Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kKhq_ZfG77WzZZoosYrtTpqsyWs.roa
File: kKhq_ZfG77WzZZoosYrtTpqsyWs.roa (raw, json)
Hash identifier: R8AmAOMR+xNiaj2ofzD3pToyUOXqvYpeXdfvGs+ucZ0=
Subject key identifier: 90:A8:6A:FD:97:C6:EF:B5:B3:65:9A:28:B1:8A:ED:4E:9A:AC:C9:6B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01942220216E76DEF4FE4C243326FD01437F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kKhq_ZfG77WzZZoosYrtTpqsyWs.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56309
IP address blocks: 45.154.24.0/22 maxlen: 24
141.98.16.0/22 maxlen: 24
203.159.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:21:6e:76:de:f4:fe:4c:24:33:26:fd:01:43:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90a86afd97c6efb5b3659a28b18aed4e9aacc96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fd:40:07:90:9f:8e:b1:93:dc:23:ef:08:cf:
0d:eb:36:9e:53:47:09:3a:f2:53:b2:f6:93:3e:19:
a5:06:a6:25:7b:15:fb:6e:60:4a:59:9c:cd:56:20:
49:0a:60:84:78:9a:17:cd:67:f7:8c:f8:3d:f0:a6:
64:35:7c:62:b3:f3:b5:53:80:b7:aa:f5:aa:b2:41:
cb:be:12:51:ff:d8:f2:13:3b:7e:41:42:0c:8c:8e:
0a:90:3e:de:5d:df:7c:a9:4a:96:9d:7e:c5:73:28:
94:bf:05:05:09:2c:5c:b3:53:ad:fa:f5:38:cb:0b:
8e:ed:c1:f8:44:02:46:d4:08:5d:f4:da:5d:8b:1f:
7e:ec:0c:90:11:3e:da:a8:24:67:cd:65:19:b7:e3:
ae:e0:c4:c9:a1:80:47:de:13:5d:7a:db:c4:9c:eb:
66:29:6f:00:71:88:61:95:6d:a7:0b:4b:70:09:0b:
04:a5:81:59:24:b4:c1:24:7b:54:e9:9e:00:8b:67:
54:bc:92:7d:62:5a:4a:d5:66:c8:9f:ec:79:33:2d:
7f:a3:ec:74:43:34:23:7a:d7:84:c5:76:d2:27:b4:
84:47:af:29:d4:69:55:f4:f9:58:76:c7:56:00:05:
2b:e2:6d:11:46:07:26:b0:50:91:b3:9c:5c:26:42:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A8:6A:FD:97:C6:EF:B5:B3:65:9A:28:B1:8A:ED:4E:9A:AC:C9:6B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kKhq_ZfG77WzZZoosYrtTpqsyWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.24.0/22
141.98.16.0/22
203.159.92.0/22
Signature Algorithm: sha256WithRSAEncryption
68:d0:b9:09:41:34:81:bc:3b:8a:85:3d:7c:80:f5:a2:59:5b:
5c:46:e0:c3:77:87:53:9d:7c:62:4b:1b:60:e7:cd:78:54:37:
1f:77:4f:5b:ee:64:ce:c0:ac:84:e7:eb:1f:0e:0d:d4:af:0c:
4e:5c:11:50:26:28:3a:13:16:89:27:27:ff:a8:18:0a:e0:72:
ac:bb:64:3f:6f:2e:fc:bc:a9:39:1e:78:92:40:12:82:9c:96:
b6:22:c5:96:64:f2:6b:99:d1:c5:98:66:a7:46:c4:7f:03:9a:
72:e2:ed:9a:50:66:86:fe:f6:81:fb:91:27:09:d0:08:f2:39:
48:91:13:4e:83:fc:e5:3c:1f:cd:45:41:7a:cc:1b:4b:7e:4d:
b4:45:17:d6:6c:43:92:ad:aa:4e:0b:85:66:31:a5:72:16:01:
48:f8:76:b6:1c:3e:b7:cd:25:0a:df:03:b2:88:40:0d:d0:25:
f5:c8:9b:8a:d8:0e:d5:03:20:ba:ed:ba:5e:cb:a7:81:76:d5:
6a:bb:1e:05:42:9b:c7:d9:8b:86:83:53:54:e7:aa:ae:93:14:
72:00:b3:e8:27:99:3d:f4:56:8b:f5:d4:06:7d:3f:fb:78:68:
8e:4b:94:a3:0e:00:45:72:0b:3e:e8:85:39:17:18:a7:60:e9:
e9:30:66:df
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQiICFudt70/kwkMyb9AUN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjUwMTAxMTM0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGE4NmFmZDk3YzZlZmI1YjM2NTlhMjhiMThhZWQ0ZTlhYWNjOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/1AB5CfjrGT3CPvCM8N6zaeU0cJ
OvJTsvaTPhmlBqYlexX7bmBKWZzNViBJCmCEeJoXzWf3jPg98KZkNXxis/O1U4C3
qvWqskHLvhJR/9jyEzt+QUIMjI4KkD7eXd98qUqWnX7FcyiUvwUFCSxcs1Ot+vU4
ywuO7cH4RAJG1Ahd9Npdix9+7AyQET7aqCRnzWUZt+Ou4MTJoYBH3hNdetvEnOtm
KW8AcYhhlW2nC0twCQsEpYFZJLTBJHtU6Z4Ai2dUvJJ9YlpK1WbIn+x5My1/o+x0
QzQjeteExXbSJ7SER68p1GlV9PlYdsdWAAUr4m0RRgcmsFCRs5xcJkKCTwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJCoav2Xxu+1s2WaKLGK7U6arMlrMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEva0tocV9aZkc3N1d6Wlpvb3NZcnRUcHFzeVdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZoYAwQC
jWIQAwQCy59cMA0GCSqGSIb3DQEBCwUAA4IBAQBo0LkJQTSBvDuKhT18gPWiWVtc
RuDDd4dTnXxiSxtg5814VDcfd09b7mTOwKyE5+sfDg3UrwxOXBFQJig6ExaJJyf/
qBgK4HKsu2Q/by78vKk5HniSQBKCnJa2IsWWZPJrmdHFmGanRsR/A5py4u2aUGaG
/vaB+5EnCdAI8jlIkRNOg/zlPB/NRUF6zBtLfk20RRfWbEOSrapOC4VmMaVyFgFI
+Ha2HD63zSUK3wOyiEAN0CX1yJuK2A7VAyC67bpey6eBdtVqux4FQpvH2YuGg1NU
56qukxRyALPoJ5k99FaL9dQGfT/7eGiOS5SjDgBFcgs+6IU5FxinYOnpMGbf
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:48:50 2025 by rpki-client