Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RmQs2PvCq1ziE3vEF0cJV9D0hKM.roa
File: RmQs2PvCq1ziE3vEF0cJV9D0hKM.roa (raw, json)
Hash identifier: ztTfA5ZmFRuS2Xr0+0KrTXTfZFVm0G1ru2k41KLKhEA=
Subject key identifier: 46:64:2C:D8:FB:C2:AB:5C:E2:13:7B:C4:17:47:09:57:D0:F4:84:A3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0194222014DDA600641A95067F4B1D448EE9
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RmQs2PvCq1ziE3vEF0cJV9D0hKM.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31122
IP address blocks: 45.89.32.0/22 maxlen: 24
45.131.248.0/22 maxlen: 24
45.146.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:14:dd:a6:00:64:1a:95:06:7f:4b:1d:44:8e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46642cd8fbc2ab5ce2137bc417470957d0f484a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:b7:fb:79:47:fe:a8:84:ab:04:67:6b:db:
c5:24:38:e8:91:f5:dc:5a:a4:fe:55:bf:9f:55:80:
ab:22:f2:31:bd:df:68:c7:68:35:81:74:1e:99:75:
7d:a0:10:59:07:db:66:68:07:1e:55:33:f2:8e:e8:
d6:5e:6e:41:ff:6b:09:1e:6d:7d:55:e2:bb:e0:80:
a5:51:14:6b:1e:c6:fa:07:7f:d1:6b:97:b6:4e:fc:
bb:75:e7:6f:c6:0e:ea:86:aa:d6:7b:46:a2:a0:b2:
47:c3:d7:be:af:cb:86:58:f0:e9:8a:42:25:36:39:
c6:bb:9c:c9:cf:2c:9f:9e:10:d2:09:ad:4b:56:25:
4c:11:35:b9:3b:64:2a:89:0e:0c:8a:da:da:10:28:
76:87:23:60:df:ad:7a:9b:b6:d2:a7:f1:76:38:7b:
b9:5d:81:67:ca:7e:31:df:8f:76:f8:f0:6f:b7:53:
dc:c9:f5:5f:32:f5:47:dc:84:86:98:f1:19:4b:58:
39:8c:62:b4:f9:56:a2:c2:10:0f:fe:36:48:a1:9c:
d0:d7:94:3b:4e:32:78:76:ed:41:e1:8e:71:1a:23:
f2:98:75:30:7e:72:94:fb:cf:d6:c4:d8:32:5c:04:
ba:54:7d:e7:9a:00:e2:2f:4b:dc:9d:a9:5e:b3:b0:
a0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:64:2C:D8:FB:C2:AB:5C:E2:13:7B:C4:17:47:09:57:D0:F4:84:A3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/RmQs2PvCq1ziE3vEF0cJV9D0hKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.32.0/22
45.131.248.0/22
45.146.184.0/23
Signature Algorithm: sha256WithRSAEncryption
07:47:38:f8:85:f3:b8:ff:61:5c:17:9f:3d:18:3b:a3:ae:10:
db:43:91:5b:a3:6e:22:f8:c4:a3:cb:56:d9:6c:e4:33:48:8f:
39:c8:18:9c:03:b1:23:b2:87:22:97:89:c8:d4:85:40:50:68:
94:b7:47:8e:02:ec:7a:be:13:0e:bb:fa:7c:ae:1a:91:b2:c8:
b5:90:05:ff:ce:ec:bc:bd:ed:a2:1d:3e:66:9b:a1:71:f8:36:
d1:a3:09:42:6b:f4:e0:28:e8:99:5e:97:86:e0:54:72:48:dc:
e3:13:9a:43:63:56:63:ce:2e:3d:03:e8:ed:41:e4:d0:29:fb:
0b:b5:af:3d:46:72:e8:9a:77:74:9f:d0:b2:00:13:8a:76:92:
35:10:73:15:16:3e:95:9d:24:8f:6f:88:64:bc:1d:b5:8a:bd:
87:49:5a:a7:f9:39:be:bb:75:26:c8:7b:82:14:0b:98:96:10:
b8:b1:af:74:51:74:4e:1e:3b:48:fd:16:f1:3c:7e:66:12:2c:
74:b8:83:af:92:e9:cf:41:cd:56:14:5f:06:d7:6c:65:05:44:
af:82:45:9d:a8:17:ef:79:c3:a6:30:89:7a:af:fe:8d:ba:c0:
6c:1d:3a:08:6c:5d:5d:5a:ae:bf:43:72:06:1d:bb:52:d7:6a:
ef:f5:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:49:38 2025 by rpki-client