Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa
File: NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa (raw, json)
Hash identifier: a1KXZCaEoxN1UkOcv0YA7zkHr19aSLSv8QON/lo/20Y=
Subject key identifier: 34:2C:60:E2:20:E7:48:FA:3B:B0:D0:D9:A2:06:3A:10:04:35:AA:75
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 01942444CBDF5C6AE5D57C962776D0408AC3
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa
Signing time: Wed 01 Jan 2025 23:47:55 +0000
ROA not before: Wed 01 Jan 2025 23:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214254
IP address blocks: 194.116.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:cb:df:5c:6a:e5:d5:7c:96:27:76:d0:40:8a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=342c60e220e748fa3bb0d0d9a2063a100435aa75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:ae:aa:84:1c:39:04:cd:29:9c:ff:ea:0f:
06:ac:e7:23:ab:09:66:c9:16:b9:df:67:a8:6a:44:
14:41:4e:a7:58:03:4e:c4:86:33:24:12:86:2f:6a:
fc:b0:5f:65:f2:58:02:42:ea:13:8d:46:fc:95:46:
35:0b:0e:4e:5c:f4:24:c9:cf:b7:19:d8:bb:c4:9a:
dd:99:04:0d:ab:81:38:d6:75:93:97:9c:87:58:72:
eb:cf:61:4e:14:66:16:b1:6d:d6:22:22:95:03:be:
f3:f1:e9:bb:7d:86:61:22:89:2d:c0:77:d8:0e:e6:
d1:64:3b:3e:fe:b4:f3:01:41:fe:d0:b7:de:f8:cb:
dd:92:88:d4:83:98:90:cd:ee:d2:c8:bb:df:30:97:
96:9e:5e:18:12:66:c5:62:0a:e7:b6:d2:9d:4c:87:
e1:51:26:16:bf:c2:17:79:9e:17:68:58:d1:28:d5:
9b:7c:93:ac:8f:1f:c9:bb:9d:a6:45:bf:ed:7b:a1:
e1:09:40:7c:aa:1c:50:59:86:00:8a:93:0b:a3:58:
0f:33:04:eb:2f:87:87:b8:99:94:7b:ff:a6:cb:d5:
8c:f2:6e:d6:ba:78:d9:e5:3f:20:05:aa:5e:5b:f1:
02:5d:d1:22:3c:63:96:d4:50:cb:d4:94:0a:a4:15:
b2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2C:60:E2:20:E7:48:FA:3B:B0:D0:D9:A2:06:3A:10:04:35:AA:75
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.146.0/24
Signature Algorithm: sha256WithRSAEncryption
96:85:0a:9b:c9:91:54:97:ce:4d:82:8f:9b:53:28:ef:0a:a7:
9a:a1:b6:9e:bb:d4:77:b6:98:2d:a7:d7:7d:21:9e:bb:38:55:
97:69:fd:bb:08:42:04:ee:56:16:91:a3:6e:0e:8c:a1:fe:4c:
1e:cc:99:76:12:51:70:2d:90:22:38:86:76:a4:94:55:c4:3f:
15:21:ed:6f:c3:59:cc:4e:c5:54:af:6f:9d:3b:a4:f0:40:17:
73:d1:b5:3a:2d:24:04:bc:ca:88:a3:75:a9:4a:64:48:57:cc:
dc:40:6f:b1:87:7e:85:46:1d:15:0f:ca:db:df:08:f1:5c:f7:
21:8c:c5:97:a1:3c:c7:c7:d9:80:cd:57:1b:dd:5a:f8:21:df:
df:a8:d3:36:bc:fa:73:1e:21:11:40:4a:05:50:e5:8f:32:21:
84:a3:34:6e:e9:c8:f1:d0:79:79:92:00:3d:6d:24:25:64:8d:
83:1e:1c:ac:f1:90:d3:25:c8:d4:3d:cd:70:a7:16:6e:d2:a0:
de:25:3f:35:f5:69:11:62:52:4f:5b:ba:10:d6:94:10:f9:c0:
b9:bb:e5:3c:03:ca:97:99:db:a3:bb:e1:52:d3:bc:9f:6a:1d:
d7:09:83:25:38:03:6d:43:d2:c8:50:a7:20:fa:12:5a:a5:88:
ce:c9:e7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:08:21 2025 by rpki-client