Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/8bm2v05Cci050GG81KJuy05pI_A.roa
File: 8bm2v05Cci050GG81KJuy05pI_A.roa (raw, json)
Hash identifier: WQq4H/F9fltXEKAzp88xq0uJAhnzAkfYy8vG0Rs7Ric=
Subject key identifier: F1:B9:B6:BF:4E:42:72:2D:39:D0:61:BC:D4:A2:6E:CB:4E:69:23:F0
Certificate issuer: /CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Certificate serial: 01942444F83416510FA0D2FCC45E35A6E749
Authority key identifier: 7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/8bm2v05Cci050GG81KJuy05pI_A.roa
Signing time: Wed 01 Jan 2025 23:48:07 +0000
ROA not before: Wed 01 Jan 2025 23:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 146.19.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f8:34:16:51:0f:a0:d2:fc:c4:5e:35:a6:e7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Validity
Not Before: Jan 1 23:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1b9b6bf4e42722d39d061bcd4a26ecb4e6923f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:5a:3e:78:53:68:bd:4e:a0:1a:d6:7f:b8:
9a:f5:a2:02:e5:96:0b:fd:cc:94:85:cd:46:9f:3e:
01:db:9b:ca:96:2d:24:9d:8b:b7:f3:09:3e:cd:b6:
f2:f7:88:81:2b:7f:27:7c:ad:12:38:01:b3:6d:ce:
ab:16:9c:bc:0e:ed:93:45:f5:06:0f:0b:05:0f:13:
e6:bd:93:e9:a0:e6:fc:1f:c9:78:a4:cb:a9:24:86:
b9:8a:da:57:36:c3:fe:a5:4d:06:9a:f9:a9:02:e3:
cb:c3:0d:6c:2d:89:12:2c:e3:71:e9:e8:19:2c:e0:
cc:93:18:bb:a2:fa:86:17:c7:1b:cb:8f:b6:8e:67:
cc:24:46:e6:a0:2d:a3:b4:97:b0:38:2c:53:90:ae:
32:ad:5c:0f:4d:8d:5e:87:a9:15:e9:c3:f7:e8:14:
8c:bf:8a:ea:e5:a3:3b:0f:10:13:27:32:c8:e6:a4:
3c:7d:0c:ec:e7:3c:e6:a9:8a:b4:0a:5c:95:fd:45:
08:a5:83:ff:34:c8:93:8e:a4:02:c7:54:51:8b:fa:
3b:ed:b3:a9:c0:c9:28:5f:e7:0d:cf:3e:2a:c7:3a:
4b:05:bb:d0:ad:07:72:f0:cb:3e:3d:fa:c1:56:5c:
af:3b:73:50:fb:f2:2e:d1:b1:ec:7e:a6:a5:90:b0:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B9:B6:BF:4E:42:72:2D:39:D0:61:BC:D4:A2:6E:CB:4E:69:23:F0
X509v3 Authority Key Identifier:
keyid:7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/8bm2v05Cci050GG81KJuy05pI_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.233.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:56:d4:a6:6d:09:d0:c2:19:f2:dd:09:87:59:11:62:c1:06:
4c:1f:dc:2d:8e:56:68:35:32:d5:3a:65:19:c2:ad:13:26:9f:
1f:1f:b8:a9:c7:5c:df:e0:d5:00:0f:08:a3:0e:21:9c:12:f5:
20:91:3e:bd:2c:f2:3e:fa:33:2b:46:49:51:c4:34:c6:9a:d2:
b5:ae:c5:c5:eb:ed:69:04:c6:43:95:3e:32:d9:da:2d:2d:94:
01:e4:7e:23:c5:78:37:97:da:ed:69:55:9a:db:fc:44:31:e4:
3d:13:23:9a:5b:c6:a6:72:27:54:50:3d:69:e6:45:d8:4b:47:
5a:14:5c:f3:18:b4:9d:3a:bc:68:85:13:f8:b6:36:91:eb:d6:
4e:60:7f:57:ae:d2:7e:ca:c4:8b:52:43:38:0d:1e:b8:ae:b9:
33:ca:e8:51:e9:84:aa:80:da:3f:15:a4:b8:72:ec:1a:c0:1e:
f8:e5:a2:0a:6e:54:05:0e:c7:5b:54:0c:61:1e:21:ac:07:4b:
9c:a3:80:b7:6d:64:be:a4:1b:da:7c:b4:62:ef:45:e6:60:46:
e6:b3:a4:2e:47:64:d7:c1:ef:2f:7c:02:8f:9a:74:ee:12:ca:
9d:2b:01:73:f2:84:cb:fc:69:a7:d3:22:2c:ce:e5:07:f7:ed:
96:e2:c5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:59:36 2025 by rpki-client