Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/NdVRxEIMNBunZfZP9qXNSfaySc4.roa
File: NdVRxEIMNBunZfZP9qXNSfaySc4.roa (raw, json)
Hash identifier: KRJlcuUveV33SEu3V+UuJaoqvZJ1ZgJGxVWpQ++tEBk=
Subject key identifier: 35:D5:51:C4:42:0C:34:1B:A7:65:F6:4F:F6:A5:CD:49:F6:B2:49:CE
Certificate issuer: /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Certificate serial: 01942068630BB42638B99B5F9846DDCCB0EA
Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/NdVRxEIMNBunZfZP9qXNSfaySc4.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31726
IP address blocks: 31.204.72.0/21 maxlen: 21
94.139.64.0/19 maxlen: 19
109.109.64.0/19 maxlen: 19
185.211.72.0/22 maxlen: 22
2a00:1680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:63:0b:b4:26:38:b9:9b:5f:98:46:dd:cc:b0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35d551c4420c341ba765f64ff6a5cd49f6b249ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:43:14:5e:46:62:c9:d7:fb:af:41:30:b9:
6d:ab:aa:02:35:4d:d7:8f:e3:94:14:3d:1e:67:6e:
28:f3:28:ba:5f:16:8f:13:e1:7c:04:05:41:02:f9:
b0:28:6b:63:bc:f5:4e:8d:5c:3c:83:f9:bf:c9:c4:
ec:31:a3:7e:86:c2:d2:a4:57:8d:a2:43:e9:b3:44:
55:5e:cf:2a:e7:0b:84:92:22:94:fd:65:4a:64:6d:
72:b2:1b:b1:19:a5:a6:62:a1:2d:09:08:c7:0e:ab:
de:42:f4:ad:9a:09:cb:d8:44:b6:9e:90:37:20:3d:
2e:f5:c6:78:a8:e3:e6:ec:01:3d:ad:be:c0:e8:fd:
b7:9d:18:7a:53:68:b8:61:69:b5:b3:29:41:9e:03:
e4:0c:24:a2:7b:c4:12:4f:23:8d:3b:61:4b:a7:f7:
72:85:8e:2a:9c:e7:0b:51:8d:57:60:1c:80:b6:5b:
17:af:e5:5b:fb:f0:9e:6e:af:c6:a9:e4:3b:c9:ce:
a0:46:4d:c0:ff:e7:98:51:e1:86:e3:2f:20:f2:d5:
ba:a3:b8:0a:2b:81:5c:65:12:f6:24:42:57:1c:56:
cf:2d:fe:4d:02:27:b4:22:f1:49:43:f5:92:a6:0e:
81:fe:1d:a7:81:47:37:43:14:72:f5:42:2f:9c:9f:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D5:51:C4:42:0C:34:1B:A7:65:F6:4F:F6:A5:CD:49:F6:B2:49:CE
X509v3 Authority Key Identifier:
keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/NdVRxEIMNBunZfZP9qXNSfaySc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.72.0/21
94.139.64.0/19
109.109.64.0/19
185.211.72.0/22
IPv6:
2a00:1680::/32
Signature Algorithm: sha256WithRSAEncryption
05:49:b6:65:d1:8d:5c:21:cd:ad:20:e9:b4:0a:47:ef:f8:c3:
8b:ec:81:0c:74:63:14:11:b2:33:3b:97:08:56:8d:67:ae:73:
a2:0a:40:63:5d:12:1b:13:7b:ff:99:70:62:7f:37:f9:f1:00:
68:83:0a:38:03:61:c7:02:c5:03:21:e7:fc:5c:fa:cc:85:4b:
79:31:aa:6e:e0:89:68:96:db:f1:1e:d5:ee:18:0d:ed:93:25:
03:ad:21:8b:7b:6e:55:d7:70:c3:8a:b2:77:f9:23:f7:68:10:
4a:25:4d:d6:4c:93:89:03:b5:62:1d:28:50:0d:cd:a2:fa:21:
9e:97:3b:e0:40:e4:8b:a6:0c:27:3b:25:87:5a:40:3b:df:11:
e1:ce:53:c0:16:19:68:2c:78:d2:0c:31:2d:89:83:5b:38:37:
da:d8:9a:e8:f5:74:f1:c5:24:52:dc:6b:d5:07:45:56:75:d2:
71:f5:22:5f:c1:3d:d0:5a:e0:72:b7:1f:65:1b:92:18:0f:0e:
c0:c5:e5:c1:1b:3f:3f:cf:23:6b:5a:18:d3:f9:fa:cf:cd:7d:
9f:07:db:61:9c:2c:53:af:ee:15:87:e4:66:1d:64:27:7f:44:
72:1e:20:b7:8e:40:d5:92:2f:57:7e:ac:ce:11:d2:68:6d:e2:
3e:3b:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:55:42 2025 by rpki-client