Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/CV8BH6QqqPLT40ybYR57zHuITz0.roa
File: CV8BH6QqqPLT40ybYR57zHuITz0.roa (raw, json)
Hash identifier: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=
Subject key identifier: 09:5F:01:1F:A4:2A:A8:F2:D3:E3:4C:9B:61:1E:7B:CC:7B:88:4F:3D
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 0194258F7E94F869F3D535160C4E2AB59E86
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/CV8BH6QqqPLT40ybYR57zHuITz0.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21221
IP address blocks: 82.150.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7e:94:f8:69:f3:d5:35:16:0c:4e:2a:b5:9e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=095f011fa42aa8f2d3e34c9b611e7bcc7b884f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:22:dd:43:10:61:9f:b6:ca:87:6c:ac:73:
b4:ae:6f:27:59:be:76:ac:34:87:46:c9:d1:e8:2b:
e7:1c:70:d5:54:af:a4:19:c7:7d:fd:90:ab:cb:9b:
db:11:b5:0c:73:40:b3:d8:11:0b:55:07:5b:c5:cc:
56:10:4c:96:2a:0d:35:c5:d3:b6:8c:8a:27:c3:78:
18:c9:09:fe:38:e0:44:d4:e2:0f:1a:4e:50:6b:13:
f0:f9:73:a5:70:e5:68:5b:90:8c:f5:e2:9b:6e:aa:
11:4d:19:c2:54:6f:06:4d:74:85:a4:5f:b2:ff:6e:
8e:69:ed:ae:cd:78:d8:c8:77:f4:24:f7:53:26:43:
be:fd:a9:6d:68:da:a7:3f:2d:9c:b2:6a:d1:29:7f:
08:7c:39:7a:a0:2b:1f:b0:37:83:5e:f0:2f:db:86:
45:9d:ef:c5:96:a9:25:af:96:44:b4:f6:64:08:fc:
af:91:61:f8:0e:6d:fa:da:de:51:4b:bd:1a:4b:e3:
1c:3a:0b:4e:f9:ea:9a:6c:09:97:c9:d6:f7:01:cb:
40:00:84:f3:78:9b:17:0c:82:cb:b0:84:c4:3b:e4:
9c:f3:3e:8f:d5:0b:9b:80:3d:33:42:67:bb:85:ad:
16:2f:7f:66:c0:a6:5a:f9:1b:19:c9:ed:d4:e8:b6:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5F:01:1F:A4:2A:A8:F2:D3:E3:4C:9B:61:1E:7B:CC:7B:88:4F:3D
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/CV8BH6QqqPLT40ybYR57zHuITz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.140.0/22
Signature Algorithm: sha256WithRSAEncryption
65:cd:e1:08:63:70:45:aa:ed:08:85:82:cf:1d:e4:12:41:99:
db:f4:cd:8f:ba:c3:5c:fa:a9:07:4b:7a:a1:aa:5b:e7:84:e9:
5c:de:85:5d:62:e0:e5:ec:8b:ec:13:2f:1c:61:c8:21:71:a3:
ea:b5:56:78:7d:73:12:4b:39:9a:74:f8:6a:26:42:8b:16:6a:
1a:00:58:14:c9:a8:50:41:7b:64:15:d5:b9:d4:c1:ac:f3:f8:
cc:ab:c1:2e:16:7d:96:c3:76:2f:e5:d5:8b:d0:af:33:74:ca:
27:54:de:bc:13:c1:4b:81:12:1d:9b:dc:86:e2:35:ba:98:e2:
7d:c5:4d:ce:69:84:df:d3:9d:73:54:0d:f4:fb:b2:61:91:14:
d9:87:77:38:8d:fe:cb:67:e4:11:00:97:b2:24:f5:ef:95:60:
6a:a9:d0:54:d8:31:cf:e9:75:49:9b:fb:1d:ba:68:51:7a:53:
9a:d9:7e:c6:11:bd:b0:68:0e:af:e0:e1:c9:77:a2:a1:b6:c1:
4b:37:26:4d:8a:cd:0c:58:a7:74:e2:32:0a:81:66:51:a6:7b:
ea:57:03:8c:7f:11:6d:34:36:3b:46:a4:3a:3c:fc:61:d4:fb:
57:a7:f9:a7:fd:10:24:f6:33:fe:3c:91:92:4a:c6:15:55:b3:
69:74:9f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:38:01 2025 by rpki-client