Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0le7zOVicWWq2DSlHtWIVUFIQQI.roa
File: 0le7zOVicWWq2DSlHtWIVUFIQQI.roa (raw, json)
Hash identifier: jRuL5/t0pfehD8Qh35gDNhVrkliQuSGRZeI5WvhMjDc=
Subject key identifier: D2:57:BB:CC:E5:62:71:65:AA:D8:34:A5:1E:D5:88:55:41:48:41:02
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422201F775142055769FD191B4A062C4D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0le7zOVicWWq2DSlHtWIVUFIQQI.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 185.217.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1f:77:51:42:05:57:69:fd:19:1b:4a:06:2c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d257bbcce5627165aad834a51ed5885541484102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:08:7e:b1:76:04:86:7f:89:0b:88:e5:17:
81:7a:85:8e:97:ff:cf:5a:c4:21:af:81:30:41:70:
bf:19:6b:7d:bc:df:4e:2f:42:8c:9e:f0:29:79:0b:
da:00:e6:99:6f:de:6a:0c:38:d3:c4:00:c7:e8:8f:
f0:49:10:3d:20:d1:0a:4c:e0:04:53:48:22:b7:21:
3b:8c:28:dc:98:0f:6f:ab:5f:d4:78:b8:f1:93:3d:
33:12:da:2a:fd:d3:0d:2f:f7:ec:0b:2c:93:2d:05:
b8:1a:79:f5:41:f6:66:b5:2e:f6:25:3c:c9:3c:7f:
41:89:ac:dd:34:a4:71:fb:e6:1c:28:13:14:51:af:
83:13:84:1b:9f:32:e8:0e:27:15:4e:59:3c:2f:db:
e5:5d:66:cf:51:84:3a:a4:7f:11:bf:cf:89:71:cb:
a2:25:2d:9e:a4:b2:11:16:0c:71:4f:98:6f:98:3a:
da:26:77:44:39:6f:87:fc:98:8d:29:c7:ba:f4:25:
36:30:8e:f0:30:90:93:e2:4c:00:ab:e3:34:d1:1f:
27:03:37:59:c6:8a:28:4b:31:3c:ce:e8:8b:34:70:
c1:43:64:42:c5:b6:c7:6a:dc:ea:4f:44:3e:a8:7c:
48:4a:cf:02:5a:45:f4:4b:46:fe:b8:3f:5b:fd:19:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:57:BB:CC:E5:62:71:65:AA:D8:34:A5:1E:D5:88:55:41:48:41:02
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0le7zOVicWWq2DSlHtWIVUFIQQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.118.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b1:ae:7f:31:75:b5:c1:aa:cb:c7:03:d2:cc:14:70:0a:28:
d3:26:12:e9:a7:24:e2:56:7b:1b:82:af:f9:6b:a7:ba:0a:f2:
e2:82:11:4c:c2:e3:bd:fa:97:9f:3d:25:3f:0c:f9:0b:9d:98:
b8:64:b2:2e:fc:0f:4b:d9:7a:02:a1:51:34:56:14:bc:2b:c1:
f1:01:3c:91:a5:66:c5:c1:97:6d:63:a7:16:ab:7c:57:aa:c0:
f8:fc:ed:9f:80:59:af:07:07:6e:32:dc:b7:ae:8b:d8:a5:17:
dc:e4:ac:73:7b:57:75:6b:26:64:23:fb:01:2b:6a:39:57:c4:
c7:a3:12:93:e2:c1:90:f2:2d:fd:07:83:c6:74:a0:9c:e7:89:
e9:8d:99:2e:af:df:8f:72:e4:2e:89:3a:17:57:57:0d:19:77:
ae:52:f1:a5:26:3f:ed:ca:3b:fe:e1:b4:a9:88:40:c4:e3:67:
fe:77:20:84:66:fe:a0:11:e2:bb:41:74:45:ad:3c:ec:c7:88:
53:00:31:67:40:a5:cd:6a:ea:e8:af:83:1b:1d:21:92:6c:79:
47:36:cc:b0:97:50:d5:ac:0a:3b:7d:88:bf:0d:0e:59:49:d0:
fc:a4:f7:63:b7:06:2b:1b:67:db:04:f0:87:e2:5d:23:f0:11:
de:3d:b5:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIB93UUIFV2n9GRtKBixNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjUwMTAxMTM0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjU3YmJjY2U1NjI3MTY1YWFkODM0YTUxZWQ1ODg1NTQxNDg0MTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhAIfrF2BIZ/iQuI5ReBeoWOl//P
WsQhr4EwQXC/GWt9vN9OL0KMnvApeQvaAOaZb95qDDjTxADH6I/wSRA9INEKTOAE
U0gityE7jCjcmA9vq1/UeLjxkz0zEtoq/dMNL/fsCyyTLQW4Gnn1QfZmtS72JTzJ
PH9BiazdNKRx++YcKBMUUa+DE4QbnzLoDicVTlk8L9vlXWbPUYQ6pH8Rv8+Jccui
JS2epLIRFgxxT5hvmDraJndEOW+H/JiNKce69CU2MI7wMJCT4kwAq+M00R8nAzdZ
xoooSzE8zuiLNHDBQ2RCxbbHatzqT0Q+qHxISs8CWkX0S0b+uD9b/RmAxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNJXu8zlYnFlqtg0pR7ViFVBSEECMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvMGxlN3pPVmljV1dxMkRTbEh0V0lWVUZJUVFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudl2MA0G
CSqGSIb3DQEBCwUAA4IBAQB3sa5/MXW1warLxwPSzBRwCijTJhLppyTiVnsbgq/5
a6e6CvLighFMwuO9+pefPSU/DPkLnZi4ZLIu/A9L2XoCoVE0VhS8K8HxATyRpWbF
wZdtY6cWq3xXqsD4/O2fgFmvBwduMty3rovYpRfc5Kxze1d1ayZkI/sBK2o5V8TH
oxKT4sGQ8i39B4PGdKCc54npjZkur9+PcuQuiToXV1cNGXeuUvGlJj/tyjv+4bSp
iEDE42f+dyCEZv6gEeK7QXRFrTzsx4hTADFnQKXNauror4MbHSGSbHlHNsywl1DV
rAo7fYi/DQ5ZSdD8pPdjtwYrG2fbBPCH4l0j8BHePbUM
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:41:41 2025 by rpki-client