Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qs1H4yANTRBgyYOPdfGrYIFnTIo.roa
File: qs1H4yANTRBgyYOPdfGrYIFnTIo.roa (raw, json)
Hash identifier: M7GKaEI6uzgHj7/eGpNI5TR98EOVXtHugj5WO1QPvBg=
Subject key identifier: AA:CD:47:E3:20:0D:4D:10:60:C9:83:8F:75:F1:AB:60:81:67:4C:8A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422203539377F5EAB8A5E91B30E7D1D24
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qs1H4yANTRBgyYOPdfGrYIFnTIo.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206286
IP address blocks: 45.141.24.0/24 maxlen: 24
45.144.225.0/24 maxlen: 24
89.31.216.0/24 maxlen: 24
178.239.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:35:39:37:7f:5e:ab:8a:5e:91:b3:0e:7d:1d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aacd47e3200d4d1060c9838f75f1ab6081674c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:97:2f:98:68:98:cc:fa:84:d8:13:bf:92:
66:60:24:ee:de:bc:f0:49:19:49:ae:26:2e:0d:89:
11:6d:60:21:c6:7e:44:55:6e:40:e2:17:80:65:c7:
1d:5d:f9:c3:e4:67:ac:de:b1:b5:2a:49:e0:f7:79:
4a:f1:59:9c:d5:74:e8:4c:35:4d:9b:3d:d9:d9:78:
bd:94:7a:a1:68:6a:bc:9b:c2:03:2a:ec:cc:a0:61:
2d:b4:b8:bd:a0:99:80:92:fc:ee:79:b2:be:44:53:
07:6f:75:4b:93:8c:b0:e0:63:aa:07:77:53:60:62:
5b:d0:69:b6:02:6f:83:33:15:4a:24:76:90:55:ce:
69:38:7f:bc:8a:79:e5:87:88:a7:a0:19:0f:a3:41:
af:e3:65:24:5e:62:07:77:e7:12:73:89:64:dc:ed:
b5:fe:15:63:66:35:07:64:55:b7:1f:65:3e:6c:a0:
4b:74:ab:71:3a:0f:c3:11:d9:0b:75:79:a7:0b:d3:
c1:46:a3:f8:a5:85:11:87:d0:66:66:d0:31:ec:61:
0e:af:fb:ea:f9:a9:db:c9:63:b4:69:ad:cc:ab:a0:
1c:c4:7d:23:75:15:e5:dc:e8:b3:0e:bd:9e:f6:bb:
e9:4b:81:91:de:36:33:d6:15:f7:c9:d5:5f:f1:95:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CD:47:E3:20:0D:4D:10:60:C9:83:8F:75:F1:AB:60:81:67:4C:8A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qs1H4yANTRBgyYOPdfGrYIFnTIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.24.0/24
45.144.225.0/24
89.31.216.0/24
178.239.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:30:2c:15:39:27:9a:a2:6f:48:0d:e6:00:05:d9:c8:bd:b2:
1c:aa:25:29:6a:22:c6:f2:65:d7:07:f9:1c:ce:30:11:8c:cb:
f4:58:61:94:82:20:bf:75:fa:22:76:34:33:27:46:2c:4b:3d:
8b:c9:16:ad:9a:0a:43:71:6f:38:9d:fe:02:b0:47:35:50:26:
7c:cb:41:65:47:2d:9d:64:63:21:5b:a5:21:dc:b2:70:61:fc:
86:cb:39:11:f0:f9:9f:46:91:f8:74:d8:b8:9d:3c:98:aa:66:
9f:1f:a0:f8:99:f7:31:09:79:58:81:bf:48:be:8e:c2:4f:a8:
13:fe:b5:d3:68:86:9e:09:ff:4f:4f:af:3a:8e:f1:7d:a5:99:
66:39:8b:ab:56:4f:77:ad:73:3c:ac:16:f2:4b:a8:b5:19:15:
cb:1f:a8:3e:97:55:4a:18:21:80:15:13:18:c7:53:bc:c4:3f:
28:24:a3:1b:c0:d2:0a:9f:73:0f:61:6f:9f:1b:28:b7:04:fa:
fc:04:49:5c:c9:e5:5d:f2:cf:0f:5b:fd:f0:d5:9a:50:a0:24:
88:2a:6a:8e:a4:bd:4b:dc:ed:1c:22:4c:7d:70:fd:09:f5:49:
64:7b:b2:4a:83:d3:be:bb:b3:11:e9:e8:4d:15:53:5f:8f:04:
0f:76:ef:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:50:11 2025 by rpki-client