Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RQTSe9lmdVpJJjZ5B3tLizVam8E.roa
File: RQTSe9lmdVpJJjZ5B3tLizVam8E.roa (raw, json)
Hash identifier: 6uNHcyU/qZHOPLADWznpsPziin19HcLYmeQNfoChjSI=
Subject key identifier: 45:04:D2:7B:D9:66:75:5A:49:26:36:79:07:7B:4B:8B:35:5A:9B:C1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01942220166703A11986352E699C895F1426
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RQTSe9lmdVpJJjZ5B3tLizVam8E.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36113
IP address blocks: 188.240.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:16:67:03:a1:19:86:35:2e:69:9c:89:5f:14:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4504d27bd966755a49263679077b4b8b355a9bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:fe:f5:c1:58:b2:eb:29:1b:81:1e:da:4c:
28:61:26:f4:e0:25:75:49:dd:8c:35:18:bf:f0:13:
6a:15:d3:25:58:cf:4e:d5:7e:7e:67:2e:c5:95:6f:
59:14:7e:ae:d2:88:76:e1:7e:47:76:f6:11:a0:ac:
79:7d:8b:66:38:ca:1c:40:1c:e1:4c:45:5e:a9:50:
31:39:c5:df:33:ab:46:66:68:35:ea:7d:b1:14:93:
f4:ff:b0:69:f1:77:b5:61:4d:ef:9d:40:a0:22:2f:
d7:41:c1:57:30:35:9d:4e:ab:e1:90:82:8c:d7:16:
36:a0:92:6c:44:f7:ca:d9:92:d0:ee:2f:16:7d:31:
02:45:4b:70:d6:fa:05:a0:c7:ca:cf:23:8f:27:d1:
a9:29:f1:09:5e:34:cb:41:3f:4a:30:f1:8b:4a:b5:
90:26:52:55:16:e4:04:82:6c:8b:53:db:33:3a:88:
53:36:ff:7f:16:6d:a7:99:f8:9c:11:78:c4:74:3a:
78:0c:ee:b5:c7:f9:d7:e7:e1:7d:b9:d4:9f:78:70:
3d:f8:25:13:52:04:76:ba:1b:d9:3d:bf:c7:1e:38:
51:e4:46:24:c6:4a:20:14:52:6a:c8:4a:73:ee:d7:
d7:06:ec:de:47:ed:4b:03:d0:0d:8e:86:90:ad:e9:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:04:D2:7B:D9:66:75:5A:49:26:36:79:07:7B:4B:8B:35:5A:9B:C1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RQTSe9lmdVpJJjZ5B3tLizVam8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.233.0/24
Signature Algorithm: sha256WithRSAEncryption
60:56:98:1c:83:67:58:c1:11:75:6b:e4:0e:0d:84:7b:2e:c8:
9a:20:de:cb:cd:1e:f5:7a:49:9b:9c:8c:13:2d:54:28:cb:cd:
ba:86:73:eb:68:12:81:62:bf:36:be:70:b4:ff:67:03:80:dc:
9f:70:8b:37:f3:f0:5c:18:b2:63:d0:d3:fd:75:89:ed:dc:b4:
aa:b0:39:6d:a1:0e:d4:62:b7:a6:dc:9d:07:b1:c9:01:7b:11:
93:08:c0:b6:9a:c1:ec:19:2c:e0:70:97:30:69:e4:6d:0d:c7:
09:d8:c7:16:fb:39:f6:0c:b7:2f:b5:ef:1d:78:aa:c1:6a:6a:
9e:62:d1:20:c9:b1:78:78:80:d7:21:e1:f5:d0:09:52:a8:ff:
46:60:19:44:87:9c:7c:a4:e2:a1:bf:e8:fe:6d:b1:bc:25:91:
f5:20:fd:9a:35:cd:20:2d:c5:30:9e:46:02:10:4b:b8:ed:49:
68:26:3f:7d:db:0c:86:44:85:b6:37:62:ca:da:32:af:76:85:
5e:0c:02:c0:49:a5:2a:aa:78:5f:49:63:a2:69:27:e8:84:2f:
2a:20:5b:00:64:5e:0b:cc:e5:e0:31:72:f6:45:e9:cd:06:64:
0f:b5:09:31:84:1a:5c:39:52:a9:8a:3b:17:28:4d:1a:d8:63:
b1:75:d5:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIBZnA6EZhjUuaZyJXxQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjUwMTAxMTM0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTA0ZDI3YmQ5NjY3NTVhNDkyNjM2NzkwNzdiNGI4YjM1NWE5YmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A3+9cFYsuspG4Ee2kwoYSb04CV1
Sd2MNRi/8BNqFdMlWM9O1X5+Zy7FlW9ZFH6u0oh24X5HdvYRoKx5fYtmOMocQBzh
TEVeqVAxOcXfM6tGZmg16n2xFJP0/7Bp8Xe1YU3vnUCgIi/XQcFXMDWdTqvhkIKM
1xY2oJJsRPfK2ZLQ7i8WfTECRUtw1voFoMfKzyOPJ9GpKfEJXjTLQT9KMPGLSrWQ
JlJVFuQEgmyLU9szOohTNv9/Fm2nmficEXjEdDp4DO61x/nX5+F9udSfeHA9+CUT
UgR2uhvZPb/HHjhR5EYkxkogFFJqyEpz7tfXBuzeR+1LA9ANjoaQrekADQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEUE0nvZZnVaSSY2eQd7S4s1WpvBMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvUlFUU2U5bG1kVnBKSmpaNUIzdExpelZhbThFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPDpMA0G
CSqGSIb3DQEBCwUAA4IBAQBgVpgcg2dYwRF1a+QODYR7LsiaIN7LzR71ekmbnIwT
LVQoy826hnPraBKBYr82vnC0/2cDgNyfcIs38/BcGLJj0NP9dYnt3LSqsDltoQ7U
Yrem3J0HsckBexGTCMC2msHsGSzgcJcwaeRtDccJ2McW+zn2DLcvte8deKrBamqe
YtEgybF4eIDXIeH10AlSqP9GYBlEh5x8pOKhv+j+bbG8JZH1IP2aNc0gLcUwnkYC
EEu47UloJj992wyGRIW2N2LK2jKvdoVeDALASaUqqnhfSWOiaSfohC8qIFsAZF4L
zOXgMXL2RenNBmQPtQkxhBpcOVKpijsXKE0a2GOxddVj
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:51:57 2025 by rpki-client