Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/NgTdB5AEPD4DAHaTIZRq0754ZYU.roa
File: NgTdB5AEPD4DAHaTIZRq0754ZYU.roa (raw, json)
Hash identifier: X0ljVmj2cD5On812FnYT4pXdeEcEXod3j6IYZXkhhSU=
Subject key identifier: 36:04:DD:07:90:04:3C:3E:03:00:76:93:21:94:6A:D3:BE:78:65:85
Certificate issuer: /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial: 01941F8C3706853DB80E8E2680C8B825149D
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/NgTdB5AEPD4DAHaTIZRq0754ZYU.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50570
IP address blocks: 195.191.152.0/24 maxlen: 24
195.191.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:37:06:85:3d:b8:0e:8e:26:80:c8:b8:25:14:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3604dd0790043c3e0300769321946ad3be786585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:01:0d:8d:06:9f:05:90:ec:c1:d4:36:36:
33:89:1b:78:44:ec:79:9a:ad:37:1a:97:b9:c8:1e:
b0:46:23:6d:e0:ea:d1:8d:8e:31:4c:94:05:8f:64:
a7:e7:b6:e7:72:ef:52:5f:84:c5:ce:2a:5e:34:66:
b5:3a:4b:fa:e7:4b:5e:bc:38:6f:af:3c:44:ae:78:
5f:57:5c:21:c5:ff:4e:b7:7c:04:f4:de:62:5d:72:
a5:79:7a:ec:94:c1:c6:f1:86:31:e1:ca:6e:5a:8f:
93:08:ab:39:cc:b6:d7:e8:59:36:16:c0:2d:93:3b:
c3:be:ac:f5:c7:53:44:39:a0:b7:2e:9c:88:1c:18:
ae:0e:d8:41:30:76:23:be:92:cf:cd:5b:1d:5a:1a:
15:e9:4c:16:36:cb:ce:6f:91:5d:d5:96:cf:da:1e:
64:12:78:22:76:6a:c9:84:14:95:6b:df:9a:f9:25:
a6:5e:52:5c:2e:37:f4:01:12:76:82:32:fe:3c:d4:
5c:cd:87:ac:52:10:6e:5c:52:d2:0a:fa:74:31:9b:
9e:8b:3c:68:88:a8:d4:d9:e7:e4:f4:f6:02:e4:fb:
0a:65:e8:b7:be:35:55:b6:4c:75:21:07:aa:c3:da:
d8:36:f2:ae:e5:df:39:90:e6:dc:e5:c8:a2:e2:a0:
3e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:04:DD:07:90:04:3C:3E:03:00:76:93:21:94:6A:D3:BE:78:65:85
X509v3 Authority Key Identifier:
keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/NgTdB5AEPD4DAHaTIZRq0754ZYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.152.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:50:7e:dc:42:40:47:85:a6:7a:af:11:3d:49:f4:59:46:2c:
3b:7b:19:24:09:d4:57:a9:76:e6:cc:95:96:79:e5:41:d5:d9:
62:45:62:a5:f5:ef:21:1d:5f:e2:9b:b4:65:ae:17:52:5b:93:
9d:22:af:7c:5d:d5:26:52:2e:d8:d4:1b:60:75:86:dc:61:c4:
91:50:3a:be:ad:10:b7:78:f4:7a:2b:92:e3:97:c2:20:b9:a9:
e7:0c:31:65:5a:e0:67:b3:c4:44:de:b2:aa:72:73:2f:02:01:
4a:ef:bb:76:f9:dc:8d:f4:ac:47:59:67:6f:33:45:67:a4:d2:
f0:60:88:6a:26:84:2a:26:0d:71:e4:6c:3c:f5:b9:b3:81:a9:
d4:24:47:50:49:76:3b:34:cf:13:8c:ce:a5:9c:64:25:ae:a3:
60:20:5c:70:08:af:19:a0:89:be:68:7c:23:af:64:a3:ac:24:
10:a7:88:f6:09:21:c2:d2:f4:58:09:9d:a7:fa:bd:c2:dc:88:
0a:ce:28:0d:aa:76:ae:37:54:fc:86:6a:4f:d9:c1:41:eb:33:
d2:1d:d5:fd:a7:51:12:d7:49:ab:92:f1:4e:55:66:9a:7a:5b:
c1:77:f0:e9:40:cc:86:28:d4:e8:94:77:70:9f:19:ed:be:d3:
96:f0:2e:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjDcGhT24Do4mgMi4JRSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOTI4OWEwMTVhZjQ0NDFmOGY5ZGY0YzhjNTVlOThiMjky
ODgxY2YwHhcNMjUwMTAxMDE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjA0ZGQwNzkwMDQzYzNlMDMwMDc2OTMyMTk0NmFkM2JlNzg2NTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpQBDY0GnwWQ7MHUNjYziRt4ROx5
mq03Gpe5yB6wRiNt4OrRjY4xTJQFj2Sn57bncu9SX4TFzipeNGa1Okv650tevDhv
rzxErnhfV1whxf9Ot3wE9N5iXXKleXrslMHG8YYx4cpuWo+TCKs5zLbX6Fk2FsAt
kzvDvqz1x1NEOaC3LpyIHBiuDthBMHYjvpLPzVsdWhoV6UwWNsvOb5Fd1ZbP2h5k
EngidmrJhBSVa9+a+SWmXlJcLjf0ARJ2gjL+PNRczYesUhBuXFLSCvp0MZueizxo
iKjU2efk9PYC5PsKZei3vjVVtkx1IQeqw9rYNvKu5d85kObc5cii4qA+qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDYE3QeQBDw+AwB2kyGUatO+eGWFMB8GA1UdIwQY
MBaAFB6SiaAVr0RB+PnfTIxV6YspKIHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBLSm9CV3ZSRUg0LWQ5TWpGWHBpeWtvZ2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yOTE0NjMtOTFjYy00NzA0LTk1Mjgt
Njk3OTRmMDUwMjc2LzEvTmdUZEI1QUVQRDREQUhhVElaUnEwNzU0WllVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yOTE0NjMtOTFjYy00NzA0LTk1MjgtNjk3OTRmMDUwMjc2
LzEvSHBLSm9CV3ZSRUg0LWQ5TWpGWHBpeWtvZ2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7+YMA0G
CSqGSIb3DQEBCwUAA4IBAQCKUH7cQkBHhaZ6rxE9SfRZRiw7exkkCdRXqXbmzJWW
eeVB1dliRWKl9e8hHV/im7RlrhdSW5OdIq98XdUmUi7Y1BtgdYbcYcSRUDq+rRC3
ePR6K5Ljl8IguannDDFlWuBns8RE3rKqcnMvAgFK77t2+dyN9KxHWWdvM0VnpNLw
YIhqJoQqJg1x5Gw89bmzganUJEdQSXY7NM8TjM6lnGQlrqNgIFxwCK8ZoIm+aHwj
r2SjrCQQp4j2CSHC0vRYCZ2n+r3C3IgKzigNqnauN1T8hmpP2cFB6zPSHdX9p1ES
10mrkvFOVWaaelvBd/DpQMyGKNTolHdwnxntvtOW8C4H
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:39 2025 by rpki-client