Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/nnxeUU87S1Fex4eT1VyslsBsqEs.roa
File: nnxeUU87S1Fex4eT1VyslsBsqEs.roa (raw, json)
Hash identifier: reRLOJZlJItgnmYvk5ziSo/wJ6dbsJIWZ7vz95Z6+9Q=
Subject key identifier: 9E:7C:5E:51:4F:3B:4B:51:5E:C7:87:93:D5:5C:AC:96:C0:6C:A8:4B
Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial: 0194258FC297801589DC43CB59B306CD1BAD
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/nnxeUU87S1Fex4eT1VyslsBsqEs.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 145.46.128.0/18 maxlen: 18
145.46.191.0/24 maxlen: 24
145.46.192.0/18 maxlen: 18
145.46.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c2:97:80:15:89:dc:43:cb:59:b3:06:cd:1b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e7c5e514f3b4b515ec78793d55cac96c06ca84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:50:d6:ce:e4:97:b8:43:e6:a6:13:45:07:
eb:7e:a7:de:b0:de:36:29:01:27:ae:22:91:a8:20:
51:09:d0:b9:7b:04:39:5f:b5:a6:6c:96:d9:64:f3:
fa:1d:ef:a8:e2:a4:3a:6d:2c:b4:be:90:1e:d2:47:
30:d5:4f:47:2d:8d:ba:10:d3:7d:26:78:0c:46:e0:
3b:43:57:15:0d:aa:25:c3:d1:87:3c:30:79:a5:18:
63:38:ae:90:86:68:09:7c:75:12:b4:82:71:a2:1a:
3c:69:32:53:1a:cc:ef:25:6b:be:e9:1d:8b:67:bb:
4f:59:3c:72:22:3c:6c:94:ce:e0:6d:fa:c1:35:aa:
54:79:94:ff:d3:8d:3f:c3:19:92:7c:b4:e5:16:2a:
1e:c3:b0:89:98:6a:a8:17:90:7d:82:73:c7:65:f2:
24:4f:72:30:df:9f:98:d0:04:77:02:d9:20:d5:7a:
2e:47:62:c3:b9:a6:38:3f:d4:05:35:28:e3:de:fc:
9d:8e:eb:0e:18:4b:7b:29:2b:77:a5:7f:ca:3e:a0:
25:00:a8:b9:b8:6c:cb:d8:eb:11:8b:1f:74:9f:9b:
50:83:ae:d1:d7:ad:13:1a:5b:49:cf:d2:0d:a3:ae:
c6:ea:48:42:1e:f9:34:f6:13:b5:f5:d6:69:95:8c:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7C:5E:51:4F:3B:4B:51:5E:C7:87:93:D5:5C:AC:96:C0:6C:A8:4B
X509v3 Authority Key Identifier:
keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/nnxeUU87S1Fex4eT1VyslsBsqEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.46.128.0/17
Signature Algorithm: sha256WithRSAEncryption
95:1f:20:1f:1e:15:c1:ea:70:18:8b:74:cb:58:96:f6:b4:24:
ca:07:e9:5a:cc:11:56:54:3b:d2:38:ac:38:26:9b:c0:d2:d4:
9d:13:bf:52:68:5f:00:10:b6:50:7a:18:72:4a:42:f8:1a:62:
06:23:bd:22:e8:e5:23:ba:d5:00:12:f4:ed:e0:18:0a:eb:c6:
31:64:d0:df:48:10:39:60:f6:32:0c:2f:2b:6a:99:ee:3b:f1:
fd:f1:64:40:ff:1c:7c:ec:84:8b:16:04:8d:b4:ab:87:b7:86:
cc:1d:33:14:9c:a2:73:82:27:1a:ac:1c:41:6a:08:41:8c:71:
44:4e:80:af:bb:c3:40:dd:60:c9:dc:7e:3a:67:18:3e:05:77:
a3:bf:e0:41:ec:6d:00:cd:fe:74:1f:51:81:25:45:c0:ab:9b:
55:59:1d:7b:8e:38:87:54:d4:86:3f:b6:e0:8c:1b:d7:d6:24:
a0:46:83:27:be:53:a3:87:da:4a:86:6e:51:e7:8f:4f:d3:1a:
28:8d:17:9e:3e:34:2d:32:f4:1d:72:ed:c6:9d:83:11:53:15:
05:c2:62:fe:fd:6a:d5:31:ab:b5:d2:bb:1e:0e:58:7b:09:28:
38:8a:5a:08:e7:6c:c0:e4:e3:93:2a:40:13:a3:6a:16:7b:24:
77:b4:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:18 2025 by rpki-client