Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/8vStw95BuGVkj8HXbyN_flaPj7c.roa
File: 8vStw95BuGVkj8HXbyN_flaPj7c.roa (raw, json)
Hash identifier: dRJ0m7+1qAqMMReVbhyMrn/KzlqYe3TEIn47dm33doc=
Subject key identifier: F2:F4:AD:C3:DE:41:B8:65:64:8F:C1:D7:6F:23:7F:7E:56:8F:8F:B7
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428282BF56DDE11F0A00584D0DA179572
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/8vStw95BuGVkj8HXbyN_flaPj7c.roa
Signing time: Thu 02 Jan 2025 17:55:08 +0000
ROA not before: Thu 02 Jan 2025 17:55:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202593
IP address blocks: 151.251.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:2b:f5:6d:de:11:f0:a0:05:84:d0:da:17:95:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2f4adc3de41b865648fc1d76f237f7e568f8fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3a:06:05:ec:e2:7e:2d:ff:11:10:54:fa:fb:
1c:7e:4f:ed:50:1d:d4:44:b1:fb:fe:3b:72:84:ab:
bb:b3:fb:f7:31:02:b9:20:1d:91:72:96:b3:01:8b:
7e:f6:3f:d7:d0:05:c0:d1:35:cf:04:54:b5:f1:1b:
ae:3a:ab:d1:cc:cf:bd:31:02:f7:b2:b4:aa:d0:73:
57:95:67:50:21:d5:7a:55:1c:9c:d7:52:73:e9:90:
54:ff:12:30:b5:4a:2e:c8:3f:ca:6b:ad:09:7a:b9:
40:bf:fd:27:85:f6:57:93:0c:da:49:13:73:65:da:
99:88:95:37:7b:09:ff:69:e2:19:03:d0:d3:26:3d:
00:10:e3:69:be:f8:83:dd:06:11:b8:4e:e4:c2:40:
c4:40:5f:03:ff:f1:74:38:ab:1a:7c:dd:ab:af:57:
fa:12:81:2d:f3:91:d4:56:36:f2:04:36:41:cf:4c:
61:06:f1:0c:4d:f4:7b:ec:c6:3b:e4:2a:2c:fd:80:
23:04:08:39:2d:ac:4f:7f:36:f6:ac:80:7b:0f:8d:
fd:72:a9:5a:6b:2a:c7:4a:20:61:3f:d8:e2:9c:21:
60:ad:bc:98:19:7d:b6:22:29:f1:7f:36:69:7b:77:
fe:78:86:bc:59:d0:83:58:35:6d:71:1a:18:b8:a6:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F4:AD:C3:DE:41:B8:65:64:8F:C1:D7:6F:23:7F:7E:56:8F:8F:B7
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/8vStw95BuGVkj8HXbyN_flaPj7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.251.119.0/24
Signature Algorithm: sha256WithRSAEncryption
05:17:98:39:55:d7:a3:58:68:e7:0f:45:6a:89:5e:8a:c6:4e:
e9:37:f5:85:a0:66:b2:9b:49:9f:ab:b4:39:b7:70:be:4c:35:
a4:8d:9a:4f:92:aa:f6:7c:cd:04:96:2c:fd:2c:ce:4b:c3:4e:
6a:c0:70:ed:53:8a:c3:58:19:30:f1:a6:51:84:d3:8a:47:bd:
e2:28:3e:af:74:45:dc:6b:9e:a6:91:a9:64:89:99:ef:57:4c:
a0:91:b6:5e:ef:ca:4e:86:dd:fb:b8:0e:b5:0b:5c:48:d2:9e:
86:88:d7:ad:81:e9:63:91:ed:b9:40:5c:c3:6e:55:fc:b2:6a:
a4:a7:f1:e6:a6:80:84:c4:29:53:a8:6d:3d:8b:f7:84:73:5e:
9c:61:61:8e:6e:62:c5:5b:4d:97:1a:00:b0:a2:08:04:45:77:
7e:39:12:0c:01:ae:1c:65:a4:3d:b2:3f:d1:08:07:51:9f:02:
32:cf:84:14:c5:22:eb:cc:b7:9c:04:1a:bf:f5:9e:d3:fe:45:
ac:9d:da:7b:f5:6a:78:d5:ad:cc:48:28:41:ad:7a:2e:14:5a:
30:79:a2:7c:e1:ce:fe:6f:b4:90:67:61:47:b1:37:fe:0e:c7:
98:b9:ab:b3:1d:6e:48:9e:b2:18:28:e9:92:93:8a:b9:bc:2d:
f7:48:16:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:53 2025 by rpki-client