Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UGOGu7Fsn0Pz9d_7i1M6rSMxxHo.roa
File: UGOGu7Fsn0Pz9d_7i1M6rSMxxHo.roa (raw, json)
Hash identifier: IDgOkBiY98Aqnu2PHHetBJZxhaHTeLGhFqFDpaHhmhs=
Subject key identifier: 50:63:86:BB:B1:6C:9F:43:F3:F5:DF:FB:8B:53:3A:AD:23:31:C4:7A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0194222023C34ABFA808CA1F1E34F7F765E2
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UGOGu7Fsn0Pz9d_7i1M6rSMxxHo.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60064
IP address blocks: 45.129.132.0/24 maxlen: 24
45.129.133.0/24 maxlen: 24
89.33.14.0/24 maxlen: 24
89.40.160.0/24 maxlen: 24
89.46.92.0/24 maxlen: 24
93.114.246.0/24 maxlen: 24
188.214.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:23:c3:4a:bf:a8:08:ca:1f:1e:34:f7:f7:65:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=506386bbb16c9f43f3f5dffb8b533aad2331c47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:4f:4b:91:4d:b8:f1:c1:58:d2:4f:08:b4:
f2:fe:f2:18:30:4b:ab:6c:4e:45:98:4a:fe:72:3f:
34:f4:9e:58:ee:8b:be:74:46:aa:f0:5b:f1:50:4c:
01:ed:e7:91:f6:67:34:e5:be:20:29:d4:e0:f4:c0:
3a:23:82:11:70:8f:71:62:b8:10:c2:04:64:a2:e5:
bf:39:0a:ee:3c:13:a6:e5:57:00:74:09:51:99:d2:
d0:cb:ef:dc:c0:a2:c9:e8:e1:c8:06:ce:1d:73:6a:
a7:7e:93:d1:d0:f4:da:56:54:be:d1:0f:c0:b9:7a:
77:40:b6:91:df:25:d8:18:f3:8a:d3:b0:f1:62:cb:
98:5b:00:3c:e3:ff:40:75:96:9f:64:9a:cb:26:48:
a9:46:dc:f7:a5:64:cb:4d:87:23:af:34:ec:25:9e:
d2:fb:f2:cd:54:ee:51:fd:0f:aa:55:63:35:74:5f:
c9:00:73:a3:13:01:67:ec:c3:b1:39:59:a0:86:a0:
65:63:60:aa:48:12:5a:2a:a0:6f:8c:03:d6:23:f5:
ce:ee:a4:3a:49:23:f1:58:bb:68:9d:1e:77:c4:cb:
67:ce:24:83:92:4d:b4:a6:76:a4:e7:0f:f6:c6:cd:
18:57:99:ee:52:c6:83:f9:89:b7:90:40:54:05:4c:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:63:86:BB:B1:6C:9F:43:F3:F5:DF:FB:8B:53:3A:AD:23:31:C4:7A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UGOGu7Fsn0Pz9d_7i1M6rSMxxHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.132.0/23
89.33.14.0/24
89.40.160.0/24
89.46.92.0/24
93.114.246.0/24
188.214.27.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b8:0f:4c:16:08:66:47:60:2a:ad:56:93:88:76:3c:e4:e8:
72:3a:91:25:1a:72:23:b1:f4:0b:e1:0f:57:af:ed:f2:3e:31:
c5:76:1d:89:d9:5f:0c:4b:7b:99:cf:38:74:a8:79:2a:46:98:
11:4d:2e:8f:55:93:94:05:eb:c2:05:5f:86:8f:8b:9c:ac:4e:
43:a9:f5:c5:5d:ff:fe:9d:86:06:c3:98:6b:88:d6:2e:85:83:
b6:19:bc:71:5e:6e:3d:5e:b3:d3:22:94:16:ae:ea:51:cb:8b:
07:fc:a6:8e:fb:cd:6a:bd:0e:82:a9:50:a4:ca:2b:54:9a:a5:
2d:ca:cb:a5:ff:5f:69:4e:72:cc:7a:99:7a:03:57:f3:a7:22:
05:4f:3e:37:d3:89:d0:35:79:d9:67:cc:9b:71:dc:b2:98:71:
a4:73:18:f3:ec:20:f0:93:5b:a2:cf:38:e9:fb:bf:8c:3c:f2:
64:5c:2f:54:10:dc:cb:a6:f8:4e:7b:22:a4:a9:46:b9:7d:2c:
56:ea:eb:a5:60:12:db:88:7a:af:88:5b:94:0e:ea:f1:f2:25:
30:fe:07:2e:91:48:21:09:1d:65:29:9c:13:3a:0e:f4:48:9a:
1d:07:f5:b1:14:04:e3:06:dd:bc:97:a6:d0:37:38:50:f3:05:
75:4a:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:49:01 2025 by rpki-client