Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/l8weSaUHxZOz2zswku_2HIr0c5s.roa
File: l8weSaUHxZOz2zswku_2HIr0c5s.roa (raw, json)
Hash identifier: 34Lpd8SzXu2HNKK1P5Xpv+rMQfx8c16hYVnYV+buYS0=
Subject key identifier: 97:CC:1E:49:A5:07:C5:93:B3:DB:3B:30:92:EF:F6:1C:8A:F4:73:9B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0194222037097C2474F5304BACC1A83F3646
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/l8weSaUHxZOz2zswku_2HIr0c5s.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209014
IP address blocks: 185.192.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:37:09:7c:24:74:f5:30:4b:ac:c1:a8:3f:36:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97cc1e49a507c593b3db3b3092eff61c8af4739b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:90:e8:ef:99:5d:2e:fb:b7:e7:68:95:50:
65:6f:e2:29:c4:38:2a:56:35:3e:81:3a:c7:0f:e7:
84:1b:29:4a:97:4a:c2:92:aa:3e:2a:e6:d0:52:3f:
13:f0:12:f5:1c:c9:4d:38:48:63:01:ac:03:e9:bb:
e4:56:88:62:ac:2b:eb:a8:53:74:d2:98:03:3f:f4:
3a:20:2b:45:22:06:ab:58:2d:c2:d6:c4:67:03:af:
36:f6:c3:89:df:98:a1:12:36:86:d9:e5:1b:39:f8:
64:74:88:2e:d5:12:82:52:41:7f:5d:f5:01:cb:08:
5b:25:be:4b:6b:56:47:09:5a:41:bc:35:bd:09:a4:
7c:aa:b2:a7:66:9d:5f:b7:31:70:79:08:15:f2:1d:
4f:a0:d8:79:04:5d:a9:da:1a:31:fe:7a:b4:c4:ee:
08:44:c4:91:25:77:ff:be:68:6a:29:96:df:44:32:
c3:39:be:85:31:91:9f:56:f1:27:02:58:18:0c:db:
87:fb:7e:4f:18:15:3f:9d:10:a4:e7:47:ac:10:7e:
3f:38:ac:76:0c:3f:dd:73:ac:20:fe:cc:63:38:47:
8f:de:42:c5:83:24:b0:79:b9:e9:64:07:04:37:3c:
d7:7b:cf:f1:89:d2:7d:63:47:56:34:89:26:62:bd:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CC:1E:49:A5:07:C5:93:B3:DB:3B:30:92:EF:F6:1C:8A:F4:73:9B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/l8weSaUHxZOz2zswku_2HIr0c5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.17.0/24
Signature Algorithm: sha256WithRSAEncryption
36:47:fa:03:cd:3c:20:22:d0:13:f6:89:20:66:5e:1a:f1:27:
af:3a:fc:14:a6:65:9b:1f:6d:e0:74:05:77:64:d5:03:0b:b8:
9a:90:20:10:45:04:4a:88:45:be:45:77:26:f3:e0:e6:c0:f4:
db:22:09:61:04:0a:56:7c:60:4b:a9:e7:42:f7:4c:48:fc:9d:
97:92:93:38:e9:ed:56:f5:b5:41:f3:52:f2:b8:46:7e:ae:21:
42:3c:68:84:8a:8d:1d:25:9e:a5:89:fa:ab:99:26:cd:5a:04:
e8:1d:08:4d:7f:c4:37:e1:67:57:aa:4a:86:8a:1f:7f:7e:35:
6d:71:20:3e:44:05:90:4f:4d:06:4e:64:2c:de:7d:10:58:d0:
a3:e1:54:eb:6e:df:29:0e:6c:5c:f6:01:bd:3d:90:c6:af:15:
e1:c5:c5:86:6e:eb:e6:ae:a5:d5:54:ae:b4:97:81:80:9d:fb:
d8:0b:96:50:ef:e9:80:9b:f3:a3:2e:3a:f6:40:a9:08:a7:58:
29:88:44:db:14:4b:14:3b:44:0f:e9:96:9e:6f:04:fc:e9:64:
76:5c:b4:9b:2d:f1:d1:0a:09:f3:65:d6:f0:bc:5a:39:d2:fb:
9a:4c:e4:26:5c:53:56:02:9c:d5:a9:65:45:61:e2:96:6f:93:
dd:d5:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:51:53 2025 by rpki-client