Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Hg-_qe0STaKkG6kThxCS1Uirp7Q.roa
File: Hg-_qe0STaKkG6kThxCS1Uirp7Q.roa (raw, json)
Hash identifier: nznPTa9CxfUk0ZFO+04p7w2+oZDD3S9dH/vs/iWIma4=
Subject key identifier: 1E:0F:BF:A9:ED:12:4D:A2:A4:1B:A9:13:87:10:92:D5:48:AB:A7:B4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422203A55F91B8BA120217E9648387277
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Hg-_qe0STaKkG6kThxCS1Uirp7Q.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211389
IP address blocks: 220.158.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3a:55:f9:1b:8b:a1:20:21:7e:96:48:38:72:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e0fbfa9ed124da2a41ba913871092d548aba7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:25:b8:15:f7:d6:36:b8:88:23:4c:0c:b0:
c1:2e:6a:f1:c7:fe:85:d1:62:70:38:48:0a:f1:6a:
68:88:bc:39:33:f4:c2:f0:00:0a:41:9e:59:f0:6c:
45:8a:59:ba:86:83:8c:f2:36:e5:e1:ac:09:05:c5:
fa:1c:bd:ad:6a:ab:10:e9:d9:31:15:e3:b8:9b:74:
87:80:cf:8d:8e:8a:e8:1d:6c:9f:91:a7:53:ff:69:
a5:27:37:1e:93:c6:fc:21:b6:0e:b3:2f:1a:0a:a8:
c8:e1:10:de:33:c6:b0:11:13:89:59:b4:62:58:f9:
af:59:e1:d8:8b:2b:fb:c5:c3:4a:cd:5f:13:1d:9a:
fa:4b:aa:f5:a4:73:6b:d4:5e:86:db:8e:81:92:de:
5e:93:a0:fc:f0:c1:66:72:30:80:eb:19:3b:e9:a7:
2c:85:33:d4:ce:e6:1c:11:d0:48:c1:1b:15:35:df:
98:97:5f:12:fb:2a:90:13:ae:c6:19:63:1c:90:b9:
57:72:42:6a:d8:89:4d:91:3d:54:d9:b6:a2:3b:e6:
da:34:7d:60:d6:02:a6:5f:4a:a3:dd:b7:c3:2a:9d:
a4:6e:ab:74:14:ad:29:ae:4b:c9:ce:ad:47:af:b9:
dc:27:57:91:51:1b:04:ab:91:b0:f4:67:94:80:37:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0F:BF:A9:ED:12:4D:A2:A4:1B:A9:13:87:10:92:D5:48:AB:A7:B4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Hg-_qe0STaKkG6kThxCS1Uirp7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.158.196.0/23
Signature Algorithm: sha256WithRSAEncryption
45:07:7d:1a:d8:69:76:d5:2e:56:27:93:78:31:3b:4a:e5:24:
eb:cb:16:b8:e1:34:99:eb:45:01:0f:a6:4e:42:54:4c:8c:9f:
16:c9:b9:47:74:2a:e2:fa:d3:f2:b5:56:2e:6b:33:84:39:e6:
41:18:11:b8:95:ed:18:f3:2e:8b:dd:66:6f:71:cb:b4:64:e1:
da:f8:51:c6:f5:25:e8:22:f2:67:ac:fe:82:c1:a8:88:13:03:
bc:5e:43:55:f9:69:69:b5:ba:0f:80:f1:6e:41:fc:3b:af:f5:
97:73:25:d1:0d:51:0f:27:90:b5:90:c9:63:43:17:40:09:37:
9e:50:9d:24:29:77:2c:c1:4e:68:d7:20:3a:68:67:48:12:8a:
ac:60:03:38:a7:95:31:98:b9:bb:44:6b:2c:1b:0c:c4:0d:e4:
5d:ec:40:a9:01:58:63:c9:36:f0:de:12:6c:95:c3:c3:f1:79:
f4:45:91:86:f8:f2:a3:62:f2:a1:3b:a6:fc:45:88:3b:ca:e7:
72:5b:78:8c:a0:d0:f1:0e:f4:4c:4e:58:1f:4f:3e:8e:d0:38:
5b:5a:b0:3d:06:7a:66:ac:3b:15:6f:d6:44:c9:3e:3d:51:e9:
bd:c1:37:72:e6:7f:63:46:66:73:2d:45:2a:b7:de:5d:f3:f3:
f3:06:35:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:53:40 2025 by rpki-client