Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_tRuuE_vXLry4b9F7xVR2GWzzIk.roa
File: _tRuuE_vXLry4b9F7xVR2GWzzIk.roa (raw, json)
Hash identifier: FwxAkyQvzhTd5aVDnKDhhiqilzwMf9QoKC9qz6Rl9vk=
Subject key identifier: FE:D4:6E:B8:4F:EF:5C:BA:F2:E1:BF:45:EF:15:51:D8:65:B3:CC:89
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422202EF012435DADAC293E038F3B9E10
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_tRuuE_vXLry4b9F7xVR2GWzzIk.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199700
IP address blocks: 194.5.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2e:f0:12:43:5d:ad:ac:29:3e:03:8f:3b:9e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fed46eb84fef5cbaf2e1bf45ef1551d865b3cc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:b3:13:04:68:83:c2:80:fa:ee:0f:33:bf:
4a:bf:d0:4b:3c:c5:1d:b1:60:08:97:10:60:06:82:
11:51:45:01:d8:76:4a:a2:55:c4:63:3d:7d:c2:28:
1b:e6:3f:89:e8:29:b7:24:f1:b3:97:0e:e9:fb:4b:
3e:ee:af:25:56:5f:b4:24:51:a8:c1:1e:c8:1b:be:
69:6a:de:57:d8:aa:0a:63:80:f9:d7:ce:73:3e:c0:
e6:59:ee:76:e1:4f:7e:11:f4:92:a0:1f:5e:a5:ff:
8f:42:2b:63:d4:be:84:2f:18:6f:83:4f:82:04:9c:
5d:f8:59:b5:f5:5b:ee:29:d4:fd:d0:c1:76:9f:38:
49:c3:df:db:fa:12:3f:32:ea:27:31:5f:ae:97:46:
5c:15:1a:33:a2:ee:53:a3:b0:03:af:d6:84:57:bb:
a0:4e:3d:03:0b:b1:b8:09:36:ec:bd:30:0d:45:0a:
98:b4:a7:fd:95:82:66:d3:7f:07:06:ef:c2:98:c2:
dc:fb:81:f6:c8:f2:c8:ff:3f:78:f6:46:f3:ff:25:
0d:d0:8d:56:2f:df:55:0a:60:60:00:ee:ce:89:21:
a7:e0:a6:f5:db:f5:12:b5:c7:c8:08:96:a7:32:45:
30:b0:a1:83:f6:4a:de:8b:dd:be:df:5f:7a:50:67:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D4:6E:B8:4F:EF:5C:BA:F2:E1:BF:45:EF:15:51:D8:65:B3:CC:89
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/_tRuuE_vXLry4b9F7xVR2GWzzIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.85.0/24
Signature Algorithm: sha256WithRSAEncryption
75:80:3e:e1:dd:34:da:3e:1d:a1:88:1d:17:bb:75:31:01:db:
77:99:30:f2:12:08:a4:33:76:c1:d9:39:3c:7e:7a:a3:bb:ab:
5f:37:ae:58:fa:d3:2e:ea:0e:56:b0:c6:d2:55:66:9a:8f:c7:
cb:19:4d:e7:0c:21:7c:ce:a0:4c:21:c2:a7:fc:56:41:7b:72:
0d:0f:c3:23:23:a9:fa:5a:ec:0a:8a:93:fe:aa:dd:de:8b:37:
b1:e0:0c:26:c8:27:e2:dc:f2:e3:27:3c:0b:c6:c3:9b:8a:95:
e7:43:94:4c:27:a9:71:bc:b2:45:d8:23:30:38:6c:e1:d2:1f:
47:cf:4d:fe:7a:44:74:07:60:61:54:b4:dc:97:07:c4:ea:fb:
0b:d9:c2:28:d1:ee:42:e2:db:38:59:4c:04:55:8a:95:07:87:
0c:fd:b6:c0:4c:13:be:f5:e3:45:bb:54:14:7b:37:ad:41:e0:
22:1c:8e:5a:7a:7b:37:38:4c:87:ed:26:1a:b4:23:2c:86:87:
3c:a3:20:f2:42:ce:c5:aa:5c:57:e6:0a:2f:61:64:13:71:e1:
ad:5d:d8:b2:a2:30:d9:d8:e6:49:53:25:63:c7:84:a8:b4:ba:
e7:48:31:9a:58:99:0b:80:1a:7b:4e:4c:04:10:37:a9:6b:d2:
ab:23:3b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:55:20 2025 by rpki-client