Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa
File: 8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa (raw, json)
Hash identifier: 2BY/rA9giuFltjXSROUw0wjIihHos+N8ZqL5OdXbUVw=
Subject key identifier: F1:6F:99:EE:26:53:28:0F:B7:AE:43:63:88:07:79:55:44:57:32:CC
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 0194258F4D6D785857511EBF0D0FEEFA1687
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.241.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4d:6d:78:58:57:51:1e:bf:0d:0f:ee:fa:16:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f16f99ee2653280fb7ae436388077955445732cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:92:53:1f:27:49:79:0d:c4:05:b8:2f:4f:
ba:be:b8:41:51:69:0b:79:f3:45:af:c7:2e:9b:3f:
50:bc:ad:e0:ed:70:4c:8d:89:7e:bd:8c:88:f7:76:
60:4a:bb:df:8e:7a:1d:df:9e:88:97:9b:47:6b:65:
81:8a:f6:9b:d2:05:7c:a9:1b:b7:91:b2:0c:c3:6e:
af:62:e8:f5:b4:c1:24:fd:76:a8:22:d1:8f:b8:46:
f7:79:9b:f0:1c:cb:bd:43:0b:6e:f8:6f:58:90:7f:
dc:ca:c0:f5:1d:2c:91:c3:f2:c8:4b:78:6a:3a:0a:
00:9e:01:f3:d5:95:6b:10:d4:81:88:86:ce:c5:a4:
c4:b5:be:96:80:04:82:7e:a6:7d:18:10:b9:63:04:
fd:0d:61:7e:56:20:98:af:34:13:5d:70:6e:72:42:
e0:61:4a:0f:73:3e:a4:c1:cb:5d:df:b9:ff:cb:6b:
2c:c0:39:8f:16:4e:fb:a7:b0:bc:2b:10:8c:65:a6:
cc:3c:35:86:dc:66:d2:fd:2a:e4:2a:05:08:2c:13:
6c:b9:ec:8b:50:68:03:37:3e:48:5b:f3:71:e7:e3:
0f:06:19:73:58:05:d2:9a:89:da:14:98:ba:4f:fb:
b9:8c:21:81:36:b3:7a:56:3e:ba:5c:2f:f7:02:16:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6F:99:EE:26:53:28:0F:B7:AE:43:63:88:07:79:55:44:57:32:CC
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.8.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2d:42:c3:88:20:96:68:db:c0:e8:1b:02:44:1d:1f:b7:38:
72:05:63:90:75:8e:b7:af:4b:85:32:04:4c:c1:a0:45:97:c1:
e4:58:c7:a1:d5:2d:10:78:07:04:5a:cc:e5:4b:33:1c:de:c2:
c6:da:3a:f9:52:6e:a5:2e:e5:f5:7e:4e:a7:2c:a9:6a:24:23:
b5:6c:9a:8f:af:e2:7a:d6:9a:e3:c1:ab:b5:fb:83:42:6c:36:
f9:64:5f:ab:e4:86:60:36:dc:b7:59:77:e4:c6:c6:ef:f9:c3:
f5:57:ab:92:e4:2c:be:50:e6:32:67:38:10:71:7f:4d:0d:07:
3e:4e:57:c0:6e:07:16:c6:93:c1:6c:b7:91:b0:73:da:d7:4f:
25:d9:9b:28:e9:56:69:2b:ab:3c:fa:b4:39:f8:df:08:fc:cf:
e2:ff:65:ce:bf:f5:20:1a:48:8a:fa:34:15:7e:57:40:5d:be:
19:12:1f:ae:8d:48:cb:e8:11:c6:eb:40:ad:9c:cd:2b:22:8b:
1d:89:4d:cf:11:d0:d9:08:8f:fa:fb:bc:31:8b:62:4c:0e:1b:
be:dc:27:d3:e5:f5:3d:be:db:2b:cd:69:95:17:5c:17:f1:6d:
2c:e6:d3:f2:ce:1b:f0:54:44:dc:20:ec:20:25:ac:72:b9:33:
33:92:c9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:51:32 2025 by rpki-client