Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8Xkfy-TJg0xLSMlQwfcuIITuleU.roa
File: 8Xkfy-TJg0xLSMlQwfcuIITuleU.roa (raw, json)
Hash identifier: xIr+N+LfbxszfBl/QY/GuFY5sfQ/HWoE0/Gw2nngIdk=
Subject key identifier: F1:79:1F:CB:E4:C9:83:4C:4B:48:C9:50:C1:F7:2E:20:84:EE:95:E5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C0A9C426DC05EBA98A4E7D8E6AAC7
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8Xkfy-TJg0xLSMlQwfcuIITuleU.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2614
IP address blocks: 194.102.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0a:9c:42:6d:c0:5e:ba:98:a4:e7:d8:e6:aa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1791fcbe4c9834c4b48c950c1f72e2084ee95e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:f1:6c:23:91:85:11:8d:4b:fc:fe:4a:08:
9e:86:70:c5:3e:79:a3:13:93:12:bc:3b:94:cd:9e:
4f:2e:ff:9f:53:e4:61:be:0a:9c:19:c2:03:2b:4e:
76:75:6b:db:3a:7d:f6:ac:5d:38:d3:4a:7b:ff:f0:
bd:a4:93:8e:92:57:f3:ab:67:74:20:04:b4:8f:47:
dd:98:d5:f8:0b:f1:50:fa:e7:80:65:27:4f:a8:52:
ad:e6:5d:e7:22:4f:13:28:22:31:c3:5e:4f:f8:ec:
f6:a0:68:03:04:b4:02:0a:f0:20:04:bd:86:8e:be:
2b:ce:f3:b1:14:4f:0c:6d:b8:79:e1:55:89:f4:0e:
56:23:04:e4:38:2b:4b:55:67:6b:e1:bf:2a:b9:6c:
89:56:30:60:ee:dd:60:08:01:70:8a:fb:6a:38:c2:
49:84:3b:96:82:6e:2e:24:78:1d:f9:1e:35:af:f4:
d7:8c:84:f5:ff:88:d9:74:5d:cb:77:6a:de:f6:98:
cf:a2:61:28:1d:b8:66:29:a5:84:cb:6c:63:1f:7f:
bd:35:cb:30:d8:d6:af:58:c7:bb:63:e7:fe:7f:54:
63:f7:48:d1:c5:a4:bb:07:e9:02:a6:5c:f4:02:95:
a8:d4:46:bc:53:a6:c1:5e:78:08:c8:9f:22:b4:70:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:79:1F:CB:E4:C9:83:4C:4B:48:C9:50:C1:F7:2E:20:84:EE:95:E5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8Xkfy-TJg0xLSMlQwfcuIITuleU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.61.0/24
Signature Algorithm: sha256WithRSAEncryption
42:57:f8:8a:fb:05:5c:89:7a:99:c2:c8:26:24:41:a5:1a:e4:
32:26:52:0a:69:7a:9a:a7:3a:51:8f:fb:16:0e:5e:19:cf:71:
23:fe:ce:3b:86:8f:db:08:02:3a:d7:5f:57:e2:4a:81:d3:6b:
e6:16:1f:01:4c:eb:9c:6d:21:47:bc:3f:b3:45:ab:fe:6c:32:
58:67:d5:49:d3:ab:29:5c:bc:d1:16:b7:3c:63:2d:9e:92:ba:
58:80:34:3d:5e:f7:9f:2c:e1:7a:b3:eb:09:fd:af:0c:6f:ad:
7b:5d:dc:80:f7:be:7c:fc:0e:f0:5b:57:a9:7a:f3:05:da:19:
d3:70:39:90:c7:b9:5f:43:d0:09:3d:79:b9:07:88:d3:49:20:
84:bc:18:c1:7b:f2:09:9e:da:e8:91:cf:86:62:25:44:8d:41:
d5:5b:ea:7d:6d:a3:10:ef:6a:f1:f7:fb:2a:66:1e:be:8e:fc:
1e:ba:c6:7d:42:e8:7a:1e:9c:aa:31:e4:e4:4b:d1:f4:41:eb:
8f:90:c4:83:7d:b4:ec:02:76:28:11:11:c6:f4:5f:e6:f4:e8:
ab:98:a2:99:92:5f:ab:86:05:88:60:1c:44:0e:73:9e:d5:c1:
f4:10:02:7e:70:b2:2c:a4:3d:e8:75:4f:bc:4c:fb:30:ec:5b:
ef:75:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:20 2025 by rpki-client