Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sTYXevgpUxcqQorCOrR1QePZZK8.roa
File: sTYXevgpUxcqQorCOrR1QePZZK8.roa (raw, json)
Hash identifier: qLBia1/o9UtThVoWXY+3bsI+hs0LHcvahxeAoL/bIqo=
Subject key identifier: B1:36:17:7A:F8:29:53:17:2A:42:8A:C2:3A:B4:75:41:E3:D9:64:AF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01942220392D2B2EEA20A698E07A5B64D296
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sTYXevgpUxcqQorCOrR1QePZZK8.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210636
IP address blocks: 94.176.111.0/24 maxlen: 24
217.74.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:39:2d:2b:2e:ea:20:a6:98:e0:7a:5b:64:d2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b136177af82953172a428ac23ab47541e3d964af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:ac:cb:b1:e5:bd:76:31:c4:f4:83:5b:7b:
ac:3a:c5:c5:6e:59:37:b2:07:47:fb:d8:06:4a:79:
1d:3f:02:49:48:f5:2f:ca:c8:86:98:b0:97:0e:88:
cd:82:04:44:68:79:ce:52:01:c4:f6:a9:fa:46:4a:
0e:c8:8c:12:ec:bf:1d:21:14:9e:57:9e:ba:a1:02:
58:f9:3f:d8:93:58:10:93:d5:25:a3:7b:13:35:a0:
91:0c:77:a8:a3:2f:4b:0d:73:b1:2c:ec:cb:70:a3:
bf:e2:96:76:95:f8:ee:e9:35:54:f0:cb:bc:ae:2d:
06:64:4f:ac:c9:a1:3b:e3:35:dc:bb:ef:67:b9:c3:
4a:e5:e8:0e:0e:dc:f7:68:1f:38:c0:f3:3c:4c:f9:
0e:13:ab:2e:bf:8c:34:a7:7e:14:41:ba:89:3f:8e:
ad:fc:ba:b1:e5:5f:79:38:aa:b6:04:e5:b3:7a:35:
1d:0f:15:83:4c:84:28:55:cb:42:6e:2a:3e:cb:63:
48:3f:7a:35:8c:87:3d:a9:13:d9:d0:17:0a:4c:c8:
ed:18:2e:f0:54:45:7e:8e:d1:c5:b8:73:fa:5a:15:
c5:40:d8:1c:2f:b6:a0:2a:36:64:dc:7b:bb:fe:e6:
b5:24:55:67:84:4a:13:5d:fa:8f:b3:38:ac:3d:64:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:36:17:7A:F8:29:53:17:2A:42:8A:C2:3A:B4:75:41:E3:D9:64:AF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sTYXevgpUxcqQorCOrR1QePZZK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.111.0/24
217.74.20.0/24
Signature Algorithm: sha256WithRSAEncryption
55:37:47:d2:5e:8e:0f:c0:45:c9:3f:71:93:c1:89:13:28:5e:
0a:3e:1e:6c:ea:97:6a:28:2e:82:30:13:02:7e:4e:9d:af:24:
d7:ca:8a:05:87:c9:30:17:a5:0c:c1:49:a6:b5:ae:c2:43:0d:
00:57:c4:05:47:b7:55:f3:80:77:0f:ea:e8:4a:a2:a7:18:16:
fd:25:23:fc:c7:0e:f4:ba:7d:71:dc:b0:7d:e4:f8:19:0f:e5:
86:5e:17:0d:62:48:a2:21:22:8f:10:f8:dc:63:d7:76:f0:ee:
eb:47:e7:ed:bb:fe:90:4b:fa:e2:c7:f5:10:8f:28:10:4d:fa:
1d:32:77:8c:e4:b3:26:3e:60:9c:8c:c0:86:03:be:3b:ac:b4:
e4:7a:a5:03:f9:81:86:d5:39:dd:be:24:7e:5a:dc:f8:9c:f4:
f3:23:5c:c4:7a:30:39:7a:0a:45:75:74:05:a2:86:3a:65:19:
fb:07:26:fc:0f:67:ff:f7:a9:af:77:09:24:a8:85:20:06:c5:
54:1e:a1:dd:60:90:4e:22:ae:57:7b:f7:0e:23:ff:cb:35:15:
dc:55:f7:0e:84:cb:66:2f:20:6a:86:e5:74:e0:d8:b2:5c:a8:
4c:65:69:74:15:8e:e5:9e:38:39:3e:a3:bd:02:55:2a:db:e5:
ee:ef:1c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:44:52 2025 by rpki-client