Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/Nrmj7OZr3VRqV-mPGEt59p2belk.roa
File: Nrmj7OZr3VRqV-mPGEt59p2belk.roa (raw, json)
Hash identifier: qKP+VMvb5X+LyJaWae51YmN4HE54Q3kw6hy8LaIxSiU=
Subject key identifier: 36:B9:A3:EC:E6:6B:DD:54:6A:57:E9:8F:18:4B:79:F6:9D:9B:7A:59
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 019427B63D4F8F6C41AF9E5B331E00DC45F2
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/Nrmj7OZr3VRqV-mPGEt59p2belk.roa
Signing time: Thu 02 Jan 2025 15:50:42 +0000
ROA not before: Thu 02 Jan 2025 15:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.87.218.0/24 maxlen: 28
185.87.219.0/24 maxlen: 24
2a13:85c0::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:3d:4f:8f:6c:41:af:9e:5b:33:1e:00:dc:45:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Jan 2 15:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36b9a3ece66bdd546a57e98f184b79f69d9b7a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:70:41:60:95:ad:2e:c4:ed:cd:51:74:57:
72:dd:22:ac:c4:60:d5:05:e5:42:bb:38:3c:5a:ad:
3e:0a:f2:3c:43:50:c0:17:5d:08:5a:39:b4:c8:35:
59:5c:d4:95:5a:7c:48:2d:9e:72:b8:95:22:e7:49:
5a:df:b6:2a:7f:31:b7:10:c2:13:17:c5:78:fb:15:
27:6c:5f:7c:4c:c8:9c:cb:d9:3a:7d:2f:d3:60:bc:
4a:e5:e9:89:f4:41:56:80:eb:3f:f6:51:8d:ac:98:
57:7f:d7:9f:37:42:88:5a:05:6c:21:af:9e:3f:33:
57:b9:65:25:0f:51:9c:cd:e6:65:b8:8f:d7:94:11:
9e:b0:a9:ff:48:0e:38:ae:b9:9d:30:1f:3d:c9:36:
05:c7:6e:a0:ab:d8:6c:c6:ad:06:cc:68:59:38:72:
ba:50:7c:a5:b1:8e:e8:8d:87:c6:34:8f:c8:71:9e:
34:7b:e8:97:d9:e7:cb:94:9d:c7:28:63:b4:00:8b:
e4:1f:02:1b:7c:58:ab:55:62:c7:66:d8:24:9a:cb:
7f:67:21:b0:58:f0:0d:01:4c:55:46:a2:6a:6a:be:
e8:0c:69:59:eb:4f:c3:33:f9:83:30:92:a4:8f:61:
00:fb:c2:5d:f0:12:f0:cb:69:31:ac:1d:1b:63:1f:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B9:A3:EC:E6:6B:DD:54:6A:57:E9:8F:18:4B:79:F6:9D:9B:7A:59
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/Nrmj7OZr3VRqV-mPGEt59p2belk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.218.0/23
IPv6:
2a13:85c0::/40
Signature Algorithm: sha256WithRSAEncryption
23:7c:c8:69:8a:92:03:99:37:36:6e:67:e3:f1:11:86:19:5a:
22:ee:f1:41:a7:c2:59:67:83:be:b3:b3:63:4e:79:07:6d:10:
b1:c0:a7:0b:fa:ed:56:3a:34:68:ea:7d:e6:c0:48:6e:65:0c:
61:6c:2e:90:64:6d:63:6b:5d:db:57:6a:a8:56:63:58:99:3f:
5b:a1:ed:a8:f3:68:30:06:61:d6:f8:02:d1:5f:5d:9f:39:7a:
4c:74:15:3c:d4:cf:81:fb:ed:c7:59:63:fe:51:b1:f3:c2:91:
92:99:0a:1f:e6:78:e3:94:b9:5a:1d:98:c1:ef:27:64:67:34:
af:98:8a:c3:ad:2b:29:19:06:0d:b7:cb:5a:e5:42:f8:bf:21:
f7:9e:62:25:68:ba:13:1d:0c:46:96:d4:b4:b3:e6:0f:04:1d:
92:ef:a0:30:e3:89:2b:42:41:e3:97:85:19:0f:4c:41:6c:8b:
14:c6:96:72:3d:ff:42:55:9d:f3:4f:26:47:7b:19:62:dd:ac:
7f:5f:db:e7:6c:18:e3:f3:ba:1b:be:5e:bc:c2:f7:1a:21:d4:
cd:a4:48:3d:a9:41:90:c1:cf:99:0a:60:dd:a4:bd:eb:79:04:
9a:bb:92:24:51:2a:77:dd:b3:59:fb:a0:a9:04:32:e8:b1:3b:
88:73:6f:9f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQntj1Pj2xBr55bMx4A3EXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODEyNzNkY2IwM2MzNDU3Yjc5MjUwYmUxMDllMTlhNWU3
NGYwZmQwHhcNMjUwMTAyMTU1MDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmI5YTNlY2U2NmJkZDU0NmE1N2U5OGYxODRiNzlmNjlkOWI3YTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBBwQWCVrS7E7c1RdFdy3SKsxGDV
BeVCuzg8Wq0+CvI8Q1DAF10IWjm0yDVZXNSVWnxILZ5yuJUi50la37YqfzG3EMIT
F8V4+xUnbF98TMicy9k6fS/TYLxK5emJ9EFWgOs/9lGNrJhXf9efN0KIWgVsIa+e
PzNXuWUlD1GczeZluI/XlBGesKn/SA44rrmdMB89yTYFx26gq9hsxq0GzGhZOHK6
UHylsY7ojYfGNI/IcZ40e+iX2efLlJ3HKGO0AIvkHwIbfFirVWLHZtgkmst/ZyGw
WPANAUxVRqJqar7oDGlZ60/DM/mDMJKkj2EA+8Jd8BLwy2kxrB0bYx86TwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFDa5o+zma91UalfpjxhLefadm3pZMB8GA1UdIwQY
MBaAFEyBJz3LA8NFe3klC+EJ4ZpedPD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYt
Nzc3OTRmYmZkMmU0LzEvTnJtajdPWnIzVlJxVi1tUEdFdDU5cDJiZWxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYtNzc3OTRmYmZkMmU0
LzEvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBuVfaMA4E
AgACMAgDBgAqE4XAADANBgkqhkiG9w0BAQsFAAOCAQEAI3zIaYqSA5k3Nm5n4/ER
hhlaIu7xQafCWWeDvrOzY055B20QscCnC/rtVjo0aOp95sBIbmUMYWwukGRtY2td
21dqqFZjWJk/W6HtqPNoMAZh1vgC0V9dnzl6THQVPNTPgfvtx1lj/lGx88KRkpkK
H+Z445S5Wh2Ywe8nZGc0r5iKw60rKRkGDbfLWuVC+L8h955iJWi6Ex0MRpbUtLPm
DwQdku+gMOOJK0JB45eFGQ9MQWyLFMaWcj3/QlWd808mR3sZYt2sf1/b52wY4/O6
G75evML3GiHUzaRIPalBkMHPmQpg3aS963kEmruSJFEqd92zWfugqQQy6LE7iHNv
nw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:04 2025 by rpki-client