Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/38PM9ZNMEMgxdG32g_l6MA6Yk-c.roa
File: 38PM9ZNMEMgxdG32g_l6MA6Yk-c.roa (raw, json)
Hash identifier: NICqBNB3fElYZsRTSc0j7w1x5LgMNhY/zDZYIuc7fTs=
Subject key identifier: DF:C3:CC:F5:93:4C:10:C8:31:74:6D:F6:83:F9:7A:30:0E:98:93:E7
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0194222042C2E4DFD6DE52F4FCA3DBA4B37F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/38PM9ZNMEMgxdG32g_l6MA6Yk-c.roa
Signing time: Wed 01 Jan 2025 13:48:47 +0000
ROA not before: Wed 01 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 45.80.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:42:c2:e4:df:d6:de:52:f4:fc:a3:db:a4:b3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfc3ccf5934c10c831746df683f97a300e9893e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:ac:b8:e3:a2:4a:5b:09:ea:29:81:b8:bc:
9f:02:db:5c:8f:ca:e7:d5:78:85:93:54:df:0c:9b:
43:4d:cb:a6:6b:3f:e4:18:74:c2:12:c3:b1:96:92:
b1:cd:12:76:47:52:5b:e4:9b:6d:80:c3:6c:7b:c6:
34:1a:80:ed:d0:e7:30:4c:05:06:be:71:99:2d:76:
a9:2b:4d:c0:b0:78:0c:26:da:dc:84:ab:80:40:77:
5c:44:cb:eb:d8:0c:69:f8:62:42:45:80:8b:43:65:
aa:df:ff:11:f0:bf:06:74:d8:24:4f:0b:51:f2:74:
4d:1b:01:e4:81:c7:67:5e:ae:d7:03:86:d8:9c:a9:
92:0b:4d:d9:39:73:52:0f:31:88:cc:a3:12:d9:96:
c6:06:5f:01:85:da:cd:34:32:4e:03:d7:77:0d:e9:
26:67:66:e1:91:b9:94:35:f3:43:ce:a5:07:fa:c6:
2b:a0:76:f8:34:77:dc:2a:0c:67:ff:7c:f0:bb:7e:
54:af:1e:ef:ed:14:3a:b7:b2:08:0d:fd:96:1e:17:
da:ee:68:71:7c:e4:33:d7:97:d1:e1:bc:cd:93:5b:
60:48:35:54:ec:37:99:65:14:47:38:4e:5a:6a:79:
56:82:e6:65:8e:18:8e:26:6e:9c:f9:80:15:ff:12:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C3:CC:F5:93:4C:10:C8:31:74:6D:F6:83:F9:7A:30:0E:98:93:E7
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/38PM9ZNMEMgxdG32g_l6MA6Yk-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:1c:c4:59:f5:57:59:c4:f5:0b:70:73:49:4b:cb:e4:74:fd:
bf:df:74:04:48:42:f7:92:fb:a7:3a:bc:ab:52:1e:37:c4:17:
69:03:35:f6:88:b8:58:89:1b:1a:41:c0:c9:b8:3c:71:69:f4:
c6:17:40:79:64:76:d8:4b:30:a6:6c:6a:41:3b:a6:ef:6b:61:
5c:20:4d:85:3e:e2:c5:35:cb:6d:ae:cc:49:41:67:ca:8e:83:
f5:61:2e:85:4c:cc:29:40:48:9c:cf:18:7e:de:3d:c4:61:10:
34:84:e1:47:05:ae:a2:1b:e6:02:35:72:21:92:b6:d6:18:a6:
4b:34:d1:ed:a6:a6:8c:7e:3b:d8:4c:f7:e2:77:ba:32:f9:ff:
fc:ce:d2:a4:44:54:0b:96:6c:ec:1f:56:13:c4:b7:c0:5f:36:
af:f9:2b:27:57:8c:a1:4f:52:d8:1e:02:6b:c8:03:97:ef:bc:
a1:e9:72:98:f7:c0:f7:f6:a5:c5:f3:3d:1d:af:94:c9:98:95:
c1:bd:df:3c:5a:a1:3c:37:dc:f3:f0:2a:ab:ce:d8:a8:38:35:
20:f3:16:5d:f3:78:2c:ae:00:16:62:50:ac:4f:55:fa:4c:8d:
e8:81:24:25:68:44:e9:15:66:51:ef:e4:ce:bc:44:44:0a:6a:
c0:b1:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:43:52 2025 by rpki-client