Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oFkHUYOSdk6ydeQNq9yzUCLGob0.roa
File: oFkHUYOSdk6ydeQNq9yzUCLGob0.roa (raw, json)
Hash identifier: FhyXRBGAF48bM59CwRc+JOUieR6SqtdSi56MPRTMTpQ=
Subject key identifier: A0:59:07:51:83:92:76:4E:B2:75:E4:0D:AB:DC:B3:50:22:C6:A1:BD
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422201F2484BC22F09F4E12A43E1F33EC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oFkHUYOSdk6ydeQNq9yzUCLGob0.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 45.130.201.0/24 maxlen: 24
62.106.89.0/24 maxlen: 24
185.244.138.0/24 maxlen: 24
212.119.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1f:24:84:bc:22:f0:9f:4e:12:a4:3e:1f:33:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a05907518392764eb275e40dabdcb35022c6a1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:cb:3c:65:cd:96:da:ec:f4:88:f3:a9:33:
6a:68:30:4c:83:cc:35:5f:e5:0a:81:ce:63:97:e8:
53:85:4b:8e:c7:6b:e5:2a:dd:3f:d4:23:28:0d:e0:
d5:05:de:c3:d4:8f:3d:8b:16:25:f3:1c:84:46:96:
20:db:ca:c3:52:d6:1a:fd:32:36:ee:f9:48:e0:a4:
83:82:10:61:fb:81:4c:41:28:2d:97:33:6d:89:8b:
a6:10:fb:89:cf:f1:fd:fa:9f:53:58:05:68:29:a2:
da:50:28:99:43:3d:6d:ef:33:43:a8:6b:30:a9:4c:
d9:d3:09:69:cc:7b:a7:56:47:9e:e2:db:02:a6:9a:
1c:28:f6:66:21:17:7e:ba:a6:9a:4e:82:04:b1:fc:
17:1d:dd:7d:a4:fe:c9:6c:fd:26:48:06:45:df:20:
b5:fd:1a:79:1b:d8:fb:de:6d:d8:c2:c2:c2:aa:c3:
ff:c5:16:44:71:45:60:07:f6:84:03:52:bd:0b:a9:
9b:4d:3c:34:c3:64:9f:77:89:73:18:89:10:69:2b:
33:96:e4:73:f7:db:26:49:17:fc:da:88:22:c4:56:
68:c1:18:69:18:50:37:ea:9a:8c:74:6e:65:2e:6c:
63:ab:92:20:2f:6a:13:14:9e:5e:47:a7:dc:01:10:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:59:07:51:83:92:76:4E:B2:75:E4:0D:AB:DC:B3:50:22:C6:A1:BD
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oFkHUYOSdk6ydeQNq9yzUCLGob0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.201.0/24
62.106.89.0/24
185.244.138.0/24
212.119.35.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ac:15:80:4d:3f:0c:4d:f1:0f:50:06:e9:35:2b:3c:d8:17:
47:b5:c4:ba:39:96:86:d5:59:3e:21:a4:6a:5e:b9:7f:27:cb:
80:f2:6f:28:7d:10:58:59:53:b1:31:a3:1e:03:16:e5:db:94:
b8:ad:a8:24:96:be:d0:21:ff:c3:f9:31:f5:81:8e:c8:b3:a8:
84:94:66:39:4e:c3:05:c9:78:7c:2d:e1:0e:15:a4:9c:95:99:
c9:a5:5b:f7:ed:70:0e:23:d4:a9:27:9a:d9:29:14:6f:ef:73:
56:ad:e8:76:98:4e:0f:be:9c:a8:dc:f0:04:57:29:05:34:9e:
7b:6e:44:59:42:3c:ad:8a:e6:eb:12:1a:6e:59:ce:ad:5e:a7:
00:79:86:db:89:92:ca:0b:0d:c4:00:f8:f8:5c:20:5c:f0:8e:
c1:09:59:38:c3:f2:d9:fe:63:f9:40:db:9c:26:fb:1d:87:ce:
84:14:69:74:db:26:e5:cb:52:5e:c4:25:1e:0f:ec:fd:e5:70:
8b:6d:c1:8b:15:f9:de:9a:0c:0e:bf:15:9b:7a:4c:0e:e7:cb:
8e:50:fd:c2:fc:c5:0d:20:fe:a7:99:d9:c8:04:85:30:3a:8f:
dd:fb:05:a1:e3:0d:2f:12:2b:fa:33:54:4e:98:ef:74:1a:69:
4f:b7:0e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:37:27 2025 by rpki-client