Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/g8aVgQMBCBvrswyPJiarAr7VpUM.roa
File: g8aVgQMBCBvrswyPJiarAr7VpUM.roa (raw, json)
Hash identifier: 5HrRjfLYW0OBZJTQk2MmBVB6mxhIUJtfwo5zMV6ZrEU=
Subject key identifier: 83:C6:95:81:03:01:08:1B:EB:B3:0C:8F:26:26:AB:02:BE:D5:A5:43
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 0194228E29D8F20EF6D7AB5D40F95C4B6AD5
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/g8aVgQMBCBvrswyPJiarAr7VpUM.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 193.29.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:29:d8:f2:0e:f6:d7:ab:5d:40:f9:5c:4b:6a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83c695810301081bebb30c8f2626ab02bed5a543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:02:fa:15:f2:69:44:5a:e6:5d:34:67:94:
8b:22:6b:63:d1:e5:0d:5a:9f:da:38:0f:43:6f:91:
79:df:e0:43:24:4b:b6:fe:46:c7:5c:b2:b6:42:c7:
0f:5f:35:58:09:1c:dd:38:40:2a:02:e9:a0:bc:d0:
bc:0a:03:e4:99:e6:f8:60:68:99:9d:ca:7c:87:8a:
68:7f:5b:eb:df:10:2e:54:40:3d:a4:c7:6b:2b:bb:
19:b1:5d:09:74:a2:2f:b0:cd:e6:16:47:2a:63:44:
7d:37:bb:f9:bb:76:7e:66:92:5a:b0:c1:e5:5d:05:
dc:d1:af:1c:dc:5c:46:e4:e8:93:73:02:6b:10:ab:
f5:57:f0:39:40:33:8a:49:fe:75:9a:32:4f:69:20:
6d:9a:28:30:22:1d:aa:a9:08:f3:b5:9c:59:74:05:
98:ed:5c:f2:98:64:0f:38:18:54:de:09:8f:f6:68:
7a:26:64:78:25:04:55:af:81:95:0c:da:92:9c:13:
ba:d3:ad:80:07:2c:97:47:93:ce:43:5f:ef:73:cd:
b7:94:cf:0a:d3:f0:ac:4d:0d:e6:eb:be:a4:62:38:
7d:26:20:39:79:59:03:82:dd:c4:25:d0:e8:04:f4:
57:ab:df:23:ef:c5:54:76:06:6b:47:f3:3d:06:64:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:95:81:03:01:08:1B:EB:B3:0C:8F:26:26:AB:02:BE:D5:A5:43
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/g8aVgQMBCBvrswyPJiarAr7VpUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.56.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:90:2a:de:0d:89:2e:5b:6d:1a:63:5b:35:4a:10:cb:03:15:
40:af:4a:7f:9f:c1:05:ce:4d:22:24:ca:f2:ae:0b:7d:66:29:
6c:c4:9d:73:67:09:ea:e1:d4:6d:73:8c:51:78:24:b5:41:34:
8e:91:38:ed:8b:d1:94:dc:33:73:84:17:0e:7c:b1:64:d0:41:
cd:d9:a6:32:03:a2:cd:1f:63:35:3e:4e:ca:71:f2:83:29:4d:
50:dc:04:6b:5d:ec:2b:42:ca:63:9c:af:b2:90:50:72:42:f6:
be:22:87:54:9f:7d:92:d7:ab:51:af:2a:a9:89:2d:61:45:12:
7e:4d:b2:71:ab:56:37:24:64:c4:da:b9:8d:56:f6:a3:27:09:
b3:d7:3c:92:77:04:6b:38:aa:cf:89:8d:15:4b:30:d7:c8:9b:
75:a6:32:2b:fe:87:8a:d8:4f:12:bd:a3:d1:94:c1:42:a7:cf:
2c:9f:8f:9c:0b:64:89:dc:c4:04:b2:87:6b:fc:9d:1c:c7:a6:
fb:3e:d7:45:af:75:a6:61:5c:c2:2f:09:dd:78:f2:f4:c3:a4:
8c:04:03:3f:15:34:93:87:ae:4d:cb:53:4f:74:41:f7:0d:0b:
46:b1:ca:72:d6:ee:c1:ba:29:e1:90:33:b8:10:18:76:14:86:
92:40:97:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:04 2025 by rpki-client