Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/13KaC8iKrsMe1OFwuOs2b-1nfAM.roa
File: 13KaC8iKrsMe1OFwuOs2b-1nfAM.roa (raw, json)
Hash identifier: 1fpd1z1tLnwxXtJ0DO1UfE4L/lw107f3sRha6NHP3e0=
Subject key identifier: D7:72:9A:0B:C8:8A:AE:C3:1E:D4:E1:70:B8:EB:36:6F:ED:67:7C:03
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422201E620AF813F15E33B6D55B573CC6
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/13KaC8iKrsMe1OFwuOs2b-1nfAM.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49367
IP address blocks: 194.242.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1e:62:0a:f8:13:f1:5e:33:b6:d5:5b:57:3c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7729a0bc88aaec31ed4e170b8eb366fed677c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:51:0f:4f:b9:f5:d3:c1:b9:21:68:4c:a0:
27:aa:0c:98:6d:14:d5:53:b4:d1:38:e3:9a:be:35:
5d:dc:ef:82:9c:42:50:10:eb:f0:3a:8e:e3:78:c7:
e8:80:04:22:2e:bc:a4:bd:8d:c7:f6:e6:a7:a4:c1:
a4:cc:c0:27:a1:e4:dd:f2:59:fe:53:50:21:54:8f:
93:72:0a:fc:67:6a:0a:cb:91:ad:39:69:26:f9:00:
63:be:7a:c3:e1:7e:71:00:68:0b:22:5d:36:3c:8a:
6d:b8:86:ea:c5:98:5e:38:a2:ff:b5:9c:b1:38:ca:
9c:83:be:b8:0a:43:e6:5c:95:6d:8f:13:32:6f:c1:
cf:5b:43:99:22:84:51:26:13:4e:be:2a:9c:f3:c4:
05:7d:93:a2:7f:6d:a8:20:f2:26:b5:78:b2:f6:00:
e6:73:36:ef:26:ff:7b:04:67:88:5f:6c:d5:4b:86:
5e:38:a7:6e:4b:d1:7f:3e:1f:5d:03:ff:04:fb:72:
2c:70:0a:83:2c:bf:8e:8c:b2:c4:80:27:cc:cc:10:
05:80:92:e8:5a:c1:65:8a:be:1d:2a:70:6e:2f:80:
1e:f2:80:93:02:51:9b:a0:68:c8:1c:6f:6c:33:b3:
78:be:4e:32:7c:2b:5c:4c:08:5c:59:12:67:be:d7:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:72:9A:0B:C8:8A:AE:C3:1E:D4:E1:70:B8:EB:36:6F:ED:67:7C:03
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/13KaC8iKrsMe1OFwuOs2b-1nfAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.14.0/23
Signature Algorithm: sha256WithRSAEncryption
08:01:38:bc:68:30:22:de:42:3a:4a:d6:5e:11:9c:c2:7f:b7:
88:92:bd:1b:9c:6b:46:09:ed:c5:ef:2c:1e:ef:36:84:8d:94:
dc:2e:3a:81:f9:26:bc:1a:26:cd:8c:db:97:d9:0f:81:02:68:
8b:40:35:1f:cb:ec:57:6d:69:6c:ad:5f:93:9d:60:9a:e3:29:
e7:68:d4:17:ae:b6:ad:9d:bb:cc:43:f2:d4:4f:cd:59:01:61:
e5:5c:3f:ec:36:6a:a2:18:8f:f5:68:23:26:87:37:b8:f4:d4:
20:f8:26:12:e2:aa:c5:a9:42:89:88:dc:97:44:86:da:d6:6d:
98:15:4a:da:04:c0:2a:50:65:b8:5f:c0:d2:57:69:e9:5f:94:
52:f1:31:60:b8:8c:30:30:27:25:0d:1e:ab:7f:73:2d:73:59:
e7:14:87:4a:5b:cb:b6:e1:29:74:39:7f:7d:65:31:1b:71:15:
e8:53:1a:00:35:0b:23:8c:1b:ef:e4:ae:34:22:8e:ee:ff:33:
92:e8:50:8b:80:56:d4:c6:5f:00:72:c8:60:ef:50:c0:4c:21:
6f:52:62:8b:1e:ff:17:ce:30:e8:49:72:a2:a5:b9:9d:55:96:
5e:91:25:10:19:08:fa:9b:e1:6f:ea:00:a5:76:ad:52:55:42:
4e:99:8f:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIB5iCvgT8V4zttVbVzzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjUwMTAxMTM0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzcyOWEwYmM4OGFhZWMzMWVkNGUxNzBiOGViMzY2ZmVkNjc3YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5xRD0+59dPBuSFoTKAnqgyYbRTV
U7TROOOavjVd3O+CnEJQEOvwOo7jeMfogAQiLrykvY3H9uanpMGkzMAnoeTd8ln+
U1AhVI+Tcgr8Z2oKy5GtOWkm+QBjvnrD4X5xAGgLIl02PIptuIbqxZheOKL/tZyx
OMqcg764CkPmXJVtjxMyb8HPW0OZIoRRJhNOviqc88QFfZOif22oIPImtXiy9gDm
czbvJv97BGeIX2zVS4ZeOKduS9F/Ph9dA/8E+3IscAqDLL+OjLLEgCfMzBAFgJLo
WsFlir4dKnBuL4Ae8oCTAlGboGjIHG9sM7N4vk4yfCtcTAhcWRJnvteHeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNdymgvIiq7DHtThcLjrNm/tZ3wDMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvMTNLYUM4aUtyc01lMU9Gd3VPczJiLTFuZkFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwvIOMA0G
CSqGSIb3DQEBCwUAA4IBAQAIATi8aDAi3kI6StZeEZzCf7eIkr0bnGtGCe3F7ywe
7zaEjZTcLjqB+Sa8GibNjNuX2Q+BAmiLQDUfy+xXbWlsrV+TnWCa4ynnaNQXrrat
nbvMQ/LUT81ZAWHlXD/sNmqiGI/1aCMmhze49NQg+CYS4qrFqUKJiNyXRIba1m2Y
FUraBMAqUGW4X8DSV2npX5RS8TFguIwwMCclDR6rf3Mtc1nnFIdKW8u24Sl0OX99
ZTEbcRXoUxoANQsjjBvv5K40Io7u/zOS6FCLgFbUxl8Acshg71DATCFvUmKLHv8X
zjDoSXKipbmdVZZekSUQGQj6m+Fv6gCldq1SVUJOmY8T
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:37:50 2025 by rpki-client