Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/8Q4ADInpzQN02hwS_0eQFm7YVug.roa
File: 8Q4ADInpzQN02hwS_0eQFm7YVug.roa (raw, json)
Hash identifier: xHaUj/TOL/WPit9/4TnnnqnTmOwmT1zEmyKSE0I9y6I=
Subject key identifier: F1:0E:00:0C:89:E9:CD:03:74:DA:1C:12:FF:47:90:16:6E:D8:56:E8
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420684D225B40F6408EB654E33117670D
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/8Q4ADInpzQN02hwS_0eQFm7YVug.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201842
IP address blocks: 147.45.206.0/24 maxlen: 24
193.233.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4d:22:5b:40:f6:40:8e:b6:54:e3:31:17:67:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f10e000c89e9cd0374da1c12ff4790166ed856e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:8a:28:6f:2c:de:6d:4f:37:e6:44:c7:10:
58:85:ee:16:3c:42:e4:28:52:2c:42:b8:37:99:2a:
9e:ab:80:b3:17:4d:76:ce:95:39:a6:9b:2b:f1:97:
e5:df:de:de:70:a9:ec:ec:5d:e6:6f:5e:43:8a:86:
66:c4:4a:10:60:a7:9e:5b:57:99:fd:b1:1f:9a:9a:
1f:99:ec:b7:ff:82:7f:4a:d0:0b:1d:9d:96:3d:31:
21:04:0e:c5:35:4e:8e:f1:ba:ee:21:d9:d9:44:22:
fa:49:be:ec:de:5b:62:e5:99:26:ee:3e:66:46:46:
32:1a:38:28:72:a6:df:e1:43:1e:0c:0b:e0:1c:97:
48:f8:9e:d7:f2:29:c1:31:84:d4:32:a8:42:0f:fb:
7f:48:23:96:15:4f:8e:5e:47:9a:eb:e8:83:ec:0e:
23:5b:96:a5:e5:f4:6c:7d:d5:75:4c:74:b1:ca:a4:
6b:49:83:48:ac:19:e9:be:a3:9b:a9:29:be:f7:ee:
e9:d4:35:dd:8a:28:db:2a:3a:af:56:fe:6c:f9:5f:
c9:3a:10:31:35:b9:bf:19:09:25:32:8d:d9:14:5a:
0a:6d:2a:59:c9:83:d4:e1:f2:67:aa:5b:99:06:ca:
5c:8e:7b:fb:8a:fe:a5:26:60:51:fc:66:03:36:d9:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0E:00:0C:89:E9:CD:03:74:DA:1C:12:FF:47:90:16:6E:D8:56:E8
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/8Q4ADInpzQN02hwS_0eQFm7YVug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.206.0/24
193.233.79.0/24
Signature Algorithm: sha256WithRSAEncryption
78:02:36:93:84:77:cb:fd:52:15:7a:22:5b:3a:cf:8f:e7:b2:
b5:33:51:0c:d2:04:03:d7:27:3c:81:56:1c:49:bd:1f:88:83:
32:04:a1:73:5b:1a:db:34:1f:fc:f8:69:84:d6:1f:18:4c:33:
c6:57:43:86:af:3a:ca:1d:53:b5:3b:62:3c:ae:cf:6e:3f:36:
d6:ea:81:c8:a1:76:8b:c7:8a:9d:aa:a3:56:a7:6c:a2:01:54:
d4:ff:09:08:67:e3:37:f9:ab:05:45:10:b0:16:b2:b1:b0:74:
2c:ca:c5:99:83:4d:28:e9:87:df:24:72:55:4a:c2:80:38:a6:
62:05:cf:b1:0c:72:54:13:6d:52:4f:28:f4:89:87:4e:6f:51:
a8:37:ed:7b:01:04:1a:8a:39:31:48:40:3e:53:cc:31:fa:67:
ef:62:70:4a:a6:14:5b:ac:d5:f5:a5:c4:89:c6:ff:b6:3a:73:
cd:8c:94:88:85:7d:36:8d:37:9b:04:78:f0:6e:64:0d:0d:aa:
2d:f2:80:9e:25:d4:f2:8d:e9:0e:e3:9e:a2:0c:1c:17:10:e6:
61:87:13:d3:c9:97:4f:91:22:fc:50:c7:d1:ff:54:51:85:b5:
ce:1f:71:e3:de:ed:3f:11:05:c9:3e:d0:2c:60:92:25:f0:6b:
40:1b:c7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:04:47 2025 by rpki-client