Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/NKs11rmttdxb4erj66XSi3ux60c.roa
File: NKs11rmttdxb4erj66XSi3ux60c.roa (raw, json)
Hash identifier: g/w9HbLFeSyX3EjhAjkTnAEYRLxJvbXYid4txxbFY6E=
Subject key identifier: 34:AB:35:D6:B9:AD:B5:DC:5B:E1:EA:E3:EB:A5:D2:8B:7B:B1:EB:47
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 019425219A88AD499BD84FDC6EE8E4692C2E
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/NKs11rmttdxb4erj66XSi3ux60c.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39128
IP address blocks: 195.114.96.0/23 maxlen: 24
2001:67c:2974::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9a:88:ad:49:9b:d8:4f:dc:6e:e8:e4:69:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34ab35d6b9adb5dc5be1eae3eba5d28b7bb1eb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:e3:d1:dc:20:06:bf:9b:d5:72:c9:16:b8:
d2:a4:b1:26:42:83:09:2c:4f:35:7b:f5:b3:88:df:
f1:8c:25:d2:a4:d4:c5:b9:92:2f:d3:b5:29:cf:2d:
1d:b3:89:34:2e:af:2b:4d:a1:71:a1:e8:a2:6f:49:
41:1e:7c:da:b5:26:df:6c:d5:07:9f:ca:1d:5c:0f:
e5:d4:15:74:95:76:fd:aa:4c:0e:fb:84:08:f7:39:
dd:1e:6f:dd:5d:e5:cc:5d:3c:1a:53:4f:19:15:a3:
d1:64:53:7a:23:79:44:1b:2a:98:44:97:b6:35:2f:
62:d1:ab:9a:42:91:4e:1c:16:15:b1:1c:55:6f:62:
58:1e:44:be:6d:74:5f:75:79:01:48:84:79:f0:5d:
cc:1a:53:9c:49:0f:67:cb:dc:dc:67:c7:14:57:a4:
ea:33:82:a3:fd:37:83:b6:52:78:33:1a:37:6b:49:
31:4f:d7:a3:fb:e9:1d:97:ed:0a:91:4f:87:ec:cc:
51:6d:c2:45:2d:05:41:ce:cb:a1:16:bd:e7:43:f3:
a0:a0:ee:54:99:a8:be:ef:6d:f3:48:ac:ab:ec:07:
09:a4:43:21:31:60:57:fd:73:4a:78:7d:fc:85:21:
b3:93:36:93:8a:96:91:d4:0e:d4:42:87:29:8c:5f:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AB:35:D6:B9:AD:B5:DC:5B:E1:EA:E3:EB:A5:D2:8B:7B:B1:EB:47
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/NKs11rmttdxb4erj66XSi3ux60c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.96.0/23
IPv6:
2001:67c:2974::/48
Signature Algorithm: sha256WithRSAEncryption
6c:aa:58:21:ec:3f:73:5a:93:55:51:4d:d1:6f:88:f9:50:b2:
18:e2:b7:d1:e5:2b:e8:4a:b7:ad:0c:7e:04:7d:9c:78:96:d4:
84:b5:21:e5:a7:48:6e:56:e0:d3:5f:bc:cb:ce:97:44:1c:53:
93:2b:6a:98:70:36:2a:56:41:f4:5d:48:58:e2:49:f9:5c:d8:
55:7a:27:3b:34:7e:67:f1:f1:63:aa:5c:73:e1:0c:f2:58:34:
39:d1:b8:3a:db:e7:00:e8:f3:1c:bb:27:cb:f5:33:ae:1b:e0:
24:52:f2:a5:6b:ba:9d:5e:f2:dd:20:a9:ca:b2:a3:bf:3e:f7:
bc:cb:81:d3:98:d1:2d:a7:51:69:f1:86:09:ea:b9:31:b3:c4:
61:f3:9c:85:76:f3:6f:09:54:2a:00:bc:63:d8:69:c9:ca:ab:
e5:81:6e:18:0a:23:ff:47:f4:b5:ef:75:61:04:df:30:6a:56:
cf:75:51:f1:b5:09:b7:05:e5:81:3b:52:27:eb:15:f9:48:e2:
b1:0d:3b:a5:5a:42:ee:69:67:08:a5:c6:6c:43:91:03:8d:e0:
b6:06:ec:ff:f6:3d:21:bc:6b:1f:49:fa:2d:07:54:99:3a:77:
73:8b:e3:ff:87:79:aa:e7:21:81:38:98:5b:53:8d:45:8b:cf:
8a:e8:fd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:42 2025 by rpki-client