Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/S8P1gZfGhkc65wqCWBkGUn1f910.roa
File: S8P1gZfGhkc65wqCWBkGUn1f910.roa (raw, json)
Hash identifier: +5oGm4EV8slYw30wLC2Tce+uIYMD+q+Yr1QLaHtQynM=
Subject key identifier: 4B:C3:F5:81:97:C6:86:47:3A:E7:0A:82:58:19:06:52:7D:5F:F7:5D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746AAC29CC768334850C84C25CBF2DE
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/S8P1gZfGhkc65wqCWBkGUn1f910.roa
Signing time: Thu 02 Jan 2025 13:48:50 +0000
ROA not before: Thu 02 Jan 2025 13:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205953
IP address blocks: 78.135.69.0/24 maxlen: 24
188.132.154.0/24 maxlen: 24
188.132.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:aa:c2:9c:c7:68:33:48:50:c8:4c:25:cb:f2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bc3f58197c686473ae70a82581906527d5ff75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b0:e1:e3:b0:07:d2:4b:90:d8:27:66:c9:ed:
e4:6b:7a:11:1f:5a:55:d5:16:42:3d:2c:33:3b:51:
bd:b6:11:7b:c2:3f:ac:bf:ad:2b:7c:fe:0c:2a:cf:
fa:5e:e7:9c:88:68:65:87:15:f6:b6:00:25:f3:74:
9d:d0:d1:b3:5d:3e:b9:0e:3f:cf:8d:1b:17:84:9b:
1c:de:0b:77:64:a1:ed:8c:8d:4c:17:35:d3:01:08:
a8:d6:c3:8d:a3:81:76:dd:fc:3b:ab:43:ae:e4:a1:
21:01:66:7c:9b:0e:1c:bd:85:f5:36:8c:9d:51:f1:
5a:68:61:49:8a:4a:45:c7:69:1a:eb:0d:df:83:1d:
a3:43:77:a5:e2:6d:93:b2:7d:68:d2:93:10:b6:31:
06:65:28:93:6b:f7:36:f9:d4:3e:bf:44:a9:49:8e:
58:b9:4c:73:a7:56:c9:d7:c6:7e:7d:4a:b2:41:d5:
5b:cd:de:b8:44:3a:b8:e5:9b:10:18:ef:f5:78:ca:
a8:33:91:69:30:31:2f:91:33:56:25:a4:27:fc:19:
94:2a:64:8e:f7:18:5d:ac:46:f4:2b:20:dc:45:f6:
5f:7d:6b:11:23:f5:b4:61:d9:3f:02:ce:c1:a4:df:
c3:d5:b4:24:63:d3:5c:20:4a:6a:39:e5:d3:cf:85:
aa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C3:F5:81:97:C6:86:47:3A:E7:0A:82:58:19:06:52:7D:5F:F7:5D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/S8P1gZfGhkc65wqCWBkGUn1f910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.69.0/24
188.132.154.0/24
188.132.161.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ec:81:40:18:86:ce:63:cc:f7:b9:3a:07:a8:37:43:52:8e:
77:3e:23:80:af:f3:61:0a:24:15:cf:55:a9:46:9e:02:b9:ea:
47:aa:28:4c:17:51:3c:42:60:3c:74:71:3e:15:86:d1:9f:e5:
29:b0:3b:98:55:33:30:38:aa:66:60:6f:f5:61:11:1e:09:ea:
8d:30:0d:75:26:98:c3:75:50:63:62:52:02:97:6e:71:b7:f3:
ff:98:d3:c2:28:a2:f6:6a:81:19:35:da:f6:94:c5:8b:0c:fb:
b8:d9:42:b1:2c:d6:d1:d0:22:5d:66:5b:70:95:89:5c:bc:30:
8c:cc:06:fa:40:9e:2a:b3:d3:83:ea:59:20:52:06:fd:60:9e:
e1:01:34:87:3b:a3:ff:26:f6:b5:6d:b1:65:f4:98:e2:04:9a:
af:b9:94:b9:7b:d7:aa:10:81:81:a6:9b:fa:da:55:f4:6c:69:
db:ef:93:b3:99:2c:4c:b3:f7:64:4c:3e:f3:e6:a8:58:48:d2:
26:f9:07:93:22:7f:39:0d:37:93:de:11:79:9a:fa:59:7f:4c:
b9:82:fe:c9:72:06:9c:31:fa:94:eb:c7:28:f9:29:53:75:3d:
06:8c:73:e6:b0:5e:59:f4:31:dd:48:fc:ab:15:b2:1c:0f:99:
85:b3:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:58 2025 by rpki-client