Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oS18HsC4I2gJS4n9rsWg6s4ipok.roa
File: oS18HsC4I2gJS4n9rsWg6s4ipok.roa (raw, json)
Hash identifier: GQHtvfoAkL/EZukRdrEl5j/yI9kYxGZ1OR6qRuloFuE=
Subject key identifier: A1:2D:7C:1E:C0:B8:23:68:09:4B:89:FD:AE:C5:A0:EA:CE:22:A6:89
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0194222035A64790089432FB57CB4E8DBD65
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oS18HsC4I2gJS4n9rsWg6s4ipok.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206804
IP address blocks: 192.159.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:35:a6:47:90:08:94:32:fb:57:cb:4e:8d:bd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a12d7c1ec0b82368094b89fdaec5a0eace22a689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:2f:ce:da:26:74:b7:c0:a8:6f:9a:65:fc:
f6:62:4e:25:99:e7:99:29:25:0f:01:5b:db:6a:a7:
28:52:0d:d2:65:bc:ec:2b:40:f1:f3:ed:df:58:8c:
3b:c0:77:9a:96:34:dc:d6:90:0f:84:cb:8e:69:ef:
e7:f0:98:9c:01:db:de:b1:b4:68:a4:db:0c:8a:99:
2e:d4:5e:ba:4b:7f:19:7d:c7:a1:02:09:21:9b:1e:
e3:51:0d:24:24:5a:51:1e:6e:40:01:8a:ec:b9:32:
aa:a2:09:94:58:2c:e8:64:1f:9a:06:91:8c:13:58:
0a:3b:55:5e:7c:51:ea:54:e9:b3:0a:d4:dc:1d:86:
d3:30:a1:b3:4f:af:3d:c5:f4:a4:0a:35:aa:87:4c:
52:57:6d:bb:de:d0:c5:8f:64:f4:75:32:1d:4a:2f:
c2:bb:a7:f2:96:e6:a2:de:6a:48:c7:66:a9:53:f6:
d5:5e:49:99:ef:60:d3:88:78:b3:77:95:de:ad:10:
64:58:1f:39:9b:75:a5:fb:e9:4a:c1:2d:e6:a7:a6:
4d:3f:7e:a6:03:4d:a2:98:57:1d:5d:da:68:1c:7c:
6a:5c:5a:d9:a6:43:53:95:ae:28:8a:e1:60:b3:57:
08:8b:7f:b7:9b:ba:fc:fd:3c:cf:5a:5b:31:a1:e3:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2D:7C:1E:C0:B8:23:68:09:4B:89:FD:AE:C5:A0:EA:CE:22:A6:89
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oS18HsC4I2gJS4n9rsWg6s4ipok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.159.100.0/23
Signature Algorithm: sha256WithRSAEncryption
07:cf:66:b2:61:64:e3:5b:59:a3:38:14:58:1c:37:d6:20:73:
bb:38:c2:d0:87:0d:75:02:58:5e:05:49:94:7c:28:32:55:d5:
fd:74:aa:0e:d3:6f:4d:f3:9d:88:9c:47:43:73:69:82:d2:ee:
48:be:d2:d7:90:4d:05:1d:5e:03:00:9d:d1:07:85:cf:b1:76:
ed:bc:a9:0a:8f:7c:f2:40:24:3f:fa:87:ed:0e:36:31:a2:90:
1c:b0:36:46:4e:e6:5a:50:d3:21:14:d8:f4:e5:e9:58:1c:27:
05:a7:00:0a:03:b0:03:98:da:e8:ea:83:d3:f5:0c:41:d7:a3:
d1:c7:57:fe:00:95:af:c0:55:b4:50:df:f3:ae:9c:1a:7d:cb:
ac:aa:0d:2a:d8:d8:15:20:83:24:0e:2e:16:af:0c:5f:f2:97:
5a:e9:c4:58:18:7b:9c:7b:c4:f1:fa:74:61:09:35:8e:05:49:
44:74:e2:3e:4e:e5:d2:0a:0a:f3:fa:07:77:3b:3b:d7:fb:ff:
46:d7:f8:90:cc:84:44:c1:60:ab:49:be:7b:5b:34:2f:8e:e5:
71:7b:72:35:e6:12:c8:da:7d:94:58:dc:31:a4:2c:d6:ea:87:
c1:9d:05:eb:ef:c7:31:f5:f4:ec:59:42:96:08:a3:d9:74:34:
20:fc:bb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:44:38 2025 by rpki-client