Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/8wuUCHDoiO-u5k-EpvGe48eFVvY.roa
File: 8wuUCHDoiO-u5k-EpvGe48eFVvY.roa (raw, json)
Hash identifier: 8liREnCtlx6CxZif/A697CMWzrfTg26yY6bw/0u19Kc=
Subject key identifier: F3:0B:94:08:70:E8:88:EF:AE:E6:4F:84:A6:F1:9E:E3:C7:85:56:F6
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 0194266BAA2F97F819CA095565B0472AEB7C
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/8wuUCHDoiO-u5k-EpvGe48eFVvY.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.76.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:aa:2f:97:f8:19:ca:09:55:65:b0:47:2a:eb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f30b940870e888efaee64f84a6f19ee3c78556f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:60:9e:54:6d:9e:d8:9b:2e:e9:60:21:37:
83:d0:dc:b6:74:c4:66:6f:19:e4:40:d8:b5:75:de:
a8:a7:dc:4c:be:65:bc:1c:03:08:a4:86:d4:54:0c:
20:6d:b5:3e:fd:38:20:94:1d:7c:40:e7:b7:c0:95:
0b:4c:bf:8b:78:ea:bb:95:b3:c5:6f:84:cc:08:5b:
5c:24:93:57:83:17:bf:3f:dd:6d:48:e2:0f:a1:1f:
69:9a:26:27:ec:ec:91:a0:44:2d:bb:29:c3:33:8b:
06:4d:42:d7:26:73:f5:ee:71:3f:11:b1:e3:99:75:
f7:fc:dc:d5:e4:73:b5:98:64:e9:59:a1:e0:f9:24:
ce:3a:e4:ea:5f:ea:b2:80:fc:2d:a2:81:f6:b9:d3:
e2:44:b7:34:60:8f:fa:b7:63:22:44:63:01:88:30:
a1:5b:4f:05:f6:bc:c0:02:69:41:f3:f7:92:02:99:
3d:f4:3b:ec:30:9a:2c:dd:dc:a2:e6:96:42:24:16:
aa:c7:3a:c5:b1:16:b9:df:00:ef:fa:8b:b3:dc:14:
f5:48:62:8a:2f:25:45:88:b1:36:dc:95:78:e4:3f:
40:42:bc:86:5e:31:38:ef:56:f0:b7:80:45:03:dc:
a9:79:03:9a:a1:94:8c:81:0f:f9:60:e0:4a:30:d7:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0B:94:08:70:E8:88:EF:AE:E6:4F:84:A6:F1:9E:E3:C7:85:56:F6
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/8wuUCHDoiO-u5k-EpvGe48eFVvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:2c:99:ac:e2:6f:41:c8:ca:b5:23:22:02:94:8f:76:f0:93:
b5:3a:bf:ee:35:2e:a5:c2:d5:5c:dd:3b:cd:f3:cc:6e:b6:30:
3e:20:ea:25:4b:e1:1d:d1:40:e1:35:85:5b:d5:75:ea:21:6c:
29:02:2c:db:ac:dc:fd:a8:7c:30:68:dc:b2:bc:ea:cd:4a:63:
e6:f2:59:99:34:06:29:6f:6e:06:3c:db:68:42:d2:37:0d:09:
76:aa:95:02:1e:7e:c4:6e:0c:06:fe:95:72:42:e7:86:0b:5a:
06:e9:23:c1:2f:de:af:76:54:ab:e2:f7:5b:f3:4d:b1:c2:dc:
78:28:ea:ae:ac:75:4d:13:bf:0a:70:9f:1c:f8:0e:c0:ef:00:
80:ee:b2:dd:9c:42:ce:6b:b0:bd:95:c8:23:d6:a8:8d:e9:a2:
48:c7:6e:74:52:f3:ff:a5:b5:ad:56:e0:39:df:4f:b7:3c:b3:
2c:7f:96:ed:6a:e5:b3:eb:a2:27:f3:96:54:1d:6c:18:0a:85:
5e:8d:fe:38:b1:40:0b:12:c9:4b:6a:b9:3b:13:09:8b:2b:84:
b2:e2:a1:9b:b5:ed:a2:bb:31:db:29:5e:f0:e7:b6:25:52:fc:
f5:c1:b6:fb:92:6a:9a:77:3e:98:14:05:f6:f8:70:02:2d:e8:
1b:c8:c0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:34 2025 by rpki-client