Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/ngjx-TB8ucax_4bLzcbBQjEnd4s.roa
File: ngjx-TB8ucax_4bLzcbBQjEnd4s.roa (raw, json)
Hash identifier: wWZqraR65yYRHuKrbldK9gSPA1D5WeOPM/TT1ybqX/k=
Subject key identifier: 9E:08:F1:F9:30:7C:B9:C6:B1:FF:86:CB:CD:C6:C1:42:31:27:77:8B
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 019427B5B2FB1DAF017EEEC13A3CA9CFA78F
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/ngjx-TB8ucax_4bLzcbBQjEnd4s.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39891
IP address blocks: 185.139.8.0/24 maxlen: 24
185.139.9.0/24 maxlen: 24
185.139.10.0/24 maxlen: 24
185.139.11.0/24 maxlen: 24
212.215.129.0/24 maxlen: 24
212.215.208.0/22 maxlen: 22
212.215.212.0/22 maxlen: 22
212.215.216.0/22 maxlen: 22
212.215.232.0/22 maxlen: 22
212.215.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b2:fb:1d:af:01:7e:ee:c1:3a:3c:a9:cf:a7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e08f1f9307cb9c6b1ff86cbcdc6c1423127778b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:0b:23:0d:96:65:42:a1:01:0d:c3:5a:6f:
a6:be:9d:ce:89:8b:8d:9f:87:94:7f:6c:ca:36:17:
d8:f1:4b:e4:b8:e3:b3:5a:46:32:76:6b:fa:44:3b:
07:5e:a2:fe:fb:62:fc:c4:9e:f4:a7:41:df:09:03:
19:41:46:09:3d:ac:cf:b9:d2:cc:d2:97:54:cb:21:
4b:97:38:74:43:c9:ab:16:ed:e4:60:8a:25:65:b7:
e7:b6:e0:d6:e3:8c:33:ae:43:40:56:58:26:ba:fa:
30:9c:ce:b5:6a:58:c5:ee:41:2d:db:ce:ae:21:26:
32:d7:74:7d:be:37:d0:50:b2:83:96:44:e9:c7:9b:
d8:c4:0d:25:bc:73:0a:b4:15:88:00:2a:7b:15:a2:
6d:7c:86:33:0a:27:dc:c5:4d:ec:eb:2a:f3:e0:cd:
29:b2:35:e5:e8:28:e2:44:15:e2:34:3d:90:37:ad:
b8:f6:8c:04:7f:56:24:50:32:b4:62:d7:76:38:1d:
d0:d8:25:2d:31:c8:dd:c7:44:53:d5:44:49:1c:c4:
bf:e4:86:33:64:d3:8e:45:c2:cd:a6:d6:86:f2:f3:
58:56:18:f7:de:4b:f1:36:3f:52:7e:35:af:17:79:
bc:36:e7:54:16:11:56:06:cd:8e:b2:45:48:63:61:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:08:F1:F9:30:7C:B9:C6:B1:FF:86:CB:CD:C6:C1:42:31:27:77:8B
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/ngjx-TB8ucax_4bLzcbBQjEnd4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.8.0/22
212.215.129.0/24
212.215.208.0-212.215.219.255
212.215.232.0/22
212.215.238.0/24
Signature Algorithm: sha256WithRSAEncryption
97:25:49:4c:f7:d1:a2:da:9d:12:f2:38:72:47:cb:06:be:df:
11:4b:a1:a8:a8:f6:b1:0d:4f:e9:42:b1:b7:e8:91:27:c5:55:
a2:cd:c3:dc:2d:b7:22:f7:a8:5a:a6:8a:25:2f:f4:e0:3f:2b:
98:76:19:d1:45:6f:75:ba:0e:9b:03:ac:c9:96:b6:7c:84:db:
6e:1e:91:10:14:0c:c5:2c:9f:2a:76:42:cc:c7:f3:f1:b3:c2:
03:cd:e8:ab:ca:d0:81:5a:bc:96:9b:26:6f:cc:66:83:3f:cd:
82:c9:97:79:9f:df:00:60:43:2b:49:c1:66:a4:a1:e4:ba:9f:
aa:43:32:8a:a5:b5:6b:72:27:5d:a8:6e:f6:2b:aa:4e:5d:42:
38:04:32:37:71:86:d4:de:30:42:ce:f1:1d:4a:62:ba:26:41:
39:f5:0b:ff:a8:33:53:5a:5c:96:99:a3:96:51:5d:f2:87:09:
9d:f8:61:3a:8e:e4:82:7b:bb:c8:18:3a:51:04:b7:dc:ea:d7:
e3:29:8c:8e:f9:9e:fc:20:70:34:a5:15:b6:4c:fc:c7:81:3b:
46:15:19:39:f2:5c:1c:7c:45:54:f9:cb:23:21:4d:b3:45:d4:
bf:13:b7:77:87:0f:2d:84:cb:5d:0f:3d:bc:08:e6:f2:a9:c2:
c2:b0:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:46:11 2025 by rpki-client