Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/py8MrsTC_Jcfus41wWR6rNQDn-Q.roa
File: py8MrsTC_Jcfus41wWR6rNQDn-Q.roa (raw, json)
Hash identifier: L3sOqP9bhMp9t1J+lNRk90EXhV9SraOudgYTwLLlLn8=
Subject key identifier: A7:2F:0C:AE:C4:C2:FC:97:1F:BA:CE:35:C1:64:7A:AC:D4:03:9F:E4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422203B281E9CD4F6099EFCDCEB3AC09E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/py8MrsTC_Jcfus41wWR6rNQDn-Q.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 223.27.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3b:28:1e:9c:d4:f6:09:9e:fc:dc:eb:3a:c0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a72f0caec4c2fc971fbace35c1647aacd4039fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:78:00:6f:6c:9d:9d:f1:1d:a5:06:94:f3:
d0:22:c9:42:bd:8b:35:92:bb:08:84:80:27:95:1c:
9f:ea:fd:bb:c4:53:f9:4d:47:5e:50:71:f2:ed:4c:
7a:37:79:a1:6f:e7:64:d2:25:57:57:00:9b:d2:a0:
a5:63:23:8e:9c:48:ef:63:c6:e7:53:ec:98:7d:2d:
93:bf:cc:fd:e0:40:24:09:23:5a:6c:8f:d9:1e:7b:
95:fa:83:00:89:b1:75:91:55:4c:f1:c8:07:17:92:
52:8e:21:5a:3f:05:63:4a:27:52:88:fb:a7:72:03:
14:ff:d8:1e:90:bd:64:34:5b:3c:70:05:a8:c0:47:
f1:b0:b5:60:47:ea:a8:12:8b:d3:7d:2b:5c:04:0b:
e7:a3:63:eb:46:72:e5:a0:19:cc:45:b3:a9:3d:ed:
6e:1b:7b:0b:8f:d1:98:f4:8d:a9:1c:84:5d:b5:43:
cf:a1:e9:95:60:55:2b:b0:fd:f3:d4:62:cd:db:73:
fe:e0:af:8f:cf:b6:bc:a2:0e:db:f6:af:b4:2f:a5:
93:0a:7f:83:43:3a:41:7c:ca:85:ab:6f:39:55:47:
f0:67:a3:4e:56:89:31:c3:10:80:50:23:fa:03:69:
09:46:16:17:d8:57:a0:92:69:d5:b2:d6:9a:2f:31:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2F:0C:AE:C4:C2:FC:97:1F:BA:CE:35:C1:64:7A:AC:D4:03:9F:E4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/py8MrsTC_Jcfus41wWR6rNQDn-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.27.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:84:ec:ba:61:b0:75:e8:98:bf:aa:b0:c8:d0:21:52:d8:ac:
4d:ae:43:73:d7:36:bb:88:4d:37:06:3b:6c:19:f0:2e:49:75:
f9:c3:3c:5e:2f:61:4e:cc:fb:c3:34:74:28:24:13:8f:4f:a6:
f0:da:bb:78:dc:9d:60:28:f9:0e:80:75:94:c3:99:dd:34:a9:
fe:a6:e9:d7:9d:b5:09:ac:9b:0f:30:72:0a:08:d6:7c:e1:63:
56:d9:60:9e:9d:f2:5d:47:2a:46:f9:08:6c:7c:40:c1:2f:bd:
6d:73:42:7f:c6:15:96:aa:53:52:1f:f2:0c:ff:d1:f3:b9:c2:
09:73:75:a7:13:bd:88:04:89:76:ec:e8:27:48:c2:e4:9d:91:
83:9f:aa:46:a2:f4:da:19:72:6c:d4:6d:2b:8d:80:a1:a1:a2:
b2:1a:11:73:1a:a2:75:3f:45:1e:10:82:11:19:66:4c:ff:50:
2c:6a:e7:71:fb:3c:a0:dc:75:a3:71:d5:4d:30:0e:aa:51:3f:
ca:ad:b1:a1:d8:a6:a8:18:6c:67:69:4a:b1:4e:d2:2f:e5:f1:
2e:7a:5b:01:3d:86:bc:5c:16:5a:0c:28:23:f7:ef:c2:38:9d:
4b:70:91:ce:49:2e:4c:0a:34:87:6e:4b:b0:0c:68:70:74:0b:
a5:73:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:51:59 2025 by rpki-client