Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/NcymNU3Ex55jeE07rsjVQP17Yc4.roa
File: NcymNU3Ex55jeE07rsjVQP17Yc4.roa (raw, json)
Hash identifier: rqRVyPcE0vuZ2ea448N6H2EJDC40DdbDXkISgXkK53E=
Subject key identifier: 35:CC:A6:35:4D:C4:C7:9E:63:78:4D:3B:AE:C8:D5:40:FD:7B:61:CE
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 019423D6E4AEF10133999CE1A03E27880AE2
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/NcymNU3Ex55jeE07rsjVQP17Yc4.roa
Signing time: Wed 01 Jan 2025 21:47:53 +0000
ROA not before: Wed 01 Jan 2025 21:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16365
IP address blocks: 195.42.236.0/22 maxlen: 22
195.42.236.0/24 maxlen: 24
195.42.239.0/24 maxlen: 24
212.149.0.0/18 maxlen: 18
212.149.0.0/19 maxlen: 19
212.149.29.0/24 maxlen: 24
212.149.30.0/24 maxlen: 24
212.149.32.0/19 maxlen: 19
2a00:d580::/32 maxlen: 32
2a00:d580:4900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e4:ae:f1:01:33:99:9c:e1:a0:3e:27:88:0a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Jan 1 21:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35cca6354dc4c79e63784d3baec8d540fd7b61ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:39:97:97:2a:d8:09:c3:ad:84:1f:b5:1d:
3b:a6:8a:b3:a3:6e:16:53:c7:95:5c:e3:ca:2b:5a:
fe:ec:80:f7:2e:d2:c2:79:f0:52:84:9a:03:dd:6f:
36:45:26:72:c7:77:7d:d0:81:3c:34:ad:39:31:b2:
51:1d:39:a7:96:6c:b7:30:85:17:16:b2:a4:4d:4a:
15:6b:7f:8a:a6:fe:3c:4f:46:b9:05:1c:89:32:42:
24:97:e1:33:47:31:4d:d7:d8:60:1e:75:ad:33:07:
d9:e9:c8:8d:86:7b:65:3a:f7:15:34:50:8d:e8:c7:
fe:4a:cd:9e:12:89:5b:61:42:8f:2b:99:4b:57:98:
da:8c:05:a3:b9:f1:5e:6e:71:15:a2:81:41:a8:67:
67:30:68:1b:37:01:ee:12:f3:e5:f9:5f:4b:e2:ee:
4c:94:14:e6:38:03:88:7e:2b:f8:44:80:d8:3f:fc:
11:6e:ff:96:93:d7:27:e6:7c:fe:eb:3d:e2:a1:5a:
1f:35:fb:e8:5c:a5:ac:f5:92:03:ab:a6:cc:ae:7e:
98:e3:c9:06:7a:6e:21:61:19:a9:3f:45:12:f1:b5:
99:cd:58:fc:a1:8b:b7:71:3b:e0:a8:c9:32:e7:ce:
0f:a5:4a:e3:fa:26:54:14:52:03:73:70:1f:bf:a9:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CC:A6:35:4D:C4:C7:9E:63:78:4D:3B:AE:C8:D5:40:FD:7B:61:CE
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/NcymNU3Ex55jeE07rsjVQP17Yc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.236.0/22
212.149.0.0/18
IPv6:
2a00:d580::/32
Signature Algorithm: sha256WithRSAEncryption
61:3e:ae:7f:aa:ea:d2:df:4c:d4:9b:90:18:e2:c4:05:6e:45:
d9:36:4d:24:47:5f:d6:b7:fd:7a:c9:64:28:eb:28:7f:94:89:
79:e3:a1:ac:cf:c2:0f:72:17:4a:6a:9c:c4:7d:44:56:0c:2e:
e7:c6:58:af:3b:dd:6c:b0:c9:3e:03:6e:79:f4:40:37:44:62:
8b:cb:62:96:49:95:92:61:0b:33:16:9d:b3:70:cc:92:c7:13:
82:14:40:41:00:d4:18:76:25:e0:ee:96:11:bd:0a:2e:5e:97:
f3:f6:08:e3:eb:9c:41:5a:6d:7a:83:70:8d:33:6d:19:0e:1c:
9b:85:9c:70:50:e1:4c:ec:80:c1:9a:0a:ba:6c:14:ae:33:a8:
92:6b:83:93:2b:e2:6b:a6:fd:fa:d0:61:0a:06:24:c8:68:8f:
3c:d6:9c:48:9a:09:ca:48:0f:67:fd:75:27:26:5d:6f:5c:b9:
c5:5e:63:6e:20:5b:66:38:09:58:a0:52:4e:b1:35:ed:d7:71:
4f:e8:a6:53:43:71:c7:91:c4:10:86:27:6d:9e:84:67:13:d7:
b2:79:ce:85:48:d9:e4:24:5f:16:e2:a6:4e:56:26:90:9d:7c:
dc:99:a3:12:07:3c:81:b1:69:b9:4f:37:cd:4d:9e:9c:f0:4c:
56:02:b7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:41:19 2025 by rpki-client