Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NorPtJNpjkS1EsW9tjcfo0wvxoI.roa
File: NorPtJNpjkS1EsW9tjcfo0wvxoI.roa (raw, json)
Hash identifier: /OG3ih/9/E1cdchaThl0ePEBv/rgQn3Mh5wyWUoPYl8=
Subject key identifier: 36:8A:CF:B4:93:69:8E:44:B5:12:C5:BD:B6:37:1F:A3:4C:2F:C6:82
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019686DE8041D5542EE6A9D08D17A5B61848
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NorPtJNpjkS1EsW9tjcfo0wvxoI.roa
Signing time: Wed 30 Apr 2025 13:24:10 +0000
ROA not before: Wed 30 Apr 2025 13:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199737
IP address blocks: 151.244.11.0/24 maxlen: 24
151.244.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:de:80:41:d5:54:2e:e6:a9:d0:8d:17:a5:b6:18:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 30 13:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=368acfb493698e44b512c5bdb6371fa34c2fc682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:55:95:2b:9e:0e:f7:93:0e:89:9c:ea:ac:
71:c1:51:d9:a1:4c:c1:59:9a:ea:97:f6:f8:e5:2b:
10:55:c2:a3:c3:e2:ec:d1:9c:0b:86:1c:29:a0:0d:
a1:3e:e2:21:3a:40:cd:53:de:5a:dd:66:0d:51:f9:
1b:b1:94:98:92:a9:49:7c:4b:63:ce:23:1e:f9:7b:
ad:15:c9:90:47:1a:ad:bb:1e:f0:49:2d:8a:c1:6b:
f3:cd:e6:05:e0:0d:ab:97:24:6d:4e:b5:26:fd:f0:
6e:c9:13:8b:ba:59:44:22:0c:73:ef:f8:3d:ef:b6:
51:c0:8c:99:58:92:ed:d5:00:d4:46:80:ed:4e:63:
ad:55:b5:79:f4:f8:9e:af:82:f0:20:cb:f7:5b:b4:
c0:ef:72:2a:60:cf:71:96:58:82:bc:0a:7c:68:07:
d0:8f:b4:fb:7e:b9:01:2a:79:66:06:35:14:a6:fa:
a8:0a:65:9a:c7:39:70:1d:da:ef:63:5b:4c:3f:a4:
41:3c:bf:85:44:a5:78:8b:36:19:b1:8a:79:2a:07:
65:92:f6:28:36:51:37:a6:00:d8:82:a9:0c:c6:70:
ea:62:31:38:e1:00:16:e4:12:67:d7:30:42:4d:f4:
f8:9e:7e:cb:d5:ad:a3:6b:5c:9a:33:95:79:04:34:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8A:CF:B4:93:69:8E:44:B5:12:C5:BD:B6:37:1F:A3:4C:2F:C6:82
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NorPtJNpjkS1EsW9tjcfo0wvxoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.11.0/24
151.244.106.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e2:85:cf:21:37:54:29:51:94:78:ec:29:37:9b:b2:15:4d:
30:a2:cd:d4:af:ca:de:a7:7c:3d:10:13:ec:5c:77:a0:8f:81:
8d:5d:76:31:3f:9f:0c:54:ba:e2:69:e2:d0:d2:89:b0:dd:5c:
7e:88:44:8a:15:78:24:ad:13:fb:12:51:0a:2a:4e:7e:83:6a:
32:02:39:e8:28:f3:9d:d1:57:72:25:1e:d2:14:3c:c9:64:01:
a3:40:0f:4c:f3:3b:0c:c0:f2:96:cd:dd:c7:62:ae:5e:a8:ea:
c7:67:e1:0b:42:35:95:6b:fa:e0:d4:90:4f:25:c5:c1:54:76:
66:a3:d8:26:d8:2b:99:df:6c:0f:7e:56:d0:dc:f3:af:ab:2e:
c4:9a:11:44:29:ff:69:c3:f5:62:b5:5e:ca:38:fa:cd:6a:35:
6e:27:30:a4:32:33:cc:94:de:39:fe:aa:e8:65:d2:a2:0e:20:
c6:d1:7d:dc:8b:79:94:ce:66:e2:b4:bc:7d:30:7c:c8:3a:2f:
15:62:1d:dd:4d:98:c6:ef:46:8d:01:68:1d:2c:9d:f2:34:3c:
da:ef:14:9f:07:30:62:f2:14:9e:c1:fb:ae:c2:fb:7a:26:91:
d4:ae:06:59:46:77:d7:aa:36:0b:c1:ce:2c:68:f8:15:37:97:
60:17:21:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:59:36 2025 by rpki-client