Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/8FxVFuW_oUKRR2bbRCVTojM73sY.roa
File: 8FxVFuW_oUKRR2bbRCVTojM73sY.roa (raw, json)
Hash identifier: VrCY5yDzoOr7RNufMtvUlC9GTknboOTsJCKPyCRZ9uU=
Subject key identifier: F0:5C:55:16:E5:BF:A1:42:91:47:66:DB:44:25:53:A2:33:3B:DE:C6
Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial: 019425FC8DAD5B5D0CF57FF15F8AF11A0E94
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/8FxVFuW_oUKRR2bbRCVTojM73sY.roa
Signing time: Thu 02 Jan 2025 07:48:15 +0000
ROA not before: Thu 02 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.128.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:8d:ad:5b:5d:0c:f5:7f:f1:5f:8a:f1:1a:0e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
Validity
Not Before: Jan 2 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f05c5516e5bfa142914766db442553a2333bdec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:d2:02:29:cd:b5:44:de:1c:4c:e7:b1:68:
f0:9b:aa:b9:d3:cc:62:23:a2:67:b4:bf:20:5e:77:
57:1f:33:e9:50:60:98:3c:da:01:c8:1c:8b:a6:7c:
02:82:e4:74:89:de:ff:56:67:e9:35:3f:1f:1a:57:
e2:1f:ce:1d:f5:47:13:44:f5:4f:27:1a:dd:80:d0:
64:52:c9:4d:76:e2:f2:9e:0c:b1:44:3b:e1:e5:c1:
3c:ae:80:c6:08:19:1c:f5:d5:98:30:73:68:2c:f7:
a7:4c:a1:f0:3b:2b:e1:47:22:93:24:f3:84:29:0c:
1d:70:a4:a7:be:f7:04:fa:d4:fc:04:37:f1:13:82:
09:f0:de:b9:c0:85:90:83:a2:18:f9:a3:10:1e:c5:
b3:bd:31:14:5b:48:14:00:9e:41:f4:81:c5:a9:73:
8b:e6:e7:67:8e:9f:07:c0:bb:86:6a:b6:cd:65:5a:
f8:b1:1b:99:0b:47:03:d7:16:68:da:e2:d9:1e:bc:
85:79:ae:1f:83:3a:fe:f1:fe:2a:fc:1c:71:be:0f:
e4:0f:36:d7:dd:db:ae:19:fa:5b:a2:db:92:76:65:
46:bc:c5:78:6b:85:a5:94:cd:1c:ab:16:b2:fb:dc:
65:5b:0a:8b:44:3f:9b:df:08:bf:1e:2c:49:59:6c:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5C:55:16:E5:BF:A1:42:91:47:66:DB:44:25:53:A2:33:3B:DE:C6
X509v3 Authority Key Identifier:
keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/8FxVFuW_oUKRR2bbRCVTojM73sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a3:40:57:0c:78:4f:dd:31:c5:7c:4a:7f:a1:a0:9f:08:cb:
b1:cd:b3:81:1c:f0:46:48:cd:7a:ba:ef:1d:87:7c:df:45:fd:
e6:c2:d6:1a:80:ae:c0:d5:13:fd:e0:40:56:66:20:a9:32:a9:
ff:8d:27:73:82:a7:d4:77:56:98:1f:53:b1:c6:9b:cb:48:4c:
64:3a:3d:6e:a1:68:a1:5c:04:46:66:13:17:13:c2:1b:34:99:
25:5d:1c:4d:03:db:9e:2c:fe:2a:a9:fe:be:6a:d9:47:41:22:
3f:7f:3e:ed:b7:22:20:4d:43:e4:42:82:44:3c:54:8e:fd:d1:
17:d5:36:fc:be:9e:a8:f7:22:3a:1d:e2:a2:80:0e:bf:42:54:
d4:b9:af:69:9b:6b:e4:f1:03:66:4a:f2:6c:17:6a:99:b7:cd:
dd:1e:c2:41:55:9c:bf:e5:3a:79:a3:5f:70:c1:e5:7a:88:81:
f0:ae:ff:ea:d7:c7:f6:93:13:0c:3a:17:d6:c5:03:ef:3b:e8:
10:ca:ec:22:60:98:5a:6e:ef:51:69:c4:4a:0c:6a:1d:b5:8c:
1c:7a:06:a9:62:44:23:a4:8f:6b:68:26:fa:ad:b5:ea:d6:8d:
d0:69:27:f0:14:41:15:73:ce:ea:49:e6:f9:71:61:f1:63:0e:
9d:cb:6c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:37:57 2025 by rpki-client