Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sdf0dKbPH0wo4ep-J03DEtwhE4A.roa
File: sdf0dKbPH0wo4ep-J03DEtwhE4A.roa (raw, json)
Hash identifier: PDbOGxeGxfD5iy+rb6YsJS9klLL5jE+pv0FHcWG8RvE=
Subject key identifier: B1:D7:F4:74:A6:CF:1F:4C:28:E1:EA:7E:27:4D:C3:12:DC:21:13:80
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01942220297E5BCDA557AF4D044354AA6DB5
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sdf0dKbPH0wo4ep-J03DEtwhE4A.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142299
IP address blocks: 37.46.149.0/24 maxlen: 24
45.141.26.0/23 maxlen: 24
89.38.101.0/24 maxlen: 24
185.241.210.0/24 maxlen: 24
188.212.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:29:7e:5b:cd:a5:57:af:4d:04:43:54:aa:6d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1d7f474a6cf1f4c28e1ea7e274dc312dc211380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:de:60:cf:44:bb:74:6c:ef:35:d2:90:0b:
9a:1d:16:c0:ea:26:ef:ca:bb:f8:6e:30:5e:0a:43:
ba:54:9e:04:15:6a:95:71:3e:aa:d1:0d:e9:59:1c:
d4:07:b9:a4:d1:05:24:c4:89:e4:47:94:c5:8a:9f:
c8:42:47:c0:3f:96:ea:17:ff:ec:a8:aa:6c:ad:35:
68:7f:79:d9:44:6c:1d:ab:4e:26:a7:9d:8b:7f:55:
e4:27:96:ff:41:87:8c:11:db:6d:cf:c9:3f:36:88:
d2:95:fa:e9:ac:0d:cc:8c:b3:30:f8:ac:11:cd:4c:
9f:da:79:b2:78:9c:f7:5c:74:01:b2:1e:3a:cd:6a:
59:1b:23:3c:bc:aa:c0:c7:95:e7:2c:c7:8d:89:35:
b8:82:68:db:a2:b3:00:3e:f2:17:b4:ef:b9:ac:e9:
6b:3d:f4:68:eb:1d:96:85:8d:a8:0e:f0:9f:a7:4a:
07:ea:9e:4d:19:ae:65:fa:2e:dd:9d:ae:c2:16:32:
c4:1f:92:77:c1:cd:ec:eb:4c:5b:b5:35:77:e3:0e:
37:fb:46:44:af:c2:99:33:0b:7e:eb:f0:42:0f:da:
af:da:13:45:ee:e6:16:bb:13:12:20:58:76:24:a0:
a2:f0:3a:f2:d4:5b:f2:04:11:63:3f:47:c6:d2:81:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D7:F4:74:A6:CF:1F:4C:28:E1:EA:7E:27:4D:C3:12:DC:21:13:80
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sdf0dKbPH0wo4ep-J03DEtwhE4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.149.0/24
45.141.26.0/23
89.38.101.0/24
185.241.210.0/24
188.212.158.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:12:c6:ed:f4:85:b6:26:2e:44:49:ae:03:62:d5:b5:be:7a:
49:89:ce:a0:7d:68:f2:2a:b7:f7:bc:f1:3c:91:91:15:08:7e:
9f:83:57:7b:06:f7:5e:04:38:7a:b3:fc:3e:13:90:d4:2a:5a:
92:91:81:81:32:ee:c6:17:05:8d:57:08:4c:aa:2f:3b:75:0c:
19:df:03:90:c7:92:a9:ff:c3:08:ae:b0:bc:a7:43:d5:30:7b:
7e:5d:35:6e:91:55:1b:4c:cf:22:cc:84:32:ea:3b:4f:e9:e5:
f6:dc:d3:31:c5:5d:b8:77:14:4f:ba:9b:d6:f8:bc:4a:e4:98:
ec:3c:b5:42:3f:4d:7e:ef:e1:3e:cb:13:32:ce:e6:76:6d:6d:
a8:b9:c5:84:fc:d4:a9:6e:61:f7:04:ec:7c:c4:6e:08:1c:f9:
e8:fa:bf:70:d9:13:c6:b4:5c:2a:d9:9b:1c:8b:07:e9:d7:69:
dd:b2:df:a2:35:29:81:0a:08:8d:c6:54:75:51:78:d3:35:37:
8e:ae:b3:be:fb:83:db:61:c0:95:48:70:1e:17:5a:d9:03:62:
f4:1b:8f:19:1d:cd:3d:65:2c:f0:d8:84:3a:b1:1f:51:a4:6f:
24:13:a9:7d:eb:cd:db:2e:68:19:3a:bb:ea:1a:96:29:ec:73:
34:a7:61:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:00:56 2025 by rpki-client