Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/NcV6FUicb7tzgHNkD44r0AzpvW4.roa
File: NcV6FUicb7tzgHNkD44r0AzpvW4.roa (raw, json)
Hash identifier: X4xgXSAE5h+kEhpigEhqXGSpmwiIRymXfANPnyNfqXM=
Subject key identifier: 35:C5:7A:15:48:9C:6F:BB:73:80:73:64:0F:8E:2B:D0:0C:E9:BD:6E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A45AA5BD0D1B60400A7C55FC6D364
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/NcV6FUicb7tzgHNkD44r0AzpvW4.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60672
IP address blocks: 185.223.164.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:45:aa:5b:d0:d1:b6:04:00:a7:c5:5f:c6:d3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35c57a15489c6fbb738073640f8e2bd00ce9bd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:51:d7:16:55:c1:58:13:9e:d3:91:a4:11:
5b:e9:b6:12:4f:e7:8c:5a:f6:0c:d2:84:14:e6:0a:
93:50:d6:63:7c:e8:78:f3:01:47:1d:c2:14:fd:d2:
f8:9b:55:56:14:83:af:c1:bf:66:0a:60:1b:c7:47:
0f:20:f5:b0:18:15:4e:39:37:45:d4:4c:5e:2d:8f:
fb:ca:79:5c:d4:19:53:d2:1a:0b:5a:21:03:a8:5a:
1b:c6:57:b9:78:cf:0c:a9:07:23:c3:88:1f:2b:8c:
5a:5b:39:df:dd:42:d0:a7:14:99:4c:5e:be:b3:cf:
ba:3a:b7:3b:47:c8:33:1b:87:d2:57:f2:1b:63:38:
7b:a7:35:60:37:be:fd:98:43:61:24:be:b9:fd:a6:
45:b3:8c:5f:c4:2c:b0:79:a4:3b:40:89:1c:e6:af:
66:ac:b2:eb:76:c0:37:b0:df:bf:49:f8:62:96:8f:
df:c4:05:50:8b:cb:4d:cd:ef:8f:ea:b5:6b:ac:b6:
7d:e6:7c:79:f7:7b:d5:23:0a:49:7e:df:04:96:9f:
20:68:79:e3:71:82:96:1a:85:35:90:67:44:da:b4:
fa:f0:9a:d6:6d:25:50:83:b0:e9:df:16:0d:78:36:
36:8f:1c:9a:8e:f1:79:cc:c8:37:01:94:bb:74:ca:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C5:7A:15:48:9C:6F:BB:73:80:73:64:0F:8E:2B:D0:0C:E9:BD:6E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/NcV6FUicb7tzgHNkD44r0AzpvW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.164.0/24
Signature Algorithm: sha256WithRSAEncryption
32:17:5a:45:50:31:ba:84:41:20:99:82:9c:c7:b2:ba:5d:8f:
86:67:1f:5c:c0:d1:f7:2b:c5:d5:44:b0:af:ec:72:29:23:43:
ee:a3:b0:5d:80:b6:4e:45:7b:aa:af:36:2d:01:a1:21:ea:51:
71:b7:38:78:cd:f0:cf:cd:28:72:f8:ff:5e:fe:b2:81:63:6c:
5c:b6:1e:f8:29:b7:50:f8:f2:5e:1c:02:57:e2:1e:22:70:4e:
6e:e1:69:76:0c:ca:ed:76:1a:35:16:ae:f5:a4:a1:41:39:c3:
e8:22:54:b6:03:11:75:96:29:cf:85:91:26:20:8b:07:9d:6f:
b6:f9:15:ef:3b:02:e2:7d:b4:e4:ac:84:7b:10:9d:49:8c:ba:
fc:ef:93:20:41:f5:2f:9c:33:da:10:61:f7:3c:8c:4d:be:17:
8d:9f:a1:88:38:d6:23:42:56:50:9f:06:df:3f:39:89:60:e1:
a1:b5:59:c5:a6:85:ff:26:c2:e3:68:ee:54:4f:e1:17:12:ee:
f3:ca:07:25:aa:ec:a3:d9:15:0f:18:82:ab:02:9b:b3:86:93:
f7:f0:f5:ff:16:79:0f:8a:0f:12:63:56:00:14:ba:a2:4e:bc:
c5:28:b5:f2:3d:d7:ab:6b:2b:7c:3e:20:fa:53:98:85:38:b6:
74:bb:1c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:42:40 2025 by rpki-client