Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/8wFv-nR7He4By0-yWjzDqasqWiA.roa
File: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (raw, json)
Hash identifier: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=
Subject key identifier: F3:01:6F:FA:74:7B:1D:EE:01:CB:4F:B2:5A:3C:C3:A9:AB:2A:5A:20
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 019425FD3133FAB4D659B1E8A557D91F80F6
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/8wFv-nR7He4By0-yWjzDqasqWiA.roa
Signing time: Thu 02 Jan 2025 07:48:57 +0000
ROA not before: Thu 02 Jan 2025 07:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56595
IP address blocks: 195.95.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:31:33:fa:b4:d6:59:b1:e8:a5:57:d9:1f:80:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Jan 2 07:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3016ffa747b1dee01cb4fb25a3cc3a9ab2a5a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:7b:43:70:5b:d8:eb:06:e2:d6:c8:20:b1:
48:e3:98:01:6d:e9:9d:4c:82:dd:0c:7e:c4:7e:f3:
e3:42:83:0d:22:c9:42:fc:a6:82:78:a2:48:4f:d3:
0b:40:64:00:d7:bf:61:c2:b2:fd:91:79:a0:48:9e:
0b:59:fe:df:f6:0f:09:d5:3d:20:84:73:cc:b7:e0:
2d:f0:f7:64:34:60:c9:c3:2f:20:ba:22:a2:30:c6:
e9:db:5f:65:ef:f4:b2:24:8e:63:36:e2:eb:01:5f:
72:64:47:06:d6:c5:67:f3:fb:35:60:48:f3:bb:26:
d5:f7:c0:74:77:30:91:16:08:2a:37:08:28:e2:8c:
4c:40:5d:26:0d:42:8a:7b:e1:a0:95:f9:b7:2b:28:
34:80:ea:d6:29:7d:17:33:36:48:c4:e7:b5:70:d3:
fa:0a:91:6e:e3:9c:ee:cd:44:cc:4b:f1:e2:e4:b2:
03:12:1f:8d:aa:1b:ed:8f:33:dd:09:8f:c2:9d:be:
7b:50:9a:7e:2c:38:e8:f4:d0:57:02:b9:6e:c4:86:
9c:21:57:12:1b:1c:55:ac:5f:9e:82:4c:9d:69:c9:
9c:ee:e1:fd:ef:e4:28:6b:7a:e0:80:ee:89:2e:28:
39:14:59:30:22:71:24:7d:5a:2f:a1:7a:5c:b8:3f:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:01:6F:FA:74:7B:1D:EE:01:CB:4F:B2:5A:3C:C3:A9:AB:2A:5A:20
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/8wFv-nR7He4By0-yWjzDqasqWiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.134.0/24
Signature Algorithm: sha256WithRSAEncryption
49:82:1d:ef:71:f9:28:c5:d6:3a:bf:8d:12:24:2d:68:1a:b3:
21:c8:29:52:92:dc:34:74:9b:aa:e5:db:cb:e0:3e:98:59:15:
12:72:9e:fb:ee:dc:38:3e:18:29:dc:40:63:9d:0a:15:98:93:
06:0c:d7:71:0e:1c:fd:ba:b3:b0:54:d4:f2:62:47:7b:af:d6:
21:6e:ac:a2:51:04:e3:f1:9b:26:5c:1d:10:ac:ab:d7:f4:c1:
ec:a2:29:11:e6:3c:20:40:e2:b0:e5:22:c6:25:39:bb:83:66:
be:b1:f5:ce:99:79:9a:a2:b9:09:be:32:04:3d:7b:a7:ce:cc:
c8:54:21:b1:2d:03:b8:dc:97:d1:13:4e:40:6d:e0:7f:99:b9:
eb:f7:a8:89:8b:9d:06:88:1f:8c:e3:d0:88:ce:3f:3f:8d:a7:
2c:61:37:ba:a9:9a:76:86:14:66:95:3e:b1:dd:10:8a:a7:28:
b2:1c:ae:9b:f4:08:93:45:da:56:3c:8a:d7:bc:61:40:19:33:
9e:1d:ec:9f:bc:60:8f:03:ba:d4:9d:d7:d3:5e:07:b4:69:aa:
ba:24:ad:11:95:83:8a:1e:8d:ec:c7:78:8c:a8:0d:50:31:88:
fd:d1:fe:37:65:ac:4a:71:48:c0:b3:78:58:d3:57:fc:ae:9c:
fc:40:9f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:18:28 2025 by rpki-client