3:FA:8A:A7:C7:6A:4D:5B:32:BA:FB:F6:95
X509v3 Authority Key Identifier:
keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/NbRmZt6RSfP6iqfHak1bMrr79pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.144.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f5:51:51:f7:a9:e7:d3:c4:21:0a:65:6f:95:36:3c:e1:1f:
60:f8:c3:3c:5c:d4:c3:ed:36:58:7f:12:d4:20:a4:87:03:7d:
47:50:67:5a:81:14:b2:e9:b3:99:31:b3:b2:9c:12:06:b5:31:
23:7b:ed:bf:0d:41:7b:a2:36:f1:bc:09:b1:e6:b6:4d:bf:f1:
d5:36:fe:e1:3d:22:43:0c:02:89:87:2e:e4:57:12:ba:47:3c:
54:9c:52:20:35:1c:d1:f5:0f:29:26:5d:34:24:29:88:8c:55:
77:3c:3d:4b:70:2d:19:f2:b7:77:d2:ad:da:2e:73:80:13:b0:
c2:d2:36:ce:71:87:34:51:ec:bb:91:ff:c0:bf:11:a8:bc:89:
30:22:de:75:d9:58:b6:86:ff:d2:4d:e2:7a:76:db:c4:64:18:
5c:95:10:8a:64:ee:05:8b:ee:72:b5:95:f5:b0:56:6f:92:13:
ab:14:1b:95:4f:47:17:53:7f:f3:85:29:18:12:10:9b:c0:d1:
a2:c2:fe:df:40:de:ed:4d:06:49:98:94:a1:17:20:78:23:92:
a7:49:9c:03:ae:b2:8c:90:74:39:1c:40:d7:d2:7f:bd:10:27:
d7:c5:33:73:69:87:94:9d:1e:c5:1d:62:5e:74:b6:5d:fd:86:
17:e6:b9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:40:59 2025 by rpki-client