Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0MI6l4CZ34xAkV5DHpJ51GyJmjE.roa
File: 0MI6l4CZ34xAkV5DHpJ51GyJmjE.roa (raw, json)
Hash identifier: bNKOO0go39rA7VgHfQAzBxeAabH/Z2IfcMHGdbs37cM=
Subject key identifier: D0:C2:3A:97:80:99:DF:8C:40:91:5E:43:1E:92:79:D4:6C:89:9A:31
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422200DB2E4C0D058140BB3D341CBFA32
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0MI6l4CZ34xAkV5DHpJ51GyJmjE.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11172
IP address blocks: 193.26.114.0/24 maxlen: 24
2a10:6c01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0d:b2:e4:c0:d0:58:14:0b:b3:d3:41:cb:fa:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0c23a978099df8c40915e431e9279d46c899a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:5a:91:f0:85:e0:8c:ee:28:26:c1:e2:4c:
1c:48:85:9d:2b:47:96:9d:8a:6e:d5:55:71:4f:3c:
47:83:03:16:ec:1e:16:e7:97:81:e2:ef:33:c4:28:
94:bc:67:f8:dd:42:36:90:68:ba:2f:bd:45:4f:77:
4c:a2:e1:bd:47:de:b1:90:a0:80:b4:a4:95:2e:5d:
c2:2e:41:7f:05:38:ef:fb:6d:1c:01:74:5b:f5:d6:
2c:34:98:24:5b:1e:93:4e:f5:da:09:ea:e8:5b:42:
e5:8b:d8:ab:93:28:14:0d:19:a2:65:0a:b8:93:97:
71:ab:4f:d5:3f:5e:0b:bb:27:83:61:76:9e:b6:46:
17:09:5e:f6:3c:f6:6d:1b:07:b7:85:57:f0:ef:ef:
22:57:d5:50:ea:18:95:ac:c2:3f:02:62:08:32:ed:
96:a3:33:e1:a7:85:12:ca:ab:eb:c8:65:65:86:78:
c8:77:55:d9:8e:62:33:9d:48:29:0e:42:ee:08:78:
04:80:18:50:cc:29:4d:c4:74:87:38:db:95:9c:5b:
a1:44:6a:3f:8c:76:23:eb:1c:f5:75:3a:80:cb:b9:
25:ca:d0:1c:3a:f6:10:08:fd:7c:62:b1:44:2b:65:
fa:c9:73:30:91:b4:40:14:9e:de:13:4d:f6:a4:8f:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C2:3A:97:80:99:DF:8C:40:91:5E:43:1E:92:79:D4:6C:89:9A:31
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0MI6l4CZ34xAkV5DHpJ51GyJmjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.114.0/24
IPv6:
2a10:6c01::/32
Signature Algorithm: sha256WithRSAEncryption
05:d4:0d:ff:32:90:d6:ea:50:9e:94:99:96:d8:b8:1e:e5:3a:
0b:00:85:17:8a:75:62:92:f5:c8:0d:b9:65:7b:67:e4:29:c9:
2b:38:bb:10:ee:38:73:95:ce:d1:84:48:2a:b3:9f:dd:bd:c3:
64:47:4d:f6:8c:c5:7a:ff:dc:8c:04:e9:3c:ae:ad:6a:6a:d2:
ea:09:6c:ad:e1:0d:34:ba:f4:e4:14:8c:eb:69:38:db:63:64:
0a:54:00:b1:9c:22:c4:08:67:43:d5:c2:f3:8c:7d:4b:9d:17:
90:c9:6b:04:b4:b9:3d:67:f3:db:55:8a:e4:00:e2:95:e0:af:
f7:9c:b7:31:50:2f:98:6a:a9:9e:ba:13:cb:42:28:11:82:1b:
a1:61:52:2a:de:b0:9f:ca:89:0a:02:f0:27:07:bf:90:93:18:
52:af:da:dd:f7:cf:3d:71:25:83:70:48:06:21:6c:81:bd:dd:
2b:67:73:6b:92:16:3f:bf:48:0c:df:a2:6b:1a:67:d8:88:69:
88:f8:e8:d7:4d:5c:92:55:49:09:73:30:aa:7f:5d:2c:e4:3f:
cf:25:8e:46:0d:46:72:45:b7:cb:7b:61:99:46:fc:ff:85:d0:
48:7a:67:45:18:f3:76:0b:19:e7:3c:b6:9f:6c:af:f8:f9:55:
e1:10:e0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:54:39 2025 by rpki-client