Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/NMjO7luh_VLlkiRN5_rJM9McdZU.roa
File: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (raw, json)
Hash identifier: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=
Subject key identifier: 34:C8:CE:EE:5B:A1:FD:52:E5:92:24:4D:E7:FA:C9:33:D3:1C:75:95
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019427B5F5E384ECE0E7C711E2D260A468D1
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/NMjO7luh_VLlkiRN5_rJM9McdZU.roa
Signing time: Thu 02 Jan 2025 15:50:23 +0000
ROA not before: Thu 02 Jan 2025 15:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54339
IP address blocks: 14.102.8.0/24 maxlen: 24
91.200.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f5:e3:84:ec:e0:e7:c7:11:e2:d2:60:a4:68:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Jan 2 15:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34c8ceee5ba1fd52e592244de7fac933d31c7595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:61:e0:91:fe:b9:3f:f0:40:3e:f1:1f:c0:
42:8e:12:f2:ce:ea:ad:e3:c6:a0:08:7d:f6:11:43:
ab:11:9f:58:b6:66:17:ca:fd:83:2f:b9:c1:1c:d0:
8b:7d:bd:1f:66:b5:45:35:c4:c2:0c:ff:3a:35:8a:
dc:75:50:e5:4b:2a:ef:18:47:fc:71:fa:52:f1:af:
f7:d2:73:b4:92:e1:f5:05:ff:b5:d6:b7:0f:24:f0:
ca:e4:a2:9c:d6:66:45:e7:95:4c:da:1f:b1:19:d1:
b2:4b:40:b4:3f:ae:16:80:34:f9:1b:0d:65:fe:c0:
ce:35:11:2f:7f:c5:0a:43:17:b2:a9:f0:94:1b:bd:
46:ea:48:4a:db:04:23:e7:c2:11:91:bd:0f:b9:6a:
ca:2c:a5:c4:c0:a7:0c:26:fa:b0:74:53:14:c0:95:
aa:6c:f6:c2:18:5d:e2:e6:e8:7c:10:78:c7:0a:c1:
4a:0d:33:5e:db:34:15:0d:e6:2e:55:7f:11:4b:00:
0c:f1:e7:0a:17:e2:32:49:98:7c:ac:b1:a1:9d:cc:
d3:7c:0e:14:f5:cc:94:eb:3e:d6:cf:97:bc:ba:d0:
6c:7a:2e:75:95:8f:4f:9b:f1:fc:8f:72:a2:84:31:
b8:4f:47:a7:36:a4:b0:6a:1b:92:2b:b6:a7:61:df:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C8:CE:EE:5B:A1:FD:52:E5:92:24:4D:E7:FA:C9:33:D3:1C:75:95
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/NMjO7luh_VLlkiRN5_rJM9McdZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.8.0/24
91.200.255.0/24
Signature Algorithm: sha256WithRSAEncryption
22:23:08:fb:72:2e:29:67:75:65:b9:89:96:86:93:ea:99:f5:
b6:51:c7:27:7a:2b:7d:28:70:a1:20:c2:77:4b:8b:3c:d7:98:
58:2a:4e:8b:dc:79:e2:00:cd:d7:79:2c:e6:13:63:95:ad:ad:
2c:a9:30:c8:1d:da:88:54:66:7d:4f:e4:aa:f3:63:74:72:86:
a9:42:4b:3f:f0:31:ac:96:55:90:01:ad:c5:31:a5:5f:1f:7d:
44:59:60:7a:af:70:26:c5:e1:1a:91:20:18:51:27:d1:0f:ae:
c2:df:d5:8d:dd:3d:b7:8d:50:76:a5:8b:7c:ce:32:45:a4:5c:
a7:66:61:d9:35:4e:88:0c:9b:ad:bb:be:e4:d7:ea:cf:71:de:
00:03:bc:d9:46:49:f8:c4:02:cc:d3:f0:d8:0a:95:9f:34:01:
18:01:ae:94:35:c3:53:92:00:9e:4b:82:4e:82:bb:0f:fe:5b:
1f:5a:1a:cd:8e:59:c8:3a:c0:9e:12:41:ee:eb:93:fb:47:1b:
64:d3:0a:55:26:09:60:e6:4a:62:51:16:1b:e5:c7:e8:9e:29:
a1:0e:92:fb:ee:73:11:a9:88:61:7f:8e:3a:92:2e:c6:ae:72:
51:d0:99:c5:83:7a:8a:be:42:a8:a1:43:d4:53:c6:11:b8:24:
38:af:0d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:01:54 2025 by rpki-client