Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8bJ8KCMJbU-1GsJop9TFztZsd48.roa
File: 8bJ8KCMJbU-1GsJop9TFztZsd48.roa (raw, json)
Hash identifier: tWeBeqm/ngjm1LhZVe1zp3urIvG9yj10o44Vnd32nEc=
Subject key identifier: F1:B2:7C:28:23:09:6D:4F:B5:1A:C2:68:A7:D4:C5:CE:D6:6C:77:8F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521DF6627173D13978A1CD54DBAA2C1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8bJ8KCMJbU-1GsJop9TFztZsd48.roa
Signing time: Thu 02 Jan 2025 03:49:24 +0000
ROA not before: Thu 02 Jan 2025 03:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60802
IP address blocks: 193.58.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:df:66:27:17:3d:13:97:8a:1c:d5:4d:ba:a2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1b27c2823096d4fb51ac268a7d4c5ced66c778f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:93:c7:67:a7:87:15:b1:56:2a:c8:95:7c:
c2:b7:5d:ea:8d:08:36:c7:a8:fc:3c:97:42:a6:91:
fd:cb:9d:e9:1a:62:89:ed:05:18:fa:2c:b1:aa:5e:
b0:e2:93:a9:fd:86:2d:42:36:94:1e:25:0e:1b:d6:
27:d2:69:b1:29:67:78:f3:d3:84:2f:b3:94:1f:4e:
d9:0f:66:a3:8c:f3:1b:3c:fc:fb:1e:72:07:e5:6f:
94:dc:1a:c3:30:ad:8b:18:81:54:18:f5:5b:cf:1a:
0c:bd:d7:15:48:75:0a:13:5e:95:85:55:fd:3b:97:
4e:7a:62:d2:6b:23:67:4f:d4:36:95:28:9d:ef:41:
7e:e6:02:97:4b:6a:9f:b5:c6:7d:05:20:c8:fd:3c:
00:fe:b6:8c:df:e8:db:13:71:b2:bc:76:04:3c:88:
a9:49:71:4b:ff:1f:56:61:86:98:54:31:f9:cf:82:
a8:10:c3:b6:9c:0b:2f:00:9b:b3:c2:4c:b1:40:4a:
c1:bf:42:6b:cd:f4:ff:72:cd:aa:e6:8f:78:a9:97:
00:2b:33:27:14:01:1c:23:43:52:ff:35:42:75:19:
33:c9:72:34:ea:1f:82:17:7b:5e:12:78:80:2e:02:
9a:83:5f:52:b5:79:06:d3:fb:c2:82:ee:f5:ee:0c:
0f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B2:7C:28:23:09:6D:4F:B5:1A:C2:68:A7:D4:C5:CE:D6:6C:77:8F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8bJ8KCMJbU-1GsJop9TFztZsd48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.239.0/24
Signature Algorithm: sha256WithRSAEncryption
94:fe:22:d3:7c:82:de:ce:48:cb:96:cb:25:01:fc:d3:9b:f0:
15:56:d6:20:33:d0:0b:cd:87:20:23:d1:af:ad:7b:7c:98:50:
59:f0:ff:6b:6e:27:12:c8:c9:58:cb:e4:9c:f5:7e:e0:1b:e9:
b9:4f:f6:9e:22:12:4e:20:91:1d:71:63:9d:ee:0b:d3:42:3a:
5b:d1:17:41:90:30:58:03:4f:37:d6:ac:8b:1f:54:18:d0:6e:
c4:42:05:52:23:fa:d0:37:43:11:eb:bc:65:4a:0f:c0:0d:fd:
e5:b7:20:c1:6e:56:aa:ec:f9:f4:56:66:25:f5:fb:f6:ca:e0:
4e:74:f5:30:5a:4a:b0:a0:03:05:9e:b0:e6:a1:4b:42:a0:fe:
13:63:46:bb:34:c9:c9:d7:8a:6d:f9:7d:b2:7f:2d:48:f4:ac:
51:e0:ae:bd:16:be:f0:f5:48:e0:e8:d2:fa:09:ac:ea:d7:b3:
52:e8:80:10:72:19:37:0a:1d:5c:44:97:6a:ad:cc:b9:67:81:
37:f2:f4:de:b2:6f:cc:5a:f5:6e:ac:c6:67:1a:bb:d4:e2:2d:
78:cd:7a:1f:7e:9b:22:b3:6e:be:39:91:c1:91:7b:4d:02:3e:
3b:4e:4a:34:af:e2:64:fe:25:21:2c:79:4f:d1:e3:e9:b2:0d:
d1:0d:c2:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlId9mJxc9E5eKHNVNuqLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWIyN2MyODIzMDk2ZDRmYjUxYWMyNjhhN2Q0YzVjZWQ2NmM3NzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC+Tx2enhxWxVirIlXzCt13qjQg2
x6j8PJdCppH9y53pGmKJ7QUY+iyxql6w4pOp/YYtQjaUHiUOG9Yn0mmxKWd489OE
L7OUH07ZD2ajjPMbPPz7HnIH5W+U3BrDMK2LGIFUGPVbzxoMvdcVSHUKE16VhVX9
O5dOemLSayNnT9Q2lSid70F+5gKXS2qftