Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/8GgRYajAB5wJTdepPxBFH5fs1YY.roa
File: 8GgRYajAB5wJTdepPxBFH5fs1YY.roa (raw, json)
Hash identifier: FwRicgJ95Y18KNWZKntvQQc8pJZC+p4jYsaJu9/cGKo=
Subject key identifier: F0:68:11:61:A8:C0:07:9C:09:4D:D7:A9:3F:10:45:1F:97:EC:D5:86
Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial: 019422FB69A78A4DE791F16E2BB9F5C902B6
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/8GgRYajAB5wJTdepPxBFH5fs1YY.roa
Signing time: Wed 01 Jan 2025 17:48:09 +0000
ROA not before: Wed 01 Jan 2025 17:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210238
IP address blocks: 81.22.224.0/22 maxlen: 22
185.132.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:69:a7:8a:4d:e7:91:f1:6e:2b:b9:f5:c9:02:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Validity
Not Before: Jan 1 17:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0681161a8c0079c094dd7a93f10451f97ecd586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:90:13:a5:e5:ef:14:13:a8:32:d5:e3:63:
e3:f2:31:89:21:41:b7:a2:1e:95:50:c5:bc:a1:6d:
e9:6a:e5:eb:c8:59:d0:45:d3:81:42:00:59:77:61:
27:21:94:42:38:ec:09:bf:1f:91:d9:11:e2:5d:4b:
c4:96:3e:a0:d6:e2:87:68:71:ea:ee:5f:20:aa:82:
61:9c:fd:76:2a:f9:b2:a1:3b:7c:56:8f:d5:f7:20:
e5:22:ff:f8:9f:e3:d8:92:d0:82:8a:9b:f1:29:20:
b0:b0:01:60:39:42:bc:e8:42:4b:54:3a:89:2d:2b:
b6:03:47:2d:5d:2d:34:0e:56:f4:0e:ba:de:62:bb:
c5:49:ee:f6:1a:da:56:91:6a:f1:54:1d:11:89:c1:
29:69:d3:ce:c4:88:ce:2b:25:89:b6:b7:b6:76:2b:
6e:2a:75:95:f7:78:de:d4:de:23:11:de:5c:74:27:
2f:47:b7:e0:39:bd:03:25:71:96:aa:67:86:1c:d2:
ef:3c:5f:8d:00:d4:47:a6:c5:89:4d:19:c9:47:19:
73:90:f4:5b:af:b6:19:7f:38:80:c1:7e:ca:ec:57:
8c:4b:64:99:23:fc:5b:4d:40:ad:ce:9f:08:12:b7:
9a:46:ad:28:59:2c:43:f8:8b:d3:bd:c5:4c:83:ad:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:68:11:61:A8:C0:07:9C:09:4D:D7:A9:3F:10:45:1F:97:EC:D5:86
X509v3 Authority Key Identifier:
keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/8GgRYajAB5wJTdepPxBFH5fs1YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.224.0/22
185.132.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:70:8e:94:41:18:8c:4a:83:f1:d6:07:df:38:ac:15:42:36:
aa:62:0b:3f:93:4c:fd:db:58:16:e9:76:0d:ed:ea:71:c9:d8:
71:46:97:3c:74:1d:14:59:35:73:a5:5f:51:01:cb:69:7b:80:
a8:e9:1e:38:1a:e6:fd:b1:00:db:a5:c2:fa:c2:5b:96:c0:49:
46:2e:49:f2:64:a5:ed:f5:ff:77:a6:c2:4d:14:2b:47:8e:ab:
a4:93:be:4b:77:46:30:7c:e3:16:4e:eb:e2:9a:75:62:7c:13:
86:15:27:a6:b0:a3:85:08:34:4c:55:2f:8b:58:bc:19:cd:46:
ad:36:48:a2:61:0a:de:20:17:ba:90:a5:1c:96:7f:1e:26:aa:
14:6a:13:c0:74:ff:0b:cc:44:f9:dc:5d:18:bf:5d:97:8e:eb:
a8:7d:dc:9b:b5:59:d6:ff:bd:47:9a:81:36:90:57:d3:99:7d:
71:e1:5a:cf:43:a6:9e:f3:d4:16:cf:8a:5d:d1:fb:9c:26:fc:
51:54:d3:85:31:b1:6b:94:6c:2f:76:af:0f:21:97:9b:71:2a:
b9:09:5e:d9:0b:02:59:64:20:bc:19:3d:d8:5f:f7:b4:b3:b4:
d2:3d:d6:b7:43:29:9f:d0:5a:20:c9:7b:83:af:7f:a5:0a:02:
cc:00:85:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:44:18 2025 by rpki-client