Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6XlZXM8N83iL4KvmywOWWjU0htY.roa
File: 6XlZXM8N83iL4KvmywOWWjU0htY.roa (raw, json)
Hash identifier: kW5Q4psTR+7pS+HuShX8kGn2qRek4wAGuyGJ3I5lL9g=
Subject key identifier: E9:79:59:5C:CF:0D:F3:78:8B:E0:AB:E6:CB:03:96:5A:35:34:86:D6
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0194222036736280E3513AE10C80ACD4E5FE
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6XlZXM8N83iL4KvmywOWWjU0htY.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207821
IP address blocks: 45.129.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:36:73:62:80:e3:51:3a:e1:0c:80:ac:d4:e5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e979595ccf0df3788be0abe6cb03965a353486d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:d7:bf:24:ef:c5:c9:c5:c3:de:bd:46:87:
34:26:f0:ec:ff:91:03:c8:7c:2e:a1:3c:fe:28:dc:
a1:4c:52:e1:80:9f:ad:f6:c4:77:bc:18:9e:cd:fd:
be:ba:49:a7:62:f7:08:6f:fd:f6:0d:48:43:73:5f:
bd:33:49:53:e0:63:8d:3a:36:a2:5f:a0:2e:8e:7d:
49:56:28:62:27:91:44:fe:a1:0b:b4:6d:e6:2f:42:
65:a8:5d:51:7a:51:a8:28:a3:4a:c4:7b:2e:db:df:
15:e3:8b:e2:1d:3c:61:8b:e7:fa:59:30:f0:42:8a:
10:2a:07:fb:f9:3e:74:c0:e1:d3:e5:93:52:d9:e4:
35:d3:6b:df:a6:94:79:9f:ab:ac:9f:91:9b:2d:c5:
b5:c2:33:56:cd:c4:9d:fd:2d:eb:e9:e6:ca:dd:64:
3b:5e:66:7c:53:6c:82:eb:02:41:9a:4c:18:e2:77:
76:42:08:f8:41:2f:bf:b7:47:3f:c0:e6:f6:ba:8a:
cc:4c:8a:08:37:74:d2:60:bf:93:01:6c:0f:f0:f6:
ed:05:bb:5a:5b:ca:7c:30:e9:83:c6:3a:34:17:db:
e4:49:9a:f0:66:f6:5b:33:bd:a6:e0:5c:79:a5:61:
96:22:47:15:41:23:5e:eb:42:79:4d:61:fe:3c:0e:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:79:59:5C:CF:0D:F3:78:8B:E0:AB:E6:CB:03:96:5A:35:34:86:D6
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6XlZXM8N83iL4KvmywOWWjU0htY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.134.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:8d:cb:35:59:04:45:ee:db:b4:4e:ab:7c:32:45:52:a6:2f:
c8:90:1c:f0:6e:41:7d:ac:15:f1:a1:03:33:1c:5d:19:0f:88:
97:b6:4c:0b:c6:3f:c9:37:54:e9:f5:5d:7f:8b:58:0d:fa:e5:
fd:85:77:dc:c0:12:27:54:53:ac:ac:6f:f4:95:15:25:a4:3a:
92:7e:e7:34:ef:d7:a1:66:cd:2f:13:05:b4:c9:de:3e:f5:32:
89:15:46:1b:f1:b8:e8:70:04:5b:03:02:31:da:4b:7b:9e:48:
56:91:4e:b9:9d:70:35:d4:0d:8e:03:d3:43:00:36:15:31:db:
13:29:d6:e4:9b:62:89:2d:6c:8d:44:9f:00:28:ed:e0:cf:ee:
0a:e3:90:a0:0f:21:f6:f2:45:23:2d:ec:41:dc:b8:a9:52:c3:
a2:d6:2f:a7:61:d6:6d:6f:74:96:c2:00:80:65:99:e6:83:24:
05:63:db:30:0f:35:60:01:1a:fa:b9:f2:da:19:27:c8:9c:b5:
c3:33:32:5c:bb:68:3b:88:bb:28:8c:07:c3:38:1a:2d:47:7e:
d5:84:dd:42:76:1f:aa:e1:a2:94:49:05:8e:ac:26:9c:81:19:
59:8a:be:ac:3e:ee:89:39:b7:3c:14:35:db:ff:5f:a5:00:b7:
7e:e6:ea:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:49:52 2025 by rpki-client