Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/NKKlHkTww-fnvelvsdf5Lw9wAXU.roa
File: NKKlHkTww-fnvelvsdf5Lw9wAXU.roa (raw, json)
Hash identifier: ItEX20szCrjxzF0ipVwQO6UMbcEQ+X7EsyOoR3LrKvE=
Subject key identifier: 34:A2:A5:1E:44:F0:C3:E7:E7:BD:E9:6F:B1:D7:F9:2F:0F:70:01:75
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019662FC179FD2AECE52FE532C9DFEA71C61
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/NKKlHkTww-fnvelvsdf5Lw9wAXU.roa
Signing time: Wed 23 Apr 2025 14:10:10 +0000
ROA not before: Wed 23 Apr 2025 14:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 185.113.8.0/24 maxlen: 24
213.111.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:fc:17:9f:d2:ae:ce:52:fe:53:2c:9d:fe:a7:1c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Apr 23 14:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34a2a51e44f0c3e7e7bde96fb1d7f92f0f700175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:a2:3e:2b:6a:d2:b1:00:37:c9:75:24:d1:
dc:df:64:a8:ca:b1:85:06:cd:26:0a:ff:68:af:f8:
32:96:d5:ed:0f:f6:5d:22:6c:fa:24:2b:04:c0:c6:
f6:b0:6b:4f:3d:bb:f1:a1:68:fd:f4:3f:1e:09:a3:
02:58:19:10:2c:e0:70:4a:60:40:21:f0:b2:f6:80:
f3:5c:ac:69:8f:0a:a1:e8:99:20:47:aa:2c:43:7a:
c7:cc:78:83:77:f3:43:6b:ac:bd:3f:28:55:ca:4c:
cd:ff:dc:8e:39:5c:e2:62:70:34:cf:65:1c:30:af:
b3:38:1a:b2:b6:92:bd:bd:a0:f5:4e:71:31:83:31:
30:57:70:40:06:da:7d:d9:67:6d:2f:1f:0e:5a:15:
dc:5a:92:83:56:ec:48:5d:78:f8:b5:b5:88:cd:bb:
b8:f7:db:86:a7:d3:13:01:fd:26:a0:04:d0:35:69:
d9:6d:6e:66:80:e4:f0:81:c0:19:f2:99:0b:c5:41:
07:20:a2:6f:fa:72:ab:ec:f2:cf:36:92:0b:f3:ca:
2b:9d:8e:1d:16:4e:c3:d2:64:b7:3a:43:6e:4d:1c:
27:0b:e6:d4:1c:64:f6:45:52:76:c9:4c:40:1c:fd:
56:47:d5:fe:83:26:77:44:b2:16:24:7a:da:20:51:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:A5:1E:44:F0:C3:E7:E7:BD:E9:6F:B1:D7:F9:2F:0F:70:01:75
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/NKKlHkTww-fnvelvsdf5Lw9wAXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.8.0/24
213.111.160.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:b6:ad:a2:5e:13:7c:b2:06:cd:10:9d:f9:3c:52:53:12:94:
02:ff:d6:d0:1d:e1:5d:d2:1f:a8:bd:63:83:54:63:13:53:52:
0e:27:63:6c:20:c3:dc:5c:64:04:7b:0e:c4:c9:e9:c7:7a:13:
17:49:82:35:bb:7e:c5:41:5e:93:26:60:f9:14:9d:00:8d:ee:
7a:47:88:42:c7:64:34:3d:2c:dd:7c:33:f5:a1:f4:85:91:bf:
45:6a:42:3c:dd:a5:ed:53:46:2d:3d:3b:1c:ab:e4:53:8d:9c:
1b:a3:4e:92:a4:da:c9:fa:79:8a:9a:ca:17:e8:87:8b:79:40:
07:70:a5:e3:82:fe:d2:f2:de:8d:b1:e0:26:62:6e:00:69:d0:
bc:86:7d:7f:a3:c7:af:86:10:f5:c4:0e:40:35:63:a1:67:ef:
eb:a6:58:c2:b0:20:5d:ff:69:f6:82:8a:f4:f5:7d:66:c4:04:
1d:38:bb:11:bf:34:79:e5:06:43:98:35:fd:96:2e:27:95:9a:
cf:83:1b:c9:6a:7f:35:8e:d5:91:19:64:cf:1f:dd:db:52:2d:
25:70:e6:04:a8:3f:1f:85:83:df:94:97:be:e7:8a:46:a4:b3:
32:97:60:d6:f1:e5:d6:45:ca:8e:0a:34:3c:00:03:74:53:ef:
f0:f1:3b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:58:07 2025 by rpki-client