Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/8bvtISuekSRpBrLsSpaV6rAQww8.roa
File: 8bvtISuekSRpBrLsSpaV6rAQww8.roa (raw, json)
Hash identifier: aP0bCcp5CUzuOtRFBu3Cv7XlqsZIi2ySA9u8hp6h1oU=
Subject key identifier: F1:BB:ED:21:2B:9E:91:24:69:06:B2:EC:4A:96:95:EA:B0:10:C3:0F
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 019469A0B1ADBCB8415B40FB9117F86737DC
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/8bvtISuekSRpBrLsSpaV6rAQww8.roa
Signing time: Wed 15 Jan 2025 11:02:06 +0000
ROA not before: Wed 15 Jan 2025 11:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53678
IP address blocks: 185.65.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:a0:b1:ad:bc:b8:41:5b:40:fb:91:17:f8:67:37:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Jan 15 11:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1bbed212b9e91246906b2ec4a9695eab010c30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:d0:f8:37:01:0b:98:a9:67:15:1c:b4:54:
4f:0f:21:99:74:36:08:53:d6:ce:83:32:1e:7a:1f:
ca:a5:da:4e:fc:ac:ff:d9:32:0b:74:c1:85:b4:53:
92:ff:8f:c6:43:ae:ac:2a:20:f9:a6:99:14:46:c2:
76:71:21:1e:c5:d3:d2:b3:66:28:23:7c:85:6c:96:
13:0f:8f:79:8d:2d:91:be:4a:32:10:98:f4:dd:19:
c9:19:84:a5:b6:4c:95:cb:23:60:42:a5:03:a0:79:
67:b5:23:59:2f:78:0f:80:27:94:3a:4a:2e:bd:d1:
7a:f9:d1:90:17:7e:87:eb:56:80:51:2e:24:e3:44:
2f:2b:d4:7c:dc:53:09:cb:49:ee:2b:de:31:03:b6:
fa:7a:e3:cf:fd:3c:d5:7e:2e:2b:22:d0:7f:91:89:
e8:c9:eb:4f:67:04:bd:c9:1c:57:a6:aa:8f:36:5d:
0b:45:6c:25:86:61:3e:43:68:4e:71:f0:58:a0:60:
fd:03:95:f3:16:03:12:60:7e:4b:a9:13:8e:8b:ce:
4a:33:06:14:24:8f:d0:af:12:af:de:db:93:e2:35:
0b:5f:34:fe:0b:18:1a:a3:06:50:a0:07:34:f6:70:
99:dd:ec:00:a6:1b:6f:d8:74:ef:54:47:27:88:4d:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BB:ED:21:2B:9E:91:24:69:06:B2:EC:4A:96:95:EA:B0:10:C3:0F
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/8bvtISuekSRpBrLsSpaV6rAQww8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.147.0/24
Signature Algorithm: sha256WithRSAEncryption
45:50:8c:cc:8a:28:51:e5:b0:d8:d9:99:e8:79:eb:b9:5f:98:
21:05:59:54:2f:5b:e6:f9:3d:ed:05:b5:5d:8f:38:ce:8e:3a:
35:fb:5e:21:5f:83:de:ee:98:3d:0d:43:ba:d0:c3:9c:8e:09:
c2:ec:32:08:ad:86:de:be:7a:03:10:b3:7b:34:1e:a9:08:59:
5c:9e:3b:bd:7c:f6:18:3a:1a:99:db:33:6e:df:7e:c1:4b:80:
bf:ac:b2:7c:e8:93:ae:07:bf:69:7e:03:a6:b9:4b:b7:a9:ec:
b1:e4:50:ec:13:c9:27:63:84:ba:73:f8:60:85:ce:59:2a:99:
34:d0:9b:3a:e0:c0:52:a4:2a:ee:56:08:9e:c7:40:23:05:23:
53:e2:9d:ca:af:d9:c7:59:66:b4:43:94:97:9d:2b:9c:40:63:
fb:6e:4a:c5:60:6a:3c:7d:a7:d8:4c:68:26:63:90:73:eb:d3:
1d:95:bb:2e:f5:f1:97:5b:e9:41:c2:77:cc:17:56:b8:5f:28:
e6:41:20:5c:66:58:8c:d5:ff:d6:52:d1:ce:b4:d8:96:23:28:
40:21:68:99:75:bc:57:0d:a9:e8:51:5b:40:c5:4e:9b:5b:9e:
fe:18:20:66:f5:d4:4a:37:25:25:8a:90:91:46:f1:a1:f6:c9:
5b:00:c1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:45 2025 by rpki-client