Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/NSXTzp-bcsK67axImvlm62j1gls.roa
File: NSXTzp-bcsK67axImvlm62j1gls.roa (raw, json)
Hash identifier: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=
Subject key identifier: 35:25:D3:CE:9F:9B:72:C2:BA:ED:AC:48:9A:F9:66:EB:68:F5:82:5B
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 019421B207318D22C8DB6A114D938A56A89A
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/NSXTzp-bcsK67axImvlm62j1gls.roa
Signing time: Wed 01 Jan 2025 11:48:22 +0000
ROA not before: Wed 01 Jan 2025 11:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15435
IP address blocks: 193.176.104.0/21 maxlen: 24
2001:67c:460::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:07:31:8d:22:c8:db:6a:11:4d:93:8a:56:a8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Jan 1 11:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3525d3ce9f9b72c2baedac489af966eb68f5825b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:c7:42:b6:df:a7:b7:d8:63:0b:10:66:99:
32:94:26:5f:7a:58:c7:91:32:f8:e8:20:7f:8c:b5:
e4:a1:bd:e4:dd:c9:06:54:3f:71:90:e5:94:b3:12:
24:d7:8b:ae:eb:dc:ed:5b:88:b7:c6:26:ed:bd:79:
af:72:45:04:e0:6b:74:e5:7d:bc:57:6a:bd:a7:43:
ae:ac:21:6d:c1:5a:50:54:ef:46:5d:01:a5:b3:5b:
b8:77:bb:c5:ca:b7:40:78:05:63:25:81:63:a8:a6:
b4:a2:c4:d2:98:67:b2:49:a4:f6:e6:38:42:00:4c:
b0:8f:cf:59:75:66:f4:f8:06:7e:e7:e7:92:39:ca:
18:3a:6b:88:8d:ae:09:8f:53:9e:bc:c9:20:da:ef:
38:a1:2f:53:69:d1:ba:79:26:86:d2:2e:9c:52:37:
8d:4c:70:61:7d:a9:90:e7:71:37:9c:8b:51:cf:71:
7c:54:f9:e4:73:57:fb:64:bb:de:11:64:9a:ae:81:
56:12:90:8a:f1:bb:e2:20:9a:0b:87:2b:c9:79:32:
32:05:6a:16:09:ae:29:f2:26:1a:e2:18:18:48:e5:
c9:b9:1a:71:b4:00:42:f6:c4:a6:17:69:0e:f9:ad:
e5:bc:4b:0f:82:7a:7b:7f:e3:79:c1:85:6a:78:72:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:25:D3:CE:9F:9B:72:C2:BA:ED:AC:48:9A:F9:66:EB:68:F5:82:5B
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/NSXTzp-bcsK67axImvlm62j1gls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.104.0/21
IPv6:
2001:67c:460::/48
Signature Algorithm: sha256WithRSAEncryption
01:3c:cc:b4:d0:d6:07:3e:58:ab:c4:69:50:3b:6e:a5:39:72:
2b:d2:0f:1d:6f:8a:da:06:49:03:8b:cf:88:b1:32:de:10:8f:
a5:b9:09:46:e9:59:4e:66:cf:14:0c:a3:30:70:74:70:c8:ac:
ad:c0:54:5e:57:9c:89:50:a2:d3:f2:dc:41:97:ca:84:7d:c2:
6b:2f:9d:1a:f6:bd:08:6c:54:71:0b:00:62:7c:04:c2:44:fe:
cb:26:07:9b:6f:ed:ac:e2:c0:f3:3a:8e:38:1f:f0:76:2a:19:
55:cd:db:3a:43:ff:4b:ce:a0:25:d4:f4:27:9d:2d:41:cd:95:
c9:13:39:be:ed:62:89:83:f2:dd:f5:b6:fc:1c:41:4d:a9:59:
0d:26:e8:76:d2:8f:22:5d:08:14:69:9e:cd:2a:2a:6e:cf:80:
69:46:b3:b2:93:a4:0d:b8:ce:06:c9:a5:ec:3d:23:34:38:84:
9a:d9:25:51:f1:c0:58:97:71:92:8c:67:f0:8c:51:72:65:e8:
f6:43:75:f8:83:96:cd:0e:b7:27:ed:33:91:3d:e3:6c:7b:34:
a6:69:9e:76:71:1e:c5:79:8b:8d:52:b1:18:da:cd:50:ec:6c:
96:a6:d2:70:40:d2:b4:d6:4d:cf:fa:3a:01:c7:32:65:c5:02:
a0:a8:cb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:48:06 2025 by rpki-client