Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/xsNFwwJqIFDqHRh6iHJNx4SLBeE.roa
File: xsNFwwJqIFDqHRh6iHJNx4SLBeE.roa (raw, json)
Hash identifier: yC95xFmXXvT9Dp7njSaukZvCRPEQSlMDg+PaDv2Vfrw=
Subject key identifier: C6:C3:45:C3:02:6A:20:50:EA:1D:18:7A:88:72:4D:C7:84:8B:05:E1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01942220284C68CDFF4F5A7D72BB399AB032
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/xsNFwwJqIFDqHRh6iHJNx4SLBeE.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138687
IP address blocks: 185.255.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:28:4c:68:cd:ff:4f:5a:7d:72:bb:39:9a:b0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6c345c3026a2050ea1d187a88724dc7848b05e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:b2:e0:f6:29:d9:af:36:ac:bf:e3:34:29:
dc:6e:ed:db:17:f3:af:79:77:19:a8:38:84:42:d7:
d2:cc:2b:41:cb:7c:9b:86:b6:65:06:d6:c8:8c:39:
3a:7e:10:85:e0:04:50:af:b7:e9:be:0c:48:96:1b:
73:04:ec:1f:f6:fc:2c:65:03:1b:d1:56:0a:7b:9b:
46:92:28:99:5b:1a:0f:30:84:b6:60:bb:24:c2:6a:
7a:56:df:87:ce:35:7c:60:99:0b:10:54:5d:51:6a:
1e:65:f1:1c:e0:14:ea:cd:96:c1:3c:f8:97:1f:b9:
57:10:fe:a8:e9:72:7c:73:07:3f:46:50:ee:5f:70:
7b:95:16:43:fd:23:30:a4:be:eb:cd:0c:0d:26:0c:
c5:4d:d6:24:b9:e4:78:72:9e:23:82:3c:ee:67:82:
9d:aa:8a:81:10:99:ec:46:ba:52:04:84:91:66:e8:
9d:01:8b:02:fb:5c:8c:7c:1f:a3:2f:97:59:78:84:
3e:0a:c8:4c:a1:5f:f2:2a:f7:3a:e8:d6:0d:69:9a:
3a:b3:86:dd:f4:63:cc:18:5c:29:2b:fb:96:22:08:
ba:ab:70:82:d9:10:df:cc:0d:78:15:d4:85:8e:73:
89:9c:12:fd:ac:b6:e3:ac:e1:26:bf:7b:c6:c2:77:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C3:45:C3:02:6A:20:50:EA:1D:18:7A:88:72:4D:C7:84:8B:05:E1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/xsNFwwJqIFDqHRh6iHJNx4SLBeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.171.0/24
Signature Algorithm: sha256WithRSAEncryption
04:25:72:bd:cf:32:dc:d6:c4:94:e5:9b:69:c8:62:66:52:e9:
3b:d8:00:53:0b:01:62:20:e2:b9:ed:22:8a:ca:b6:c0:e9:08:
12:a7:fa:12:b6:27:15:99:12:31:b2:47:69:8a:a7:12:fd:f5:
cd:49:fd:00:32:8f:9b:c6:9e:d7:ee:2f:10:f2:e6:35:ea:f6:
55:76:6a:69:2b:c2:bd:d1:8b:ee:ff:a9:f7:3d:38:6e:46:b8:
e3:35:2c:df:f1:63:3b:0d:77:47:18:c1:91:4b:a6:88:1c:a4:
02:7a:fb:e3:2e:2b:fe:2f:b5:01:75:fe:0b:16:7c:a3:3a:8a:
1b:84:b6:bb:03:90:6c:ae:61:14:0c:f5:db:00:0c:07:96:27:
be:c5:7d:08:3e:a0:01:a4:6e:9a:d3:74:1d:aa:a2:50:db:e3:
9c:57:67:05:61:af:6a:63:c6:9d:41:4e:33:10:0b:7c:25:16:
93:04:4e:99:dc:01:87:c8:06:37:1b:a4:7b:2d:a5:f0:96:45:
4a:77:27:48:87:6d:83:a8:59:4d:6a:8f:eb:03:b5:03:80:0b:
f6:25:0d:9f:90:5f:de:4f:da:28:25:0c:ce:30:aa:5c:31:f1:
1c:47:ab:bf:9a:9d:80:6b:2c:f3:77:85:f5:56:6d:51:3d:9f:
d1:09:5d:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIChMaM3/T1p9crs5mrAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjUwMTAxMTM0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmMzNDVjMzAyNmEyMDUwZWExZDE4N2E4ODcyNGRjNzg0OGIwNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAGy4PYp2a82rL/jNCncbu3bF/Ov
eXcZqDiEQtfSzCtBy3ybhrZlBtbIjDk6fhCF4ARQr7fpvgxIlhtzBOwf9vwsZQMb
0VYKe5tGkiiZWxoPMIS2YLskwmp6Vt+HzjV8YJkLEFRdUWoeZfEc4BTqzZbBPPiX
H7lXEP6o6XJ8cwc/RlDuX3B7lRZD/SMwpL7rzQwNJgzFTdYkueR4cp4jgjzuZ4Kd
qoqBEJnsRrpSBISRZuidAYsC+1yMfB+jL5dZeIQ+CshMoV/yKvc66NYNaZo6s4bd
9GPMGFwpK/uWIgi6q3CC2RDfzA14FdSFjnOJnBL9rLbjrOEmv3vGwne7AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMbDRcMCaiBQ6h0YeohyTceEiwXhMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEveHNORnd3SnFJRkRxSFJoNmlISk54NFNMQmVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf+rMA0G
CSqGSIb3DQEBCwUAA4IBAQAEJXK9zzLc1sSU5ZtpyGJmUuk72ABTCwFiIOK57SKK
yrbA6QgSp/oSticVmRIxskdpiqcS/fXNSf0AMo+bxp7X7i8Q8uY16vZVdmppK8K9
0Yvu/6n3PThuRrjjNSzf8WM7DXdHGMGRS6aIHKQCevvjLiv+L7UBdf4LFnyjOoob
hLa7A5BsrmEUDPXbAAwHlie+xX0IPqABpG6a03QdqqJQ2+OcV2cFYa9qY8adQU4z
EAt8JRaTBE6Z3AGHyAY3G6R7LaXwlkVKdydIh22DqFlNao/rA7UDgAv2JQ2fkF/e
T9ooJQzOMKpcMfEcR6u/mp2Aayzzd4X1Vm1RPZ/RCV0m
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:49:35 2025 by rpki-client