Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/f8-Ac8JJixA8KUm-UNAScJK5KS0.roa
File: f8-Ac8JJixA8KUm-UNAScJK5KS0.roa (raw, json)
Hash identifier: AKaNbgEKVCwscjWhbkDzbne6a4Thhwqd0rd8KUARx/o=
Subject key identifier: 7F:CF:80:73:C2:49:8B:10:3C:29:49:BE:50:D0:12:70:92:B9:29:2D
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 0194221F6ABC4A03CE4B02E3C443CE28C0D7
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/f8-Ac8JJixA8KUm-UNAScJK5KS0.roa
Signing time: Wed 01 Jan 2025 13:47:51 +0000
ROA not before: Wed 01 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35042
IP address blocks: 88.214.25.0/24 maxlen: 24
91.228.101.0/24 maxlen: 24
185.55.240.0/22 maxlen: 22
193.24.208.0/22 maxlen: 22
194.24.160.0/24 maxlen: 24
2a00:1910::/32 maxlen: 32
2a00:1911::/32 maxlen: 32
2a00:1912::/32 maxlen: 32
2a09:8700::/32 maxlen: 32
2a12:5e41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6a:bc:4a:03:ce:4b:02:e3:c4:43:ce:28:c0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Jan 1 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fcf8073c2498b103c2949be50d0127092b9292d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:58:0c:fc:db:68:c7:4a:5c:7e:98:0f:5f:
e9:39:bb:ac:89:11:67:55:a6:74:3b:de:40:83:ad:
cf:a9:b5:83:82:2d:b4:ee:b1:9b:a3:7b:04:dd:6d:
1d:51:ce:b7:c0:3f:f4:0d:f2:a5:ec:06:75:ff:8d:
dc:26:aa:19:ed:d5:63:24:49:cb:97:af:73:73:b5:
08:2e:a6:1e:77:91:f4:4a:ab:e8:0a:d8:29:9a:88:
74:e4:71:1a:10:43:a9:43:1b:84:28:3d:82:a6:ed:
bf:f5:1d:27:67:12:22:29:4d:21:a3:7a:9d:d2:1a:
16:ea:a1:ea:19:34:cf:d7:61:a9:c3:96:fb:e1:5d:
2e:93:a6:c1:19:d9:85:23:27:d5:46:b9:fc:53:f7:
88:2a:d5:2d:2e:9a:24:b7:af:0a:28:52:bf:96:ee:
f7:92:0b:8f:fc:08:b6:86:ac:ac:aa:d5:3e:02:fe:
40:7f:1b:59:70:71:3b:c8:5b:f1:99:55:50:98:8d:
81:f5:d9:9b:dc:cb:bc:9e:23:ea:88:99:71:d1:d5:
b1:9c:21:c9:34:73:40:a1:43:cc:8a:4a:62:98:34:
7f:39:68:0e:ff:eb:44:ce:34:2e:21:4d:82:94:18:
d9:a5:7a:cc:4e:83:90:5b:cd:c9:c1:90:af:b2:bf:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CF:80:73:C2:49:8B:10:3C:29:49:BE:50:D0:12:70:92:B9:29:2D
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/f8-Ac8JJixA8KUm-UNAScJK5KS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.25.0/24
91.228.101.0/24
185.55.240.0/22
193.24.208.0/22
194.24.160.0/24
IPv6:
2a00:1910::-2a00:1912:ffff:ffff:ffff:ffff:ffff:ffff
2a09:8700::/32
2a12:5e41::/32
Signature Algorithm: sha256WithRSAEncryption
ba:06:a0:51:e1:94:c8:fb:e7:76:c2:4a:67:15:eb:8c:2e:6f:
ff:35:9a:9e:1d:d3:de:49:f8:ba:2c:e0:31:65:00:ff:3e:a0:
97:1c:45:06:67:2b:86:50:d9:29:71:ee:1c:a8:03:97:c4:db:
32:b5:b5:e7:93:f2:65:37:70:0a:dc:67:8a:99:6c:58:e2:e3:
7e:90:7c:1a:f9:0e:df:09:23:a7:d0:df:44:3f:ea:84:c8:51:
0c:00:09:3b:8e:d2:28:ec:4d:f0:8f:09:b6:60:19:da:9a:c2:
15:fd:d0:fa:00:1a:ac:cc:22:54:c6:70:62:78:b9:4a:75:e7:
b6:19:90:bd:06:e7:6f:d9:1a:5e:74:de:8d:ba:2e:13:0f:55:
04:6a:53:4a:20:49:f7:d2:c0:93:2f:76:ed:91:5d:2e:55:b9:
12:ad:0c:f7:d5:f8:de:ff:8f:27:ca:6d:fc:f3:b1:e9:2a:34:
1d:50:5d:ef:57:ad:59:a1:d3:94:c1:c6:7d:69:8b:f5:e3:49:
09:e1:26:02:30:60:2a:9a:a7:b3:8e:00:1a:b8:4b:3c:5c:5d:
d9:5a:b3:fc:f4:01:a9:df:12:62:7d:51:e8:0e:33:6f:10:43:
08:e8:71:fa:fd:37:2e:68:c3:08:73:47:60:0e:c2:c9:97:47:
26:a9:fd:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:39 2025 by rpki-client