Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/s8acqKfOI2oiLHUUQ9n1X4Z5ijo.roa
File: s8acqKfOI2oiLHUUQ9n1X4Z5ijo.roa (raw, json)
Hash identifier: Dcl6WJRsey5MUQnlyfypH+H6ryIYH1sGVu+jh0cbfPg=
Subject key identifier: B3:C6:9C:A8:A7:CE:23:6A:22:2C:75:14:43:D9:F5:5F:86:79:8A:3A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422203BA5D51533FA19381BB2CC88C812
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/s8acqKfOI2oiLHUUQ9n1X4Z5ijo.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211826
IP address blocks: 45.135.185.0/24 maxlen: 24
194.32.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3b:a5:d5:15:33:fa:19:38:1b:b2:cc:88:c8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3c69ca8a7ce236a222c751443d9f55f86798a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:82:59:a2:54:52:f0:48:e3:e3:1f:1f:da:2e:
cb:8d:42:bc:d5:b0:dd:d6:d8:4a:da:af:92:a8:1f:
e5:f3:78:ee:49:b2:7f:48:8b:e6:71:fb:01:e8:23:
13:aa:a9:4f:68:b2:fd:b3:e4:56:ee:0d:00:55:dc:
2a:42:6a:a9:20:46:45:45:08:2f:19:b6:59:9a:94:
8f:3b:26:84:1e:62:78:b0:01:b3:9c:99:de:69:51:
3b:70:2c:86:a1:25:8a:88:c3:b4:75:ea:b9:f5:56:
40:dc:9b:85:9c:36:c7:b4:a6:b8:6a:63:11:5e:42:
d5:7c:34:f0:ce:49:4a:c9:e9:91:7c:60:67:cd:41:
4c:e6:69:4f:ca:2a:a7:4b:e4:9c:17:08:b7:4b:36:
b3:02:fa:3a:88:fb:b8:94:f3:45:b0:0f:0f:72:2c:
c8:b2:fe:a8:02:a5:9e:72:5a:ac:ff:e5:e3:49:b3:
85:30:34:f3:62:7b:d3:fa:2d:d6:c9:6c:8a:b2:01:
e7:9a:91:09:21:49:cd:c3:e9:df:c7:50:e0:58:76:
c2:e5:6a:99:73:7b:82:2a:6c:f0:dc:ab:36:1f:3a:
43:ff:68:67:e8:c9:88:02:a5:af:5b:0f:c1:df:9f:
56:0a:2f:9a:48:3b:13:10:91:69:42:41:78:81:c4:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C6:9C:A8:A7:CE:23:6A:22:2C:75:14:43:D9:F5:5F:86:79:8A:3A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/s8acqKfOI2oiLHUUQ9n1X4Z5ijo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.185.0/24
194.32.123.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c1:c0:95:cb:15:1b:b3:d9:f2:c5:1e:da:22:96:a0:7c:29:
ae:ee:d6:de:eb:c6:e9:7f:46:06:b9:f2:99:89:30:82:88:0e:
58:75:23:9f:dc:dc:48:f9:c6:5a:da:5a:0c:95:79:6d:27:be:
e3:d3:29:51:5d:5d:29:b5:53:de:a5:59:78:68:b7:3d:d6:74:
c8:62:bc:ce:dc:f8:63:bd:9f:83:aa:ec:86:09:4d:73:43:e8:
f7:a3:0d:01:6f:e1:c3:72:2c:63:68:3e:f4:7e:71:2e:12:1f:
6d:d3:45:ad:a7:b4:e2:9e:00:a9:e1:ba:46:2e:4a:13:da:52:
4c:55:6a:1c:0d:59:6a:6d:20:07:2c:dc:58:d2:7d:a5:70:f1:
d2:16:b3:f1:95:5a:41:5c:1f:43:73:8b:28:8b:01:de:ca:5b:
ad:6c:98:7b:b7:13:20:77:e1:9c:f0:9c:6c:9e:06:28:63:2b:
b1:d9:b0:1b:d5:4b:92:a0:57:01:11:7c:8f:f5:fc:5c:7f:b6:
48:fe:e2:1f:15:fb:66:51:7e:ed:b9:d0:89:ca:d1:31:25:50:
0c:05:74:33:ab:e8:10:cf:84:33:6a:36:05:b2:30:6b:a7:41:
24:b9:50:48:07:7b:5d:a0:26:a5:cc:de:ba:12:e9:ea:9d:18:
b0:94:b2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:56:22 2025 by rpki-client