Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8Ti1MEk_yyHebV0j_jrMWMfhEzs.roa
File: 8Ti1MEk_yyHebV0j_jrMWMfhEzs.roa (raw, json)
Hash identifier: PjfFyk5d38zHZFvBJKe7jCYaarpCZHsQNVxrAQq9580=
Subject key identifier: F1:38:B5:30:49:3F:CB:21:DE:6D:5D:23:FE:3A:CC:58:C7:E1:13:3B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0195B82509BA71A1FD3699D7A5DB1648565B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8Ti1MEk_yyHebV0j_jrMWMfhEzs.roa
Signing time: Fri 21 Mar 2025 09:59:49 +0000
ROA not before: Fri 21 Mar 2025 09:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201178
IP address blocks: 188.132.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:25:09:ba:71:a1:fd:36:99:d7:a5:db:16:48:56:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 21 09:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f138b530493fcb21de6d5d23fe3acc58c7e1133b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:56:25:a6:0f:0b:e8:90:3f:78:e5:b8:37:54:
bc:9c:56:2b:26:0a:06:49:f7:c1:3e:43:1b:d4:2f:
77:a8:39:8d:91:c6:0a:26:ed:2a:3b:17:af:5d:0f:
55:07:53:55:be:5f:fd:11:bd:09:ed:81:04:04:fa:
4f:c4:b9:ed:9a:95:c9:7f:fc:cf:b6:db:a7:54:79:
d9:d9:cb:38:64:b8:e9:19:56:7e:a6:5d:9d:dc:b4:
10:af:d8:b4:45:ac:49:2e:af:fa:f3:61:ce:2b:f8:
4c:db:01:2d:c2:99:da:32:56:c4:f3:f3:8a:7a:7f:
5f:b0:ce:90:25:c3:9e:72:83:03:f7:4d:6c:86:c0:
d0:fa:b1:fd:5e:37:4a:85:b8:bf:f8:e8:52:11:de:
30:59:20:a6:66:6f:58:69:3b:4e:18:21:48:86:8f:
4a:01:b2:49:0b:ae:2f:9c:cb:8e:ab:24:52:e7:8e:
0a:52:bf:b6:f6:bd:2c:23:a3:f9:ba:80:ed:b9:d6:
c6:d1:cf:e1:b8:a4:4e:de:cd:f8:ad:ed:55:ae:00:
a4:bc:2e:ea:62:07:e4:fe:52:19:2b:c3:63:f7:15:
4f:d4:47:50:53:c2:a9:7a:4c:90:a1:c6:3e:20:8f:
76:2e:3c:09:52:61:c6:f1:ac:ab:d6:9e:53:83:81:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:38:B5:30:49:3F:CB:21:DE:6D:5D:23:FE:3A:CC:58:C7:E1:13:3B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8Ti1MEk_yyHebV0j_jrMWMfhEzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.210.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9b:d6:ee:a1:09:bf:0e:ec:40:77:93:c3:cd:b0:b4:2f:d4:
23:b0:c0:75:86:a6:52:c9:51:60:34:a7:fb:68:3f:da:57:0b:
8a:8c:68:3b:b7:9c:81:eb:e9:e4:ea:22:4c:4f:cb:81:0c:d7:
e6:33:8e:65:1f:a7:82:53:b7:32:c8:62:83:66:41:71:8c:23:
c6:c5:83:3c:6e:d7:4d:db:ac:3d:5f:37:1f:a6:06:36:71:3f:
6a:66:3a:20:14:ec:ff:87:58:cb:3f:4d:b2:b7:9a:a6:d0:08:
84:d6:ea:e4:62:89:72:9d:5e:54:6d:b6:4a:ec:0b:85:dd:ee:
af:1f:30:f4:fc:55:42:ee:96:6d:9a:00:86:b3:3b:cf:e7:df:
33:06:67:d3:62:ea:6e:74:e9:ba:f5:d2:d3:77:70:17:8f:1d:
90:1f:e9:88:39:a7:22:b8:92:7d:c8:f6:2c:be:cc:60:52:8b:
b5:b7:5d:f9:01:1d:9e:2e:bf:10:c9:87:94:f3:61:99:7d:a0:
de:11:da:e1:8f:c2:8c:6c:88:63:f0:36:c2:b8:3a:0d:cb:ba:
42:73:94:38:8e:a2:85:db:2b:91:0c:44:ef:ea:b5:74:de:80:
0a:e2:f7:89:6e:33:41:e4:d1:ab:ac:f9:09:e2:86:29:ae:8b:
7b:63:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:12 2025 by rpki-client