Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8QIuQS7zF_CRPfe-1hN4wMiq18Y.roa
File: 8QIuQS7zF_CRPfe-1hN4wMiq18Y.roa (raw, json)
Hash identifier: sDNVYK86uiHC77NJMFYYhH5EOvln1YNAo0tdGCMQqxU=
Subject key identifier: F1:02:2E:41:2E:F3:17:F0:91:3D:F7:BE:D6:13:78:C0:C8:AA:D7:C6
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2FCCA775986CBEE46751C51F8C591
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8QIuQS7zF_CRPfe-1hN4wMiq18Y.roa
Signing time: Thu 02 Jan 2025 01:48:17 +0000
ROA not before: Thu 02 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205472
IP address blocks: 85.254.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:fc:ca:77:59:86:cb:ee:46:75:1c:51:f8:c5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1022e412ef317f0913df7bed61378c0c8aad7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:95:ab:e1:d2:eb:f9:bd:9d:13:20:ba:38:
18:df:2b:33:fd:8f:45:93:95:d3:25:aa:ad:d0:79:
c8:54:9b:84:db:50:1c:4d:65:d0:5a:5b:10:d2:24:
c5:0e:c8:52:92:a8:03:50:d6:a4:56:36:43:bd:fc:
ab:2d:dd:c9:07:99:74:6a:5c:66:45:46:6f:13:61:
b7:80:06:11:c5:2d:07:41:87:a2:3f:6b:07:81:96:
b5:1c:b7:a9:d5:31:87:05:47:81:a1:22:91:03:c8:
7f:8f:40:4b:1d:1b:92:d0:3a:d9:8d:16:7f:bd:0b:
38:13:93:7a:e2:d4:8c:cd:46:8f:ca:62:84:53:36:
df:9b:d8:25:8a:8f:a5:51:ff:de:79:9b:c5:d5:01:
83:95:96:b9:29:b1:70:aa:48:80:fb:b2:8b:1d:77:
89:62:af:40:44:66:f4:c2:f2:32:46:f3:2d:1b:7b:
af:1e:db:2d:50:c6:2c:05:05:3c:9a:e3:5e:5a:55:
5c:cd:f2:b5:6d:c8:b5:26:8f:1d:6c:dd:a2:00:d1:
15:57:35:0f:58:37:22:a4:92:2e:72:fe:96:97:bd:
5c:c2:4e:5d:80:8e:18:8c:db:a9:20:ed:8f:3d:31:
cc:55:fe:a8:24:d3:81:3d:24:ee:c2:88:69:61:56:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:02:2E:41:2E:F3:17:F0:91:3D:F7:BE:D6:13:78:C0:C8:AA:D7:C6
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8QIuQS7zF_CRPfe-1hN4wMiq18Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:2e:93:28:b4:97:2d:18:40:42:8e:2e:ba:3a:ce:74:77:29:
df:4a:27:ee:99:b8:3f:6d:08:a0:19:40:cf:4b:30:7b:b1:fc:
d3:a8:f4:1c:02:9b:ff:77:8b:62:46:3e:4a:74:2a:3f:15:94:
c4:18:1e:75:b3:44:e1:cc:5d:bd:16:83:3f:bf:bd:f2:90:b7:
77:a9:f1:af:26:15:de:e5:64:d4:94:ec:87:bd:68:43:c0:7d:
28:68:5e:58:f9:c7:a8:b6:87:88:08:9b:aa:cf:e4:36:c9:38:
8f:d7:08:e9:7b:fd:56:84:1b:42:7b:f5:c2:99:6e:47:c6:91:
18:e4:a6:00:29:f7:61:2c:63:5c:31:d2:18:04:d4:b6:d1:fe:
70:4b:87:6c:2c:b6:67:1d:b2:fc:19:ff:cc:0c:bd:04:48:cd:
20:bf:a0:3c:00:ce:d3:48:19:39:0e:99:ab:f5:ab:c9:c0:6c:
67:93:8a:6f:f4:a8:e1:47:ea:38:a6:f4:2b:21:6b:e5:1a:48:
e1:c3:94:db:16:85:a8:54:23:ba:40:35:ad:1d:b5:f5:d6:c1:
09:9b:aa:f7:a8:df:a8:9a:de:61:ed:c9:98:09:dd:f0:e2:af:
fa:64:29:ec:22:9d:cb:3c:84:e4:23:cf:82:61:6e:b5:21:19:
76:58:a9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:04 2025 by rpki-client