Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/8yDd52yiQnWrlCx6kxIE7m9PFW0.roa
File: 8yDd52yiQnWrlCx6kxIE7m9PFW0.roa (raw, json)
Hash identifier: B6yZTku2TmuXp6OETqEJRAmXjacawP+SH3G431U19zA=
Subject key identifier: F3:20:DD:E7:6C:A2:42:75:AB:94:2C:7A:93:12:04:EE:6F:4F:15:6D
Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial: 019425FC653F80EE2D49E26854F74FA5B719
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/8yDd52yiQnWrlCx6kxIE7m9PFW0.roa
Signing time: Thu 02 Jan 2025 07:48:05 +0000
ROA not before: Thu 02 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50419
IP address blocks: 109.95.184.0/24 maxlen: 24
109.95.185.0/24 maxlen: 24
2001:67c:118::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:65:3f:80:ee:2d:49:e2:68:54:f7:4f:a5:b7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
Validity
Not Before: Jan 2 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f320dde76ca24275ab942c7a931204ee6f4f156d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:76:78:a3:66:95:35:91:58:b0:0e:f6:db:
1d:6e:22:a9:dc:d6:03:29:cc:59:eb:9b:a6:d8:cb:
b2:0e:d9:f3:c1:fe:0c:2f:fa:3b:e7:c0:33:85:03:
4b:75:85:e2:9b:25:1d:0d:6e:59:f8:dd:2e:00:3b:
ce:e8:ff:33:4f:3f:5e:09:55:e3:ed:13:9a:eb:66:
83:16:27:dd:7e:36:36:21:1a:d0:50:85:4f:79:3b:
67:72:4c:40:7d:7e:3a:b3:2b:95:0f:e2:cf:3f:92:
c6:b5:5e:24:e6:2a:9b:dc:eb:dc:d6:03:b2:a2:5a:
5c:04:66:8b:66:d3:e7:94:9f:f4:24:ce:00:d9:65:
4d:08:23:fd:6f:41:93:db:af:61:a7:e0:ff:93:c0:
d0:70:08:72:c5:7d:95:2a:ff:d1:61:63:e9:ec:d4:
19:e8:57:57:07:e2:f7:fb:28:78:cc:88:a5:2e:fa:
89:24:10:2f:2d:6b:2f:4e:06:ae:5b:e9:c9:45:5f:
86:fe:01:30:7b:6e:5d:c7:b6:ae:23:59:a8:6e:d4:
2c:92:ba:c0:c0:1c:ca:a2:a3:3f:c8:de:4d:6f:c9:
7a:18:58:a0:d9:06:05:15:2e:94:6f:c4:cb:01:0c:
b4:72:1c:93:a3:d6:46:8d:68:43:86:7a:7f:0b:41:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:20:DD:E7:6C:A2:42:75:AB:94:2C:7A:93:12:04:EE:6F:4F:15:6D
X509v3 Authority Key Identifier:
keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/8yDd52yiQnWrlCx6kxIE7m9PFW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.184.0/23
IPv6:
2001:67c:118::/48
Signature Algorithm: sha256WithRSAEncryption
51:0e:22:67:b3:ef:76:4d:a9:ce:2b:a9:18:d2:e8:ee:1c:6d:
bb:ec:2a:be:c7:91:2f:fa:72:d9:02:d1:2b:11:ec:d8:08:7d:
e1:66:f1:9c:40:9b:f6:39:ff:9c:31:cd:e3:2a:7a:c2:23:fe:
09:a1:b9:f1:83:ee:aa:d2:4a:a3:7a:fd:f8:96:e7:11:a4:d7:
3e:37:aa:db:57:78:25:c7:41:8e:1c:15:73:b1:99:bf:b1:36:
8c:c2:75:8a:56:4f:41:a0:b0:a2:7c:66:d5:78:ec:52:da:6a:
cb:4f:51:c9:25:61:f1:c7:64:98:8f:b1:fd:59:47:a2:98:84:
e5:15:80:75:e1:a0:38:ff:1e:56:5c:00:2b:0a:85:e4:70:86:
b8:64:ff:9d:78:a3:e5:67:55:76:62:8e:3a:ec:2b:3f:31:4b:
c3:44:68:e7:bc:b0:d2:d8:f2:b5:a0:d9:a6:77:63:b8:d2:5a:
1b:18:37:19:0f:25:d7:03:3e:ec:a2:4b:40:af:f9:40:35:c4:
e4:16:29:db:6c:c8:74:e2:c4:41:02:32:8e:38:63:51:fe:48:
98:3c:3a:fe:f0:f3:6e:f3:8a:77:6a:c7:da:0c:6e:a5:58:95:
f4:20:74:de:ca:82:3a:bb:58:f9:34:04:db:ce:df:c1:6f:c8:
67:4a:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:25:52 2025 by rpki-client