Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8drSNO4c28JBTvdRZ2V_eb-ECc8.roa
File: 8drSNO4c28JBTvdRZ2V_eb-ECc8.roa (raw, json)
Hash identifier: gR2B7vbwxu/2iESNk/phikf31ZfQzoZkgpf8LTcbqJc=
Subject key identifier: F1:DA:D2:34:EE:1C:DB:C2:41:4E:F7:51:67:65:7F:79:BF:84:09:CF
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B39996EAC85A26307AAAFF6ED32469
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8drSNO4c28JBTvdRZ2V_eb-ECc8.roa
Signing time: Thu 02 Jan 2025 01:48:57 +0000
ROA not before: Thu 02 Jan 2025 01:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.135.238.0/24 maxlen: 24
185.235.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:99:96:ea:c8:5a:26:30:7a:aa:ff:6e:d3:24:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1dad234ee1cdbc2414ef75167657f79bf8409cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:38:f1:57:7a:d2:6a:85:1e:32:c3:5f:e5:
db:17:d3:e8:b2:d5:4f:a2:5a:ce:e8:39:09:9d:48:
1e:a8:00:4a:a4:b2:79:59:5b:16:6e:21:5b:3b:95:
48:57:7a:d7:d3:4f:09:51:d7:9d:33:8d:86:d3:cf:
61:37:2d:42:7e:f3:68:34:00:55:46:04:f5:4e:bf:
57:64:ea:fc:8d:78:11:29:8d:f3:97:90:66:dc:0b:
0e:c8:95:da:79:d5:cb:ea:a3:74:a0:b4:0d:94:23:
81:22:c7:18:de:68:2a:a5:e0:73:06:62:79:4a:2b:
2f:23:88:ed:94:08:df:2b:a9:90:ad:b0:4e:a8:6b:
7d:91:fd:55:95:15:1f:a3:e2:7d:26:4d:54:c0:00:
97:23:d4:b0:94:c1:a0:c8:96:e7:ee:1c:d8:e3:a9:
eb:01:68:ab:69:38:06:21:7e:14:49:94:e2:f8:f2:
1d:01:92:b7:e7:d8:fe:7c:ac:a0:b5:49:b0:ec:84:
0e:ba:d6:17:78:b5:70:06:7a:f6:b7:78:f0:15:28:
77:ae:f8:5a:5b:a9:59:04:1e:6f:a4:7d:73:be:fc:
0a:28:93:4a:04:7e:84:cd:19:46:68:9c:6d:45:d6:
ef:ee:08:b6:ca:27:d5:72:5d:64:0e:69:41:54:fa:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DA:D2:34:EE:1C:DB:C2:41:4E:F7:51:67:65:7F:79:BF:84:09:CF
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8drSNO4c28JBTvdRZ2V_eb-ECc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.238.0/24
185.235.164.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:eb:5d:c9:e2:6f:93:f4:bd:fa:31:c7:c9:f4:63:46:a4:70:
a3:0d:0b:8e:80:f7:85:c9:06:38:67:33:8b:3c:f6:21:d3:3d:
b9:80:d0:0e:db:97:65:3b:bc:9f:aa:06:ac:f2:c0:5f:e6:6a:
8a:1e:60:96:ec:ab:73:56:5d:ed:d4:58:04:7b:bf:ad:6a:01:
f4:d6:b6:5c:36:7a:9b:95:6b:5b:ed:b7:5e:54:97:f7:c5:9b:
fc:75:b7:41:74:b7:81:be:38:24:75:39:1f:3f:79:98:62:94:
31:48:9d:e7:65:8d:d4:57:9f:74:ab:86:3b:fc:82:a0:47:67:
c8:06:f5:f8:08:46:d7:54:8f:44:d2:65:2d:d1:a3:e7:7b:33:
2b:1d:6a:ba:dd:de:2c:7d:a3:a5:ef:0a:ed:ab:98:c6:f7:ac:
11:f0:62:6f:26:41:77:e9:67:ca:27:23:df:35:2d:7e:e3:4e:
e9:f8:ef:01:3a:fc:1b:ac:8a:ea:19:32:c4:7b:a9:ff:27:65:
00:14:4d:3f:b5:15:16:b5:db:93:58:c3:a4:fa:86:73:23:29:
23:23:ac:e0:a4:8f:19:84:79:18:9c:08:4b:33:63:63:2f:ae:
76:cc:68:35:16:01:5f:fb:47:1e:a5:d6:0d:58:ca:09:f2:76:
5c:08:dd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:54 2025 by rpki-client