Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zgPqEbD1aiMiYvBI659rSNodEzY.roa
File: zgPqEbD1aiMiYvBI659rSNodEzY.roa (raw, json)
Hash identifier: jr8FpuiOdKlS7opAs51ieMTZ35JUCpCeNcBWpVG10p4=
Subject key identifier: CE:03:EA:11:B0:F5:6A:23:22:62:F0:48:EB:9F:6B:48:DA:1D:13:36
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0194222025DDD7F3609AFF8830079A6CF8C4
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zgPqEbD1aiMiYvBI659rSNodEzY.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62096
IP address blocks: 192.159.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:25:dd:d7:f3:60:9a:ff:88:30:07:9a:6c:f8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce03ea11b0f56a232262f048eb9f6b48da1d1336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:61:bd:24:2a:19:f5:a3:ae:1c:2d:ac:51:
3d:ec:a0:85:30:d0:c9:89:05:30:e6:c6:88:82:31:
a0:bb:39:86:63:ff:cb:17:74:fa:fe:6f:cd:0e:6c:
f8:88:93:67:fa:14:1e:aa:2c:53:60:39:a7:4c:f2:
70:08:6c:4b:3f:01:2f:6b:38:2e:d8:20:25:e4:7a:
ac:b2:8c:3d:80:13:8b:f1:c0:39:30:10:67:4e:74:
78:df:05:a8:0d:72:8e:3c:9d:e0:b7:31:fa:a4:1d:
eb:38:d1:3e:ed:df:49:b2:63:59:51:f3:d4:9b:74:
f2:5e:da:58:0b:13:b4:1e:a7:a1:1e:d6:1b:e7:a8:
c5:43:e7:1d:82:93:0b:a1:04:d0:bf:e1:df:0d:ba:
d5:aa:c7:a7:dd:5b:1b:3b:c6:2b:cf:e9:f8:38:9d:
d3:8a:c8:a3:db:0c:ad:10:71:05:79:ea:e0:93:a9:
f3:b7:ef:d9:43:c9:80:43:46:0e:66:3f:5c:11:f4:
fd:4c:1a:e7:76:7b:0a:e1:0c:34:e2:80:c5:11:4d:
1e:e6:ad:e5:8c:a4:31:6e:2d:f4:94:c5:df:da:b9:
e6:e9:a2:bd:71:06:4c:d1:e1:fa:e3:a9:b5:0c:0d:
b2:69:aa:9c:cf:95:81:ce:74:3e:af:96:89:38:2e:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:03:EA:11:B0:F5:6A:23:22:62:F0:48:EB:9F:6B:48:DA:1D:13:36
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zgPqEbD1aiMiYvBI659rSNodEzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.159.102.0/23
Signature Algorithm: sha256WithRSAEncryption
78:8a:42:b8:74:e7:b1:bd:53:fd:da:d0:79:4d:cb:5a:bf:f4:
41:d8:ed:fe:b2:70:52:00:0e:8e:00:8b:88:d9:b3:94:92:5c:
5f:0d:56:a8:bb:b4:20:85:25:a1:99:9e:c2:66:6b:a7:2c:74:
28:e3:01:54:29:63:15:96:8a:c9:d3:8f:24:64:59:8e:a3:f6:
9f:55:97:38:e8:ad:17:48:b0:86:17:16:d2:74:6a:93:8c:f6:
2f:b5:7c:90:2d:7e:ed:9c:da:19:25:d4:6d:bc:02:73:1f:85:
ea:20:fc:4f:0e:b5:f9:b1:34:65:8c:87:62:52:4f:47:4e:96:
4a:31:80:0a:a1:3b:20:80:6b:5a:89:4f:57:00:d8:3d:fd:9c:
8a:2b:79:5a:34:f5:c7:fa:1b:31:88:37:d2:e2:1c:b8:db:ea:
ee:16:c9:17:40:55:fe:9e:63:1a:5c:56:2a:9f:46:2c:f1:42:
47:5a:e8:15:4b:b6:0a:27:2c:bb:ce:d6:90:e8:7d:3a:d8:81:
f8:ab:bc:d7:68:0e:a1:ed:ad:65:a8:24:15:a2:2f:bd:77:78:
47:95:ff:70:13:00:3f:0f:88:86:c2:74:5b:fb:b1:8e:d2:c8:
65:58:29:88:9f:39:41:5a:dc:02:1d:99:5d:2d:b8:2c:7f:2d:
a1:a8:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:52:32 2025 by rpki-client