Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/8IPQNKsJPkOpGC12sFlkQtMsYXw.roa
File: 8IPQNKsJPkOpGC12sFlkQtMsYXw.roa (raw, json)
Hash identifier: Xs5ZWXQSLJ1Z58EHx7MQM3/jp/D+3KjEPCMs5TWn1es=
Subject key identifier: F0:83:D0:34:AB:09:3E:43:A9:18:2D:76:B0:59:64:42:D3:2C:61:7C
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0194206811DA9C95573457903214AC6F45A6
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/8IPQNKsJPkOpGC12sFlkQtMsYXw.roa
Signing time: Wed 01 Jan 2025 05:47:58 +0000
ROA not before: Wed 01 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213985
IP address blocks: 45.152.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:11:da:9c:95:57:34:57:90:32:14:ac:6f:45:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f083d034ab093e43a9182d76b0596442d32c617c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:c0:a2:75:b3:4f:ce:d1:47:47:ed:83:c9:
91:2d:e3:0e:5b:91:ec:5e:69:28:20:b7:86:ea:48:
71:3d:6b:14:06:92:fb:6f:e4:09:1b:7f:9b:b9:c8:
0b:da:68:5e:17:5f:3b:d9:ab:d4:07:b6:d5:32:73:
31:e1:97:ff:29:ec:38:b2:9c:5e:c4:f5:d4:2c:3e:
f4:09:ee:89:88:29:d3:b9:7c:b6:b9:ab:1b:bc:f9:
53:2b:a6:53:bc:2a:43:a3:93:78:9e:aa:be:6e:4d:
c5:9e:35:31:ec:bd:fe:d1:63:21:c8:e4:9b:ef:0b:
f6:68:0f:d2:e2:91:9a:d4:05:b5:7d:9d:1f:cf:ec:
a0:b7:68:c1:fd:1b:99:bb:cd:d8:cf:97:5a:ad:4e:
85:37:31:da:61:12:3c:7c:ae:cf:a5:d2:39:7e:e9:
81:ed:df:be:74:e2:6d:74:5a:92:92:56:88:ee:12:
d5:39:e4:25:11:36:23:28:fd:0d:1f:ae:3c:cd:af:
6d:4c:39:61:32:26:02:47:f5:69:86:fd:0a:d5:de:
f4:6a:6a:3a:e1:46:14:33:af:f9:c3:d5:ab:db:6a:
f3:9f:16:c7:a3:82:b6:26:17:3d:aa:fa:52:7e:10:
31:70:de:bd:6b:47:d6:be:ea:86:8b:56:34:d1:0d:
0c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:83:D0:34:AB:09:3E:43:A9:18:2D:76:B0:59:64:42:D3:2C:61:7C
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/8IPQNKsJPkOpGC12sFlkQtMsYXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.36.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:94:e5:5e:5c:cf:aa:ac:0e:f5:b5:9f:0c:08:fd:a5:06:60:
27:f7:f4:33:93:e1:55:cb:06:6e:79:0c:bb:5e:c3:80:92:e4:
99:72:d8:85:7f:52:af:6e:cc:88:c4:d8:13:52:79:92:01:be:
b0:26:8c:2b:35:14:8d:54:8b:6f:6b:be:79:28:37:8d:bf:2c:
18:6e:c2:4a:ec:af:0a:71:dd:18:b7:f8:c6:dc:b7:43:8c:35:
c3:74:9c:71:1a:43:32:1e:29:c1:40:7b:0f:8a:34:59:ff:04:
58:f2:d6:09:a2:eb:2f:2d:f0:2a:b0:4e:67:f2:54:e4:b7:1b:
f8:6f:21:07:69:4f:a2:c7:3a:09:52:1d:17:a6:39:0f:70:a6:
87:39:73:f3:20:0d:7d:90:07:d8:f9:34:09:42:ce:db:fb:2a:
2c:f5:0b:e5:55:36:76:9e:49:07:b5:bd:d6:3c:b3:04:9e:1e:
ca:00:f8:72:d4:c8:8c:b2:75:04:44:a2:43:0f:b2:45:a7:db:
b5:ae:95:ac:f6:25:99:1b:56:7b:b8:7e:5f:21:7f:ff:1e:de:
9c:f2:1c:13:0b:2d:9d:94:cb:52:b7:d7:af:a4:76:14:1c:c1:
77:f1:f7:4f:45:4d:dd:d1:82:79:f4:a5:73:82:9c:cd:0e:1f:
f6:0d:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:01:52 2025 by rpki-client