Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/wNjdLgBrpNwoK33ZJluFesDgJW4.roa
File: wNjdLgBrpNwoK33ZJluFesDgJW4.roa (raw, json)
Hash identifier: +knxhKcx53OUHBbRdUnjpi7TqB/HyPEWK0X824FcNvE=
Subject key identifier: C0:D8:DD:2E:00:6B:A4:DC:28:2B:7D:D9:26:5B:85:7A:C0:E0:25:6E
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC121E02DD6A629F77311334563190
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/wNjdLgBrpNwoK33ZJluFesDgJW4.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62071
IP address blocks: 185.212.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:12:1e:02:dd:6a:62:9f:77:31:13:34:56:31:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0d8dd2e006ba4dc282b7dd9265b857ac0e0256e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:f9:e3:c9:18:c4:26:bb:3e:9f:2a:d1:51:
53:ef:a3:1c:f3:4c:8d:07:5f:54:68:ed:14:2c:cc:
f2:13:f2:7a:61:9e:e2:2c:79:a3:39:83:c7:fb:d5:
f6:aa:2a:d2:6d:4f:e6:94:7a:4f:11:72:0c:60:9c:
e5:60:59:1c:c2:e7:59:da:54:be:cb:d5:a6:e3:f6:
5d:e4:b4:35:02:7e:08:54:e3:66:d2:fc:85:05:2b:
60:8c:36:0d:77:dc:e5:b1:57:6c:e4:d7:79:a3:27:
14:c1:e9:ef:cc:9c:a0:63:9f:77:78:7a:ac:a6:6e:
77:b9:59:eb:7c:ff:e4:7b:33:56:9c:00:91:81:f5:
31:45:10:36:ce:15:2e:1c:cb:9f:47:f4:a5:3e:ba:
bf:31:49:e4:e6:67:f5:f0:26:16:d9:b6:37:b4:65:
99:56:50:ec:6b:b0:b6:52:59:70:11:73:db:39:6d:
70:9d:5d:62:b3:ef:cc:80:28:34:72:2b:37:c7:dc:
a8:2d:3f:a6:50:0a:30:43:69:47:50:2e:e8:61:be:
b9:ff:72:6f:85:ed:93:c8:10:6e:af:c1:b5:26:fb:
cf:28:30:95:cd:7d:b6:41:e6:4e:9e:dc:cd:cb:0a:
1b:1f:ae:48:4b:41:34:60:00:f1:a3:89:48:fb:e1:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D8:DD:2E:00:6B:A4:DC:28:2B:7D:D9:26:5B:85:7A:C0:E0:25:6E
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/wNjdLgBrpNwoK33ZJluFesDgJW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.8.0/24
Signature Algorithm: sha256WithRSAEncryption
21:23:d9:e7:4e:0a:73:19:9a:7a:7e:7f:91:26:2e:bc:6e:bc:
7b:65:15:44:3a:34:bf:ed:4c:3b:26:4a:e3:a9:40:25:17:a5:
50:98:66:74:5e:21:11:25:79:db:1c:11:f1:de:ab:e1:0c:08:
5d:47:96:67:71:cc:39:15:2c:f8:d2:31:4a:b5:97:da:41:6e:
5b:ca:4a:2d:77:3f:64:40:ef:8c:3d:d5:c5:8e:7f:f1:4d:e6:
5a:af:f3:de:1e:55:03:cf:9b:12:09:cf:76:14:00:cf:33:96:
46:09:62:cd:3b:d4:1d:c8:d1:ad:3e:ff:9f:71:8e:cd:9c:77:
3c:da:30:16:bf:8d:86:85:c2:63:99:b3:ef:f2:50:af:24:b6:
c4:44:12:ce:66:ff:3b:ec:01:31:54:67:6f:6d:7b:16:26:53:
0a:26:b1:11:5f:3c:4d:79:21:54:d2:e5:7d:06:59:13:4b:42:
4e:09:73:e0:b6:7d:cb:f6:86:81:3e:e8:0c:39:5e:71:dd:88:
0e:86:26:f1:1f:57:7d:73:95:51:b6:fb:e6:57:b0:96:44:1d:
a3:20:50:c6:d0:e8:40:69:59:cb:07:03:48:ab:22:f3:36:e6:
8d:81:ec:00:73:60:9d:72:88:d3:8e:08:4f:01:96:11:80:50:
ec:20:09:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:04 2025 by rpki-client