Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/NcyIXNvoa22SJL0FsYyeOTgc_BE.roa
File: NcyIXNvoa22SJL0FsYyeOTgc_BE.roa (raw, json)
Hash identifier: I7SWTbgf+E38lSjzpIc20ooNKJL8yjb7efp//cF2mds=
Subject key identifier: 35:CC:88:5C:DB:E8:6B:6D:92:24:BD:05:B1:8C:9E:39:38:1C:FC:11
Certificate issuer: /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial: 019426D9B8A8A1D5A7BFC04253CC741EBECF
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/NcyIXNvoa22SJL0FsYyeOTgc_BE.roa
Signing time: Thu 02 Jan 2025 11:49:50 +0000
ROA not before: Thu 02 Jan 2025 11:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 37.235.8.0/21 maxlen: 21
80.112.192.0/18 maxlen: 18
83.137.136.0/21 maxlen: 21
83.167.192.0/19 maxlen: 19
85.88.96.0/19 maxlen: 19
85.146.192.0/18 maxlen: 18
93.117.192.0/18 maxlen: 18
159.100.64.0/18 maxlen: 18
212.78.192.0/19 maxlen: 19
213.34.128.0/19 maxlen: 19
2a00:18c8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b8:a8:a1:d5:a7:bf:c0:42:53:cc:74:1e:be:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Validity
Not Before: Jan 2 11:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35cc885cdbe86b6d9224bd05b18c9e39381cfc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:45:53:be:2d:5b:a4:8c:8e:dd:cf:d3:7c:
9c:c8:46:cd:ff:63:54:58:db:8c:59:1e:a8:66:cc:
2e:d9:8c:ba:d7:ce:8d:46:81:d0:8c:9d:06:77:14:
1f:78:6b:cc:3e:02:bf:af:67:ce:3f:b0:28:b1:f1:
66:76:0a:97:5e:11:2b:32:a6:e1:2f:cb:59:3c:c4:
4e:62:b0:88:85:54:dc:a1:4f:78:e6:1f:de:28:ca:
2c:8d:db:2b:03:e6:f1:1c:47:08:8d:18:de:46:62:
48:0c:82:60:0b:02:51:a5:53:8a:44:e2:7e:f5:aa:
c7:3c:8a:ee:6b:0e:50:32:33:02:da:57:e6:be:f8:
8a:fd:1f:6d:49:67:43:9f:b3:7e:ad:e9:6e:6d:a0:
6e:a4:63:54:99:e8:70:6e:31:15:85:8f:df:c6:93:
c0:b6:74:7a:6e:7f:b8:2c:a3:28:29:f9:8a:e5:e9:
65:0f:36:63:df:00:5f:5f:38:f2:bb:c8:af:ee:33:
6d:a8:da:8d:ca:b8:48:68:6b:77:3b:6a:ee:18:0e:
15:f3:a6:8e:38:55:49:ad:31:52:44:9e:85:3e:ba:
26:d0:1f:62:47:5f:4d:fb:d7:a9:dc:10:b2:41:3f:
2d:56:98:20:a3:af:e6:0c:6c:8a:60:d8:a6:46:03:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CC:88:5C:DB:E8:6B:6D:92:24:BD:05:B1:8C:9E:39:38:1C:FC:11
X509v3 Authority Key Identifier:
keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/NcyIXNvoa22SJL0FsYyeOTgc_BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.8.0/21
80.112.192.0/18
83.137.136.0/21
83.167.192.0/19
85.88.96.0/19
85.146.192.0/18
93.117.192.0/18
159.100.64.0/18
212.78.192.0/19
213.34.128.0/19
IPv6:
2a00:18c8::/29
Signature Algorithm: sha256WithRSAEncryption
6d:2c:6c:eb:af:c7:3b:87:69:d6:54:88:af:95:8b:57:d2:f6:
