Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jSUKFBW7H-RrGefX-jcGvuZLmZA.roa
File: jSUKFBW7H-RrGefX-jcGvuZLmZA.roa (raw, json)
Hash identifier: JeS2j4Vvt6ixNjg0QsPE9r3SxUcclomRAIgcV03jehI=
Subject key identifier: 8D:25:0A:14:15:BB:1F:E4:6B:19:E7:D7:FA:37:06:BE:E6:4B:99:90
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422200961A62B1E677CEDF69C48A95172
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jSUKFBW7H-RrGefX-jcGvuZLmZA.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4785
IP address blocks: 193.19.108.0/24 maxlen: 24
194.242.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:09:61:a6:2b:1e:67:7c:ed:f6:9c:48:a9:51:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d250a1415bb1fe46b19e7d7fa3706bee64b9990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:86:ed:df:b2:11:e6:4d:f4:d8:ca:1f:e5:
c2:e3:51:01:68:38:19:a8:9b:6c:2b:fd:8b:fc:b5:
db:07:57:35:dc:a7:d4:a6:89:6a:40:6b:51:bd:98:
19:47:a6:10:3b:47:79:c2:19:42:47:7d:ab:88:ee:
69:cd:ce:c1:7c:9d:ce:6b:56:63:a9:2a:7e:ae:49:
d4:41:a5:da:54:a9:fa:76:e2:b8:87:c6:c5:4b:e8:
c8:d0:74:91:a4:2c:72:94:e1:fc:a0:e1:89:2e:bd:
1c:4a:65:58:82:c8:45:94:0e:2d:33:e4:2e:2f:24:
88:76:fb:2d:80:0f:9c:a5:73:3f:ae:33:2f:4e:d2:
3c:35:9c:d5:c0:ec:f1:34:c2:65:19:a7:f4:c6:07:
99:58:49:c3:07:bf:db:c0:01:6c:b5:15:1a:cf:5d:
5f:ca:fe:bd:30:99:17:1b:d9:9b:a2:74:2c:cd:c4:
f1:4b:38:4f:49:fb:f4:0c:9c:56:ec:f1:e0:5e:c4:
93:e2:2f:c9:e4:0e:ab:94:03:14:68:3f:cc:8b:72:
26:7e:db:9e:83:d2:30:37:53:5b:97:61:fc:91:6d:
e2:8e:13:a3:e6:f7:44:7a:a1:a2:f9:3b:d8:8d:34:
bc:a9:fa:d9:88:08:ec:31:32:fe:87:b1:73:34:86:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:0A:14:15:BB:1F:E4:6B:19:E7:D7:FA:37:06:BE:E6:4B:99:90
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jSUKFBW7H-RrGefX-jcGvuZLmZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.108.0/24
194.242.2.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:40:ed:9f:72:b3:e4:82:ac:19:52:bb:bd:02:c8:44:33:8b:
d0:03:b8:cf:5e:24:73:45:02:c7:77:91:be:7c:4a:6b:cc:e3:
20:bc:b8:df:4d:db:79:b1:4d:48:86:ff:a3:bf:09:35:62:5d:
25:b2:c7:5c:40:47:f8:3b:29:24:c0:d7:e9:0b:12:fc:a6:bb:
b4:41:9e:10:24:12:b9:9f:34:c6:61:b0:1a:40:0b:b4:61:85:
88:59:b0:e0:0e:32:a8:be:1a:69:95:66:f7:c6:2e:35:82:4c:
21:a1:dd:38:a5:29:8b:45:a9:ba:07:cb:d8:ab:aa:ec:b7:b7:
fe:a6:41:e8:0e:35:cb:b1:3c:13:07:85:82:20:1a:fe:8b:ba:
ec:a3:fb:5d:ac:28:4b:3a:d0:95:2f:10:73:df:35:34:a9:33:
cc:79:7d:c2:d2:4a:5c:c0:e2:ac:9c:48:9e:15:6e:d7:f9:2d:
09:31:d2:64:9d:2f:26:ee:15:2b:2a:51:35:3a:df:b5:78:5f:
8c:c2:66:ab:97:a9:4e:54:ea:3b:1b:52:1b:2d:f5:ae:45:6f:
2f:43:a3:dc:72:ed:56:04:cf:9a:3d:6b:17:80:ef:96:fe:47:
fc:34:1c:50:77:94:8a:e4:bd:04:71:cb:9b:02:5b:f8:04:55:
76:35:b0:25
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiIAlhpiseZ3zt9pxIqVFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjUwMTAxMTM0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDI1MGExNDE1YmIxZmU0NmIxOWU3ZDdmYTM3MDZiZWU2NGI5OTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7aG7d+yEeZN9NjKH+XC41EBaDgZ
qJtsK/2L/LXbB1c13KfUpolqQGtRvZgZR6YQO0d5whlCR32riO5pzc7BfJ3Oa1Zj
qSp+rknUQaXaVKn6duK4h8bFS+jI0HSRpCxylOH8oOGJLr0cSmVYgshFlA4tM+Qu
LySIdvstgA+cpXM/rjMvTtI8NZzVwOzxNMJlGaf0xgeZWEnDB7/bwAFstRUaz11f
yv69MJkXG9mbonQszcTxSzhPSfv0DJxW7PHgXsST4i/J5A6rlAMUaD/Mi3Imftue
g9IwN1Nbl2H8kW3ijhOj5vdEeqGi+TvYjTS8qfrZiAjsMTL+h7FzNIZHfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI0lChQVux/kaxnn1/o3Br7mS5mQMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvalNVS0ZCVzdILVJyR2VmWC1qY0d2dVpMbVpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRNsAwQA
wvICMA0GCSqGSIb3DQEBCwUAA4IBAQA7QO2fcrPkgqwZUru9AshEM4vQA7jPXiRz
RQLHd5G+fEprzOMgvLjfTdt5sU1Ihv+jvwk1Yl0lssdcQEf4OykkwNfpCxL8pru0
QZ4QJBK5nzTGYbAaQAu0YYWIWbDgDjKovhpplWb3xi41gkwhod04pSmLRam6B8vY
q6rst7f+pkHoDjXLsTwTB4WCIBr+i7rso/tdrChLOtCVLxBz3zU0qTPMeX3C0kpc
wOKsnEieFW7X+S0JMdJknS8m7hUrKlE1Ot+1eF+Mwmarl6lOVOo7G1IbLfWuRW8v
Q6Pccu1WBM+aPWsXgO+W/kf8NBxQd5SK5L0EccubAlv4BFV2NbAl
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:45:51 2025 by rpki-client