Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/8GYAexsjvmr0ISLsQKryGmpLtTs.roa
File: 8GYAexsjvmr0ISLsQKryGmpLtTs.roa (raw, json)
Hash identifier: SQMUuzA/SYQZuwCfc0e9iAWXVLPmE3XP9dpG659uDkI=
Subject key identifier: F0:66:00:7B:1B:23:BE:6A:F4:21:22:EC:40:AA:F2:1A:6A:4B:B5:3B
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 019426D9058194E808037CEF24EB975E3F1F
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/8GYAexsjvmr0ISLsQKryGmpLtTs.roa
Signing time: Thu 02 Jan 2025 11:49:04 +0000
ROA not before: Thu 02 Jan 2025 11:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.59.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:05:81:94:e8:08:03:7c:ef:24:eb:97:5e:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Jan 2 11:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f066007b1b23be6af42122ec40aaf21a6a4bb53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3e:e9:6a:ca:c5:b8:69:4e:4b:b8:87:51:1c:
4a:eb:b0:08:fb:6b:d8:7f:4b:60:36:37:6a:51:b3:
df:01:79:84:62:2b:f1:e0:55:0a:df:ad:89:3b:d1:
10:78:56:f4:fe:2c:9a:ea:db:96:3c:28:ba:f1:41:
57:1d:e6:9d:f8:31:ca:cc:9e:29:4d:40:80:e3:fb:
d7:8c:3d:bd:6a:f1:2c:f8:5d:da:7c:8a:de:9a:e1:
7a:8a:3e:d5:32:5b:37:c5:2e:ec:86:f9:df:e3:b8:
38:fb:8e:41:eb:93:bd:9f:51:b3:72:e4:a7:75:4d:
e4:52:38:c0:66:3e:50:d2:cc:4a:d0:07:31:78:8d:
53:9d:66:5e:35:73:ce:71:a4:4a:0f:3a:2b:99:f2:
0d:80:1a:0f:2a:e4:7b:aa:d5:6b:8c:7c:4a:08:66:
1e:44:f9:df:41:bc:0a:65:00:53:9b:a1:a0:dc:29:
e8:e1:a8:f5:25:ef:ea:bc:10:16:21:ec:4f:74:2c:
b0:68:a7:84:4f:50:0d:82:73:e9:a2:61:7f:82:11:
7c:69:ad:ec:a2:1a:89:22:b3:0b:ee:75:7f:7e:3b:
14:63:fc:b6:f1:e2:36:21:64:6b:fd:a5:c7:56:05:
d7:ad:63:a9:fd:84:64:93:fb:14:c6:5b:43:3d:e0:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:66:00:7B:1B:23:BE:6A:F4:21:22:EC:40:AA:F2:1A:6A:4B:B5:3B
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/8GYAexsjvmr0ISLsQKryGmpLtTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.136.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5b:04:87:26:36:2b:d3:d9:ae:5d:e3:9d:ef:05:a2:e7:75:
f2:c7:88:89:41:07:c9:e2:15:ac:a3:7b:7c:a2:a0:16:f6:8c:
ae:81:03:f7:a3:68:10:92:d9:87:af:dc:92:28:ec:67:97:24:
96:10:9d:b4:95:de:24:da:7e:3d:1f:01:3e:4f:e7:93:a3:2a:
98:b3:c5:0a:09:3e:8a:1a:56:bd:34:00:22:ce:f2:05:1d:b3:
68:4c:b5:bd:80:62:ef:93:c4:59:d6:e2:1f:84:f7:4f:2c:53:
10:d5:d8:aa:92:c4:0d:9d:91:25:d9:4d:eb:1b:ad:bc:e9:11:
8d:74:ba:b4:63:65:24:f7:1c:4d:44:b7:a7:8f:9c:3a:a7:e9:
f5:75:b9:25:ef:0f:4f:1a:0e:e3:a0:00:a9:a6:ca:42:05:e5:
85:0f:51:25:e0:e7:4c:4f:3d:4f:8d:a3:9d:1c:b2:2b:f6:3d:
c8:d0:d0:42:ec:f1:a6:6a:9c:e3:87:db:96:3c:62:9c:91:2e:
fd:2d:15:00:8b:08:60:94:de:74:da:29:37:3e:aa:99:bf:2e:
5b:a1:03:6e:46:c6:0b:0a:f7:22:d3:be:1a:71:d7:c0:80:05:
d4:52:8c:9e:06:52:c2:1f:c7:b5:c5:1e:e1:62:d9:47:bb:fa:
6c:ed:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:55:08 2025 by rpki-client