Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IMAfskxyVN4pkwO7vdDdHwYCJig.roa
File: IMAfskxyVN4pkwO7vdDdHwYCJig.roa (raw, json)
Hash identifier: mGVG4ixuq/E+mmcY7BkTISNKFn8YljMAUaLtsF5AMvM=
Subject key identifier: 20:C0:1F:B2:4C:72:54:DE:29:93:03:BB:BD:D0:DD:1F:06:02:26:28
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0194222024A7755D4104C3C08A280711C578
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IMAfskxyVN4pkwO7vdDdHwYCJig.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60798
IP address blocks: 37.46.151.0/24 maxlen: 24
45.156.156.0/24 maxlen: 24
84.245.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:24:a7:75:5d:41:04:c3:c0:8a:28:07:11:c5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20c01fb24c7254de299303bbbdd0dd1f06022628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:33:e6:f7:dd:d6:35:46:3d:87:11:18:30:
3b:f6:88:49:1e:7f:55:84:5b:81:d5:68:5b:1c:75:
63:57:e3:98:41:38:0d:e9:dd:32:a1:a5:38:76:4b:
e0:f5:2d:e9:4b:85:83:43:39:68:9b:92:ed:a0:f6:
89:26:88:fb:56:a2:49:3c:cd:a0:2c:d2:47:45:e6:
3d:37:8f:eb:0b:b7:43:bb:90:f0:e0:cd:2e:4d:30:
77:18:22:f0:bf:76:ce:06:7f:71:d0:45:5d:bf:25:
e8:9e:a9:51:de:59:67:84:27:eb:98:6b:c8:02:d2:
92:dc:a9:96:2d:aa:c8:48:96:b8:64:a3:48:c6:32:
fd:be:a8:61:17:66:7e:8e:db:b2:88:66:83:eb:a3:
00:f9:6f:7c:14:1d:d8:e4:76:40:84:fc:46:12:10:
7c:19:78:0f:ca:2f:4f:fb:e7:d4:f6:18:68:3e:7d:
36:f1:32:0e:e8:bf:5b:bb:1a:17:f4:44:8e:21:be:
8c:32:26:6b:78:3a:dd:eb:dd:7e:04:5a:fa:98:c4:
9f:3f:86:67:58:ca:9f:02:35:a1:88:9c:dc:62:23:
80:0a:13:b0:c5:f2:86:33:2d:2c:4e:2f:4f:1f:87:
9e:8d:0d:94:b5:78:5b:ce:08:4f:e5:38:e7:16:b6:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C0:1F:B2:4C:72:54:DE:29:93:03:BB:BD:D0:DD:1F:06:02:26:28
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IMAfskxyVN4pkwO7vdDdHwYCJig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.151.0/24
45.156.156.0/24
84.245.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:96:64:e6:e7:dc:53:78:8c:ba:e2:46:ef:2b:93:e4:62:70:
51:a3:94:1b:d2:c4:86:d6:0d:b7:f1:bd:6d:eb:b5:dc:24:40:
57:cd:eb:9b:f4:34:cd:82:1b:86:c4:73:69:ed:83:0e:3b:db:
cd:af:2f:31:1e:a8:70:4a:00:e7:aa:c6:b3:e9:70:97:b9:9f:
53:42:c6:57:a7:8e:9c:22:9a:9e:db:13:53:15:e2:45:82:82:
4b:e3:82:e8:9f:ef:f9:3e:ac:f8:75:52:a0:f1:51:5c:f1:8f:
7d:8a:a3:0f:5b:06:78:56:8b:95:05:de:7e:cf:77:fb:91:af:
12:b2:bf:a1:9e:5e:07:cb:fa:f4:d5:cd:aa:1b:a7:da:a5:a1:
76:20:3e:96:06:ec:5a:75:d7:8c:24:9c:0d:d6:65:78:16:0f:
a7:35:0f:c6:3c:cc:a8:ca:c0:51:08:0a:2b:25:88:af:ec:8d:
8b:3b:8e:62:ed:8b:87:5d:08:2b:b6:59:5d:fe:49:58:12:7d:
ba:be:eb:67:b5:e1:aa:4d:52:b1:ec:8e:75:7a:b2:a0:4f:61:
09:29:18:4a:1b:d4:fa:90:fa:1b:cf:c1:0d:92:42:2c:67:c7:
be:91:54:a4:97:b6:2c:6a:30:cd:c6:54:59:ca:31:0d:bb:10:
2e:55:da:52
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQiICSndV1BBMPAiigHEcV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjUwMTAxMTM0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGMwMWZiMjRjNzI1NGRlMjk5MzAzYmJiZGQwZGQxZjA2MDIyNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6sz5vfd1jVGPYcRGDA79ohJHn9V
hFuB1WhbHHVjV+OYQTgN6d0yoaU4dkvg9S3pS4WDQzlom5LtoPaJJoj7VqJJPM2g
LNJHReY9N4/rC7dDu5Dw4M0uTTB3GCLwv3bOBn9x0EVdvyXonqlR3llnhCfrmGvI
AtKS3KmWLarISJa4ZKNIxjL9vqhhF2Z+jtuyiGaD66MA+W98FB3Y5HZAhPxGEhB8
GXgPyi9P++fU9hhoPn028TIO6L9buxoX9ESOIb6MMiZreDrd691+BFr6mMSfP4Zn
WMqfAjWhiJzcYiOAChOwxfKGMy0sTi9PH4eejQ2UtXhbzghP5TjnFraRYQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCDAH7JMclTeKZMDu73Q3R8GAiYoMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvSU1BZnNreHlWTjRwa3dPN3ZkRGRId1lDSmlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJS6XAwQA
LZycAwQAVPU5MA0GCSqGSIb3DQEBCwUAA4IBAQA7lmTm59xTeIy64kbvK5PkYnBR
o5Qb0sSG1g238b1t67XcJEBXzeub9DTNghuGxHNp7YMOO9vNry8xHqhwSgDnqsaz
6XCXuZ9TQsZXp46cIpqe2xNTFeJFgoJL44Lon+/5Pqz4dVKg8VFc8Y99iqMPWwZ4
VouVBd5+z3f7ka8Ssr+hnl4Hy/r01c2qG6fapaF2ID6WBuxaddeMJJwN1mV4Fg+n
NQ/GPMyoysBRCAorJYiv7I2LO45i7YuHXQgrtlld/klYEn26vutnteGqTVKx7I51
erKgT2EJKRhKG9T6kPobz8ENkkIsZ8e+kVSkl7YsajDNxlRZyjENuxAuVdpS
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:55:04 2025 by rpki-client