Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/8i1g8XKNJedNWFOzfSsVo0JxCqM.roa
File: 8i1g8XKNJedNWFOzfSsVo0JxCqM.roa (raw, json)
Hash identifier: qcd7n9F8BEzZZvgBgE1cIJu2JRF1Xvz0rV08SZQkPQw=
Subject key identifier: F2:2D:60:F1:72:8D:25:E7:4D:58:53:B3:7D:2B:15:A3:42:71:0A:A3
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 0195D0D22D7A242B6C4765A73EE6F4390D46
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/8i1g8XKNJedNWFOzfSsVo0JxCqM.roa
Signing time: Wed 26 Mar 2025 04:59:49 +0000
ROA not before: Wed 26 Mar 2025 04:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.69.144.0/24 maxlen: 24
62.69.145.0/24 maxlen: 24
62.69.146.0/23 maxlen: 23
62.69.148.0/23 maxlen: 23
193.42.155.0/24 maxlen: 24
194.9.117.0/24 maxlen: 24
194.59.190.0/24 maxlen: 24
194.146.118.0/24 maxlen: 24
2001:7f8:8::/64 maxlen: 64
2001:7f8:8:5::/64 maxlen: 64
2001:7f8:8:10::/64 maxlen: 64
2001:7f8:8:20::/64 maxlen: 64
2001:7f8:2c:1000::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 09:59:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d0:d2:2d:7a:24:2b:6c:47:65:a7:3e:e6:f4:39:0d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Mar 26 04:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f22d60f1728d25e74d5853b37d2b15a342710aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:9f:61:0a:41:63:c8:ff:90:86:e9:7d:85:
dc:95:30:12:78:81:bb:e6:0c:b3:24:a8:8f:06:a7:
2b:5f:81:cf:d3:7c:cc:3a:e9:fe:77:c3:ee:4e:4e:
2b:40:03:5b:f0:c6:0a:d0:48:b4:9f:02:20:cb:28:
2f:9c:56:34:87:9c:30:2b:f1:13:ad:9d:e5:ab:b0:
dc:ea:2e:ab:57:4f:66:2e:75:dc:6f:bf:ee:28:1f:
8e:f1:6b:a0:43:aa:7f:31:15:24:a0:9b:5c:7b:a5:
cf:5e:77:cd:26:67:cd:cf:ef:b6:b4:04:0b:de:6c:
59:6f:c4:1e:37:6b:1e:e5:77:04:cf:08:39:a1:ce:
98:98:4e:3b:96:05:e2:eb:fd:26:f5:a8:f8:d0:dd:
fc:eb:0e:e7:b2:cc:ba:9c:f9:a3:0c:de:7b:5c:f4:
a1:2c:05:77:87:b8:96:23:26:cd:7e:1d:1a:eb:c2:
78:57:c3:22:46:6a:ed:67:07:99:86:3a:5f:e0:64:
4b:35:2e:55:b9:5e:ed:39:7a:e5:de:d0:6d:21:32:
14:99:eb:a0:d0:1c:7f:68:c8:03:23:ce:6f:56:63:
a6:8d:ef:41:3c:f9:a4:cd:67:ad:f2:9d:7d:7c:78:
9b:58:63:23:23:17:c4:08:f0:31:c2:55:25:4c:e1:
30:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2D:60:F1:72:8D:25:E7:4D:58:53:B3:7D:2B:15:A3:42:71:0A:A3
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/8i1g8XKNJedNWFOzfSsVo0JxCqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.144.0-62.69.149.255
193.42.155.0/24
194.9.117.0/24
194.59.190.0/24
194.146.118.0/24
IPv6:
2001:7f8:8::/64
2001:7f8:8:5::/64
2001:7f8:8:10::/64
2001:7f8:8:20::/64
2001:7f8:2c:1000::/64
Signature Algorithm: sha256WithRSAEncryption
6b:f9:a7:64:a5:7d:fc:ef:ec:04:79:5e:84:71:e5:f5:e2:93:
a5:56:92:98:4e:37:06:05:c8:53:53:7a:8c:4e:da:77:62:2d:
53:c6:41:b9:b4:59:ad:78:66:59:e9:3a:a3:cf:d0:86:1e:f6:
ac:07:e5:de:5e:42:60:2d:9f:00:96:1c:1f:90:d9:40:74:d3:
3d:e8:9e:19:41:7d:66:d1:a5:16:f4:c6:6d:8a:69:ad:77:5e:
6f:d4:fe:89:92:af:bb:f2:c8:44:a8:42:45:04:26:c4:ce:78:
8b:89:aa:1d:77:53:2c:9f:37:27:ef:a0:1a:8e:18:b5:06:05:
aa:46:c9:05:32:7a:c2:77:40:9e:3f:ec:47:89:7e:db:30:53:
c8:c9:9e:78:07:1c:34:2f:7e:a6:89:df:22:52:f4:3f:d1:0c:
65:8c:25:f6:ae:fe:55:5d:29:18:fc:86:60:4b:21:56:6b:06:
d6:25:21:d4:02:f4:af:06:66:f5:a0:76:71:d3:ad:d5:9b:99:
29:54:8d:2d:6c:45:65:4f:03:5e:6d:82:b9:24:b9:65:ba:a5:
2e:41:93:18:49:4d:2e:82:4e:65:3e:21:0d:5a:d3:7e:5a:11:
37:19:42:0b:55:5d:3d:54:ca:45:83:38:63:01:a3:87:c0:b3:
e1:ea:19:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 19:32:36 2025 by rpki-client