Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/NCuZRLXUSqeQd0-K94k8sdWt8i0.roa
File: NCuZRLXUSqeQd0-K94k8sdWt8i0.roa (raw, json)
Hash identifier: 9KnkKk3vCESK/jiryTSBEmdsg4CHDO3QXfIZjaFh0FM=
Subject key identifier: 34:2B:99:44:B5:D4:4A:A7:90:77:4F:8A:F7:89:3C:B1:D5:AD:F2:2D
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0194266B5D19FBECB21B13FF49C518EB4EEB
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/NCuZRLXUSqeQd0-K94k8sdWt8i0.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272962
IP address blocks: 45.153.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5d:19:fb:ec:b2:1b:13:ff:49:c5:18:eb:4e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=342b9944b5d44aa790774f8af7893cb1d5adf22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:53:60:3b:f2:81:c5:76:a9:5f:2f:6a:24:
4e:1a:55:30:12:47:ef:20:e5:37:1f:3e:fa:18:b4:
47:eb:57:9e:38:53:f2:ab:90:3e:9a:50:0f:cc:e9:
e4:0a:eb:30:4f:a3:d5:83:b3:fe:af:14:c9:51:c5:
fd:83:aa:24:eb:45:34:23:26:1e:22:ce:d7:ff:b4:
de:60:18:ec:88:7f:a0:13:e3:16:9d:6a:02:d3:c1:
30:5c:e3:d7:66:2d:f5:b0:a4:85:0f:29:8e:23:a9:
7e:3b:ff:44:2e:a3:d0:ad:1a:2f:f2:af:02:88:46:
f9:bc:0d:2b:86:7b:a6:21:9f:ec:00:49:10:25:f5:
d3:f2:87:e4:10:9c:ad:51:40:86:31:d4:53:8d:ca:
cc:b3:3b:2a:46:42:d5:44:84:81:45:ab:ff:09:22:
17:b0:57:79:f7:72:74:f6:0d:30:21:9d:c1:0f:03:
b0:87:89:74:00:76:27:f9:5c:81:7c:54:f3:99:04:
b5:14:5a:28:0c:5c:d6:f0:fa:d7:4c:22:b4:43:28:
ee:33:7f:f1:77:fe:9a:1a:ff:7a:8f:94:0b:6a:67:
a0:59:1b:9c:ed:22:fd:c0:0f:89:8d:5f:df:cc:3a:
b0:7b:77:bb:1b:44:cb:c0:5a:8b:c7:4c:7a:68:33:
b0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2B:99:44:B5:D4:4A:A7:90:77:4F:8A:F7:89:3C:B1:D5:AD:F2:2D
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/NCuZRLXUSqeQd0-K94k8sdWt8i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0c:f6:48:0d:30:13:99:d0:5e:f9:f9:db:68:74:e0:78:4f:
af:88:c4:40:df:cc:94:f9:d7:09:33:30:1c:c5:79:ab:06:8b:
76:ae:cc:63:c9:3a:d0:28:da:9a:44:93:3b:e1:75:07:c5:cf:
3e:35:45:e3:e6:29:b8:7c:e7:59:93:77:26:d7:c2:64:14:84:
6c:96:bd:ad:dd:32:6f:16:88:6d:a4:ea:41:fa:89:c7:b3:86:
e2:02:3e:0a:fe:92:02:1f:3b:dd:fc:65:7d:97:f9:2d:c8:eb:
48:c8:d6:fe:a1:30:2b:03:18:7b:b7:d4:3a:d1:23:46:92:09:
1b:53:b4:ea:60:c8:57:42:8b:0d:c1:b7:ab:3c:fd:ed:12:59:
9c:3e:b0:85:01:d3:42:d7:fc:be:37:fb:a0:e5:a1:07:a0:4e:
8a:ff:2a:2e:cb:19:4f:3a:6b:82:73:6c:63:84:a7:89:3f:d2:
dc:99:bb:9d:18:de:61:e2:82:d6:04:8d:6c:97:d8:66:3f:53:
f3:8a:da:22:43:54:33:23:5a:2e:d0:69:08:a1:7c:8b:24:c2:
c5:ba:f5:f6:cf:0c:a5:22:5e:38:0d:dc:b4:fe:60:a0:68:a0:
0a:fc:ea:c3:d9:87:80:fb:c4:99:0f:93:82:d7:41:4d:84:a8:
8d:83:6e:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma10Z++yyGxP/ScUY607rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz
NmUwNTUwHhcNMjUwMTAyMDk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDJiOTk0NGI1ZDQ0YWE3OTA3NzRmOGFmNzg5M2NiMWQ1YWRmMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSNTYDvygcV2qV8vaiROGlUwEkfv
IOU3Hz76GLRH61eeOFPyq5A+mlAPzOnkCuswT6PVg7P+rxTJUcX9g6ok60U0IyYe
Is7X/7TeYBjsiH+gE+MWnWoC08EwXOPXZi31sKSFDymOI6l+O/9ELqPQrRov8q8C
iEb5vA0rhnumIZ/sAEkQJfXT8ofkEJytUUCGMdRTjcrMszsqRkLVRISBRav/CSIX
sFd593J09g0wIZ3BDwOwh4l0AHYn+VyBfFTzmQS1FFooDFzW8PrXTCK0QyjuM3/x
d/6aGv96j5QLamegWRuc7SL9wA+JjV/fzDqwe3e7G0TLwFqLx0x6aDOwjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDQrmUS11EqnkHdPiveJPLHVrfItMB8GA1UdIwQY
MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt
ZDM3ZGY2MzRhOTI5LzEvTkN1WlJMWFVTcWVRZDAtSzk0azhzZFd0OGkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5
LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZmlMA0G
CSqGSIb3DQEBCwUAA4IBAQA7DPZIDTATmdBe+fnbaHTgeE+viMRA38yU+dcJMzAc
xXmrBot2rsxjyTrQKNqaRJM74XUHxc8+NUXj5im4fOdZk3cm18JkFIRslr2t3TJv
FohtpOpB+onHs4biAj4K/pICHzvd/GV9l/ktyOtIyNb+oTArAxh7t9Q60SNGkgkb
U7TqYMhXQosNwberPP3tElmcPrCFAdNC1/y+N/ug5aEHoE6K/youyxlPOmuCc2xj
hKeJP9LcmbudGN5h4oLWBI1sl9hmP1PzitoiQ1QzI1ou0GkIoXyLJMLFuvX2zwyl
Il44Ddy0/mCgaKAK/OrD2YeA+8SZD5OC10FNhKiNg252
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:41:31 2025 by rpki-client