Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa
File: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (raw, json)
Hash identifier: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=
Subject key identifier: F0:CC:51:F9:37:AF:D6:8D:55:2F:4B:7D:55:18:02:44:07:FB:BE:72
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 01942686DD3C7ECD6E8233EEA1420060717D
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa
Signing time: Thu 02 Jan 2025 10:19:20 +0000
ROA not before: Thu 02 Jan 2025 10:19:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203295
IP address blocks: 185.139.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:86:dd:3c:7e:cd:6e:82:33:ee:a1:42:00:60:71:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 2 10:19:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0cc51f937afd68d552f4b7d5518024407fbbe72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:3b:8c:43:38:73:7e:2c:4a:fb:cb:11:e5:
e9:ed:60:5b:bc:9b:36:88:a2:e2:23:7c:43:8e:26:
cc:bd:60:66:71:ec:f8:d7:9d:38:d4:7d:9a:58:73:
a7:12:9e:b0:a6:92:fe:ec:42:44:f9:14:96:38:18:
1b:59:19:5c:8c:6a:9f:76:e0:12:0a:cf:d8:c1:ed:
17:f7:55:97:03:b3:e7:e7:de:fe:24:6e:68:bd:76:
cb:79:db:8d:f5:c7:a0:ad:72:e8:5f:cf:78:ed:e4:
da:72:4c:83:be:d8:48:18:66:72:95:38:ef:48:76:
d9:39:ca:e1:d5:6a:e0:f4:bf:20:cf:78:1f:cd:a8:
94:f8:e0:c5:27:2e:d4:51:e6:19:61:25:48:a8:c8:
10:d6:b7:f5:14:03:79:10:4e:63:39:9d:d5:5c:56:
df:eb:90:50:86:53:f8:1a:6f:7f:13:36:79:29:b0:
c3:6d:e5:cf:ce:4e:3f:e8:43:c9:4b:9f:1f:b7:72:
06:bd:eb:13:56:8c:83:5a:6c:c9:f3:3b:06:2e:59:
a4:31:86:53:0b:5d:4b:3d:9c:a7:e5:65:e8:47:a2:
90:35:bd:ed:ba:ce:f7:2c:63:8f:c0:f0:ba:2a:ef:
12:0c:b2:2a:7a:50:f6:81:c5:27:83:e0:6b:a6:b9:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CC:51:F9:37:AF:D6:8D:55:2F:4B:7D:55:18:02:44:07:FB:BE:72
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:87:05:a7:71:d8:61:84:66:0a:ac:7b:d8:7c:9b:a7:6e:eb:
e4:ce:07:3f:b5:a3:ed:7a:07:ae:7f:45:1b:b2:11:9f:a2:f1:
e3:e0:3e:99:50:eb:f0:d4:7e:6f:4c:18:88:b4:f8:b1:f6:74:
75:8a:46:74:48:ce:16:33:7e:ac:1e:a1:3c:cf:aa:90:d7:aa:
1d:90:f3:6a:ed:1a:d0:c4:61:c4:15:d6:38:75:07:9c:34:63:
41:78:ff:a2:e8:c6:49:6b:cc:21:2b:b7:ee:8b:22:e3:89:68:
96:b4:48:cb:b0:42:ae:ac:45:51:8c:13:e1:07:2e:8d:ea:e1:
d1:8e:1e:1c:0d:06:ee:e7:02:f2:5c:87:fb:9d:0d:b6:1d:da:
c8:2d:3e:75:54:25:a6:08:83:7f:da:ef:ef:77:65:b0:bb:e9:
0c:7a:62:56:34:e2:d7:2c:6d:82:42:fa:2b:bb:ac:15:1f:71:
65:2a:9e:2f:f3:7b:6e:5c:ad:11:9f:43:9a:86:da:7b:ef:b3:
48:ba:06:a6:30:df:4f:06:f0:9e:5b:0e:ee:4c:42:eb:1d:f2:
41:d3:b0:7b:23:bf:8b:6d:be:6e:f9:35:8a:8e:b6:14:fc:d3:
f9:88:29:4e:94:08:4b:c0:86:71:13:05:63:57:e3:a7:6b:51:
ff:80:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:11 2025 by rpki-client