Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/I_fb_gYNmYXn2I5dJWrh95FfZUI.roa
File: I_fb_gYNmYXn2I5dJWrh95FfZUI.roa (raw, json)
Hash identifier: 1QkUvLal8I5i3ntodXfB9GIRIpaUbkNnNNKbO/RgXXk=
Subject key identifier: 23:F7:DB:FE:06:0D:99:85:E7:D8:8E:5D:25:6A:E1:F7:91:5F:65:42
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422202CB81C8B4179B29C0E32407071C3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/I_fb_gYNmYXn2I5dJWrh95FfZUI.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197854
IP address blocks: 45.130.200.0/24 maxlen: 24
2a10:7401::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2c:b8:1c:8b:41:79:b2:9c:0e:32:40:70:71:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23f7dbfe060d9985e7d88e5d256ae1f7915f6542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:2a:ce:c7:b0:8e:9c:fb:1e:9a:d3:48:de:
4d:72:13:5f:4f:83:d8:8c:64:c5:10:5a:ed:7a:e1:
f0:0c:e6:ca:60:a3:79:8e:03:81:05:e1:b6:24:62:
b8:38:f2:e6:55:de:11:fb:db:62:e0:a4:85:25:2d:
82:ab:55:72:5b:b9:bb:da:ce:1c:d9:fd:99:40:0f:
84:46:84:e7:b8:33:5e:1f:b3:c5:25:bb:b1:a0:76:
30:64:98:9f:38:ea:f5:fa:91:3d:85:6f:36:12:d9:
43:30:5e:91:ff:6d:15:73:6b:a7:1f:f4:a3:ca:25:
f9:9d:e5:3f:33:71:62:9d:6e:eb:a7:3c:78:b1:16:
11:77:88:87:20:82:4d:41:9d:fe:30:0d:b4:1c:47:
7e:61:82:84:d1:19:21:14:fd:26:ef:c2:0e:87:37:
23:7e:18:26:0d:4f:98:ca:5a:be:73:23:c4:9a:21:
0d:64:f6:ce:42:5e:86:d8:c3:b4:57:7b:55:33:a8:
ee:70:8d:c0:8e:74:51:3d:9d:1d:7b:17:78:82:d6:
84:0c:7d:e2:1a:dc:ac:d7:7d:46:b0:ef:af:fe:a3:
fe:21:8a:4a:67:ce:83:03:36:e4:78:02:dc:d0:1a:
36:44:f9:ef:7c:97:34:ad:37:4f:fc:46:f3:61:6f:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F7:DB:FE:06:0D:99:85:E7:D8:8E:5D:25:6A:E1:F7:91:5F:65:42
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/I_fb_gYNmYXn2I5dJWrh95FfZUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.200.0/24
IPv6:
2a10:7401::/32
Signature Algorithm: sha256WithRSAEncryption
7e:f5:ab:9e:59:39:3b:c1:ef:fa:16:09:b7:5f:01:2e:2f:fe:
65:e3:13:c7:00:72:66:fc:05:61:81:6b:e8:b0:01:2a:18:72:
de:9f:ad:cc:b2:03:7b:80:2b:45:57:98:20:e3:c7:64:9c:55:
2f:1e:af:3d:f1:0a:b3:f7:69:91:67:ed:34:c6:fd:44:a5:9e:
2b:58:ed:d5:ca:f8:b8:eb:6d:30:12:74:42:3c:8f:cd:16:e4:
74:21:fb:03:44:2c:0c:60:b9:62:db:03:2e:45:d2:f2:d5:e9:
77:d7:c6:b4:17:b7:11:12:25:c8:35:91:67:b4:de:52:79:3f:
a9:6d:53:dc:44:ff:2f:c8:25:31:d3:35:7d:95:2c:64:99:35:
51:e9:b4:da:4c:e8:77:eb:32:6e:ad:23:c6:65:69:8b:ab:88:
cc:8f:6e:f2:dd:57:c1:96:4f:cb:0d:b8:f7:76:a2:b0:c1:db:
d8:64:8b:78:21:4d:4a:33:77:89:d3:47:45:00:51:cd:0c:ed:
da:f2:bb:44:16:b9:51:41:ce:20:bb:e4:76:d1:f0:79:1e:da:
18:65:ae:2d:1a:e8:c1:a7:5e:ce:36:0f:78:1b:52:e0:55:55:
34:91:91:fd:06:df:e4:35:49:3d:98:86:83:40:f3:54:24:42:
41:ff:ef:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:47:51 2025 by rpki-client