cb:22:36:d3:43:04:b7:67:b8:29:3a:ac:e6:a3:3f:93:25:ea:
36:bb:ce:a0:02:56:3f:6a:b0:3b:74:65:a2:2d:d7:2d:ca:5c:
46:29:ff:3a:ee:17:5b:02:6a:92:ef:f8:7d:96:2a:8b:40:8e:
63:59:24:e6:4b:1c:b8:4f:6d:14:fd:d4:14:81:2a:14:53:7f:
97:61:99:ec:77:6a:c0:a6:6e:5c:7a:2b:6d:4f:7c:63:f4:33:
37:2c:9f:2d:b4:94:fa:8d:81:52:e3:ac:eb:6d:46:00:af:0d:
f1:ba:33:25:4b:c5:24:04:47:4b:71:5b:f8:0c:45:a9:2a:f6:
58:24:98:9a:9d:60:cb:1a:a3:76:66:00:1b:0a:3f:aa:88:b8:
66:49:6a:ac:4b:17:ed:68:c6:aa:51:31:37:48:0a:8d:64:9f:
13:48:7f:a3:ee:85:62:80:fe:56:97:79:00:74:ac:38:cf:32:
a4:3d:19:2c:16:1b:f6:b1:b5:3a:b4:92:43:8c:46:da:23:60:
50:4a:37:a9:54:12:60:be:eb:02:c4:45:19:40:69:4b:be:8e:
14:e7:2d:16:f4:42:ae:e6:85:cb:5f:58:c6:37:21:54:94:a7:
2e:cf:af:c5
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAZQm2bioodWnv8BCU8x0Hr7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOWY3NWIyNTkzY2EyYjFiMGE1ZmQwYzU0MDE1ZGUzMDZj
NDdlZTYwHhcNMjUwMTAyMTE0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWNjODg1Y2RiZTg2YjZkOTIyNGJkMDViMThjOWUzOTM4MWNmYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAlFU74tW6SMjt3P03ycyEbN/2NU
WNuMWR6oZswu2Yy6186NRoHQjJ0GdxQfeGvMPgK/r2fOP7AosfFmdgqXXhErMqbh
L8tZPMROYrCIhVTcoU945h/eKMosjdsrA+bxHEcIjRjeRmJIDIJgCwJRpVOKROJ+
9arHPIruaw5QMjMC2lfmvviK/R9tSWdDn7N+relubaBupGNUmehwbjEVhY/fxpPA
tnR6bn+4LKMoKfmK5ellDzZj3wBfXzjyu8iv7jNtqNqNyrhIaGt3O2ruGA4V86aO
OFVJrTFSRJ6FProm0B9iR19N+9ep3BCyQT8tVpggo6/mDGyKYNimRgPmoQIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFDXMiFzb6GttkiS9BbGMnjk4HPwRMB8GA1UdIwQY
MBaAFMGfdbJZPKKxsKX9DFQBXeMGxH7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1o5MXNsazhvckd3cGYwTVZBRmQ0d2JFZnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zN2E4ZDItMzQ2Ni00NjE2LWJjMWMt
MDEyNDBiY2ZkYjQyLzEvTmN5SVhOdm9hMjJTSkwwRnNZeWVPVGdjX0JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zN2E4ZDItMzQ2Ni00NjE2LWJjMWMtMDEyNDBiY2ZkYjQy
LzEvd1o5MXNsazhvckd3cGYwTVZBRmQ0d2JFZnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDJesIAwQG
UHDAAwQDU4mIAwQFU6fAAwQFVVhgAwQGVZLAAwQGXXXAAwQGn2RAAwQF1E7AAwQF
1SKAMA0EAgACMAcDBQMqABjIMA0GCSqGSIb3DQEBCwUAA4IBAQBtLGzrr8c7h2nW
VIivlYtX0vbLIjbTQwS3Z7gpOqzmoz+TJeo2u86gAlY/arA7dGWiLdctylxGKf86
7hdbAmqS7/h9liqLQI5jWSTmSxy4T20U/dQUgSoUU3+XYZnsd2rApm5ceittT3xj
9DM3LJ8ttJT6jYFS46zrbUYArw3xujMlS8UkBEdLcVv4DEWpKvZYJJianWDLGqN2
ZgAbCj+qiLhmSWqsSxftaMaqUTE3SAqNZJ8TSH+j7oVigP5Wl3kAdKw4zzKkPRks
Fhv2sbU6tJJDjEbaI2BQSjepVBJgvusCxEUZQGlLvo4U5y0W9EKu5oXLX1jGNyFU
lKcuz6/F
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:39:29 2025 by rpki-client