Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/8TWqg3TfqZs_5FrvevicA08_Me0.roa
File: 8TWqg3TfqZs_5FrvevicA08_Me0.roa (raw, json)
Hash identifier: 4Z8rTsO/+irkApy694NCfCAKUJGTnN/zDl7bvRScmHU=
Subject key identifier: F1:35:AA:83:74:DF:A9:9B:3F:E4:5A:EF:7A:F8:9C:03:4F:3F:31:ED
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 0194214431B8D2DCA7B49A16902A978F3894
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/8TWqg3TfqZs_5FrvevicA08_Me0.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3491
IP address blocks: 185.152.48.0/22 maxlen: 22
185.152.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:31:b8:d2:dc:a7:b4:9a:16:90:2a:97:8f:38:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f135aa8374dfa99b3fe45aef7af89c034f3f31ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:ee:48:06:96:f6:c7:f1:47:5a:17:7f:33:
08:9a:8a:7b:62:93:5f:f1:34:ee:50:5b:28:76:dd:
32:4a:dc:16:33:2f:a4:b0:cd:3a:88:82:03:2b:72:
04:45:69:f2:c3:c3:69:11:30:3d:3a:81:da:d1:a0:
7d:1b:a3:f5:04:f0:1b:11:ca:4c:79:61:8d:70:2b:
8c:57:01:7c:8e:04:60:1c:5b:e0:08:b8:41:f3:4a:
32:04:89:8b:5d:46:a4:29:ba:6e:91:25:7e:f8:39:
6e:2c:44:12:93:96:d9:6b:fa:fb:84:fd:2f:2d:81:
a0:b1:97:22:ff:9d:65:fb:bd:00:20:f1:42:ab:cb:
f8:80:49:09:ab:45:9b:72:f5:f6:26:95:5c:12:63:
9d:55:82:84:5d:d9:77:67:8a:19:33:2f:49:b4:93:
a4:0e:0c:65:87:33:09:24:4c:e9:19:98:24:11:67:
ce:88:b2:88:a8:22:04:61:b2:02:b9:33:44:de:4b:
0c:1c:c2:72:71:bc:2c:8d:92:39:8b:4f:f5:74:10:
ea:b0:94:f0:cb:0a:34:a4:a4:ce:5d:9c:c0:ea:fc:
7d:4e:ca:b8:2a:39:f5:77:b1:73:16:fa:83:42:29:
2e:67:f9:3d:ea:47:d8:5d:ec:d6:91:37:eb:eb:93:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:35:AA:83:74:DF:A9:9B:3F:E4:5A:EF:7A:F8:9C:03:4F:3F:31:ED
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/8TWqg3TfqZs_5FrvevicA08_Me0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:93:c8:b9:11:80:19:72:e4:74:2e:38:f8:49:c5:0e:26:e8:
56:d4:6a:ab:64:a9:98:1b:f4:c5:0a:5b:e0:4a:f6:5c:1e:87:
0e:bb:4d:6d:1a:aa:89:cf:a6:c4:61:71:16:de:5a:54:87:cc:
68:1e:9a:ba:75:2f:ff:df:e6:4a:38:29:2a:09:58:ba:ae:13:
15:8e:47:e8:da:f1:6c:6c:64:a7:0c:f2:3f:e5:0e:e5:21:49:
7f:c9:f3:ee:95:d2:db:a9:d7:a7:df:c3:84:8f:ea:1a:d7:26:
33:f2:18:06:e1:6d:cb:af:60:c4:af:23:8f:6e:2a:47:45:f7:
82:42:7d:24:14:46:95:0e:bf:a7:d3:f5:4b:3e:fc:06:2a:19:
6b:be:04:68:00:eb:c6:16:ec:b0:e7:ab:7e:ea:e9:15:bd:21:
79:36:a9:f0:d5:16:3f:23:61:48:63:03:e1:a2:08:9e:56:2c:
86:db:c1:c4:1c:c8:0c:46:40:a7:a6:57:3f:b9:41:b6:03:a1:
55:4c:8b:b6:df:04:3a:f3:df:b9:4b:cb:f7:cb:d8:d2:51:d3:
15:2a:f5:c7:e0:a6:76:68:41:58:39:44:f9:e7:5e:39:50:b9:
6a:ad:5f:3a:c6:ac:7b:3c:10:e9:53:36:6b:c8:0b:35:c5:7b:
35:d2:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:56:08 2025 by rpki-client