Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NCZwZYpj51eKNhxKODh9y6QeCZ0.roa
File: NCZwZYpj51eKNhxKODh9y6QeCZ0.roa (raw, json)
Hash identifier: OO86GG/rxs0rqrYrpL97bDnvrqpEuhJuxKh0iVqLKFk=
Subject key identifier: 34:26:70:65:8A:63:E7:57:8A:36:1C:4A:38:38:7D:CB:A4:1E:09:9D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019651C1FFECBEF5C19F4092748F29EF769C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NCZwZYpj51eKNhxKODh9y6QeCZ0.roa
Signing time: Sun 20 Apr 2025 05:53:10 +0000
ROA not before: Sun 20 Apr 2025 05:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213896
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.100.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c1:ff:ec:be:f5:c1:9f:40:92:74:8f:29:ef:76:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 20 05:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=342670658a63e7578a361c4a38387dcba41e099d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:c7:34:86:ff:de:7e:25:8d:c3:90:81:25:
c9:7f:a3:9a:ad:82:8b:14:a2:b6:7a:2e:19:ee:0e:
05:02:43:a9:f4:d3:75:0f:08:55:9a:ad:c3:34:f2:
84:ea:b7:cd:36:44:a1:ba:7b:61:b4:d3:ed:1d:c3:
93:b8:38:11:b0:d3:bc:a8:65:ee:ed:3f:c5:2a:07:
b8:74:4d:08:45:cc:51:29:79:97:7e:e1:5a:86:dd:
5b:17:e3:2a:cd:50:47:92:b6:ce:49:e5:63:8e:69:
5a:c1:21:e4:58:9f:1c:e6:f9:2d:68:7a:4f:b2:c0:
80:ce:92:b2:0a:3f:6d:f8:b3:c3:3a:a3:7e:49:42:
04:84:48:92:53:dc:00:bd:90:f1:e9:46:24:ef:b3:
5d:18:5c:38:83:77:d2:12:b7:1e:49:41:74:e3:4a:
c2:68:3d:98:0f:27:b2:b7:47:7c:01:7a:7a:5b:a8:
a5:bc:34:50:2f:70:d8:d3:ed:b3:c0:93:8c:e3:6a:
4c:a0:c5:d2:2c:73:2d:f8:86:01:4c:b1:5c:88:09:
6e:fc:f5:91:b9:72:df:07:ac:b4:bf:f7:1d:0c:0e:
43:e7:47:42:57:f4:98:89:f6:ca:61:7d:b1:fa:98:
fa:01:83:bb:73:83:bd:74:47:ad:0f:c0:ae:ce:97:
8d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:26:70:65:8A:63:E7:57:8A:36:1C:4A:38:38:7D:CB:A4:1E:09:9D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NCZwZYpj51eKNhxKODh9y6QeCZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.59.0/24
84.32.100.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ee:4c:99:67:e6:14:2c:90:d6:9b:00:68:c3:b5:21:1b:cd:
c4:3f:ba:fe:89:a4:3a:03:68:40:9f:ed:0c:89:f2:98:3f:04:
b4:de:48:47:6c:97:b7:7b:62:02:82:86:46:0c:59:2d:7e:6a:
37:63:75:be:2a:09:5d:14:7b:14:fa:30:a9:e2:0d:a4:2f:71:
b8:5f:76:29:bd:9f:50:da:cb:99:8a:c8:90:c2:9f:36:2a:a6:
7d:8e:ac:f5:1b:31:aa:a0:75:c7:da:99:48:0c:ea:68:7a:81:
63:e0:05:78:8d:91:60:85:8f:e5:67:44:1b:a1:8c:36:5f:e6:
dd:41:3f:1b:99:c1:b0:11:ca:19:e6:9d:bd:98:81:0a:f9:2e:
36:c1:79:d7:7f:24:07:07:01:2b:1a:49:3a:8c:68:80:2b:e1:
79:e5:84:8f:d1:6f:8f:16:02:24:ba:6d:1e:02:18:6b:9b:81:
9d:99:ba:75:2f:92:2c:d6:f7:38:8e:28:d0:ba:f6:48:2d:b4:
06:52:3d:1c:38:8c:88:d4:98:d2:02:da:43:84:ae:a0:ab:bb:
1a:7b:9b:2c:1e:9c:e8:99:a1:3c:66:e1:8b:bf:fa:0c:c7:61:
24:5a:df:e7:01:71:34:30:a2:28:62:80:39:01:6c:17:be:61:
98:74:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:09:14 2025 by rpki-client