Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa
File: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (raw, json)
Hash identifier: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=
Subject key identifier: F1:95:37:6C:6A:E6:F7:15:A1:C0:CB:8D:04:D8:3F:B1:54:9F:EF:CC
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 0194228DD02FF48EDE76C69A9FC26584DC0D
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 93.113.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d0:2f:f4:8e:de:76:c6:9a:9f:c2:65:84:dc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f195376c6ae6f715a1c0cb8d04d83fb1549fefcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:42:51:52:a8:44:a8:e7:61:5e:e0:cb:bb:
60:78:e6:e4:c3:4a:ed:1c:25:54:cb:96:21:e6:e0:
39:40:62:ed:c8:ef:87:00:4d:48:cc:81:9e:f7:30:
22:1a:79:5d:ef:6f:f3:b0:02:35:58:e3:d9:7f:0e:
c1:fc:ae:0a:5b:7a:52:93:e6:70:c1:74:66:ce:75:
c7:b9:c2:b8:74:e4:c2:4a:e6:f9:ab:8a:f2:26:0b:
6f:f2:3f:c5:d5:86:a2:ae:fc:2a:60:81:ab:e7:32:
f1:74:bf:4e:86:9a:28:12:e9:82:07:94:f4:a0:bc:
b4:d0:de:38:bd:74:a7:71:7c:be:19:f3:03:4f:3e:
e6:c6:f6:0f:b6:be:57:01:1e:05:53:7a:69:f6:82:
78:2f:7f:5c:5c:a3:21:e6:2d:30:25:30:1a:4e:14:
8f:b1:75:e6:33:8c:e0:df:3c:3b:5a:fa:aa:bc:40:
aa:1c:75:ff:89:b5:2d:aa:66:54:95:c3:d4:03:e7:
bc:5c:5d:48:9b:4f:84:cd:fb:54:c8:d7:e8:39:f3:
b9:79:0a:fd:70:d6:f3:92:14:ef:ce:f1:02:40:90:
29:71:18:27:7a:40:d3:98:6c:0e:62:48:10:6d:4c:
5d:6c:01:f1:72:38:d9:41:2e:7d:8f:2f:1b:ea:26:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:95:37:6C:6A:E6:F7:15:A1:C0:CB:8D:04:D8:3F:B1:54:9F:EF:CC
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.128.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:eb:bb:23:93:72:cf:72:0b:dd:a9:f8:ef:47:25:71:fc:56:
98:e1:d1:1f:eb:33:b3:61:cc:9b:0f:bc:a3:4f:c0:47:25:5e:
2a:18:9b:dc:2e:ab:74:7c:17:ae:46:a1:e8:1a:bc:ca:fc:02:
58:83:af:4d:c0:9d:b8:1d:56:c8:38:ad:e1:f9:e7:ad:c5:ed:
24:ee:c2:a1:8d:3c:cc:aa:0e:68:d8:3d:2c:7e:a1:92:ff:b7:
01:2c:f2:9b:86:fd:50:f1:75:9f:76:59:96:6d:80:71:1d:d5:
a9:14:e7:ce:c2:42:cc:b7:8e:a5:1f:eb:bb:50:e2:96:5c:70:
fa:76:b9:09:58:cc:56:01:ea:14:df:a5:01:a7:21:c1:de:a0:
20:6e:49:4d:81:5c:4d:06:b5:09:e1:23:11:a2:9f:5b:86:05:
5e:5a:19:fe:6f:04:31:f3:4d:86:c0:b9:0a:49:46:d0:1f:f5:
2e:9a:11:1a:dc:28:79:d7:da:5e:eb:83:a0:a7:9c:f6:30:38:
75:f7:c4:7f:4e:8b:86:97:f6:6b:01:ff:c5:50:51:77:6e:64:
db:e5:a7:fa:d2:e1:22:32:15:fe:fe:88:3c:6d:0c:cc:8d:2b:
d7:bc:08:fd:b6:a2:3c:0a:4c:0a:3a:f1:35:30:84:4d:f6:c1:
56:f1:59:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:14:27 2025 by rpki-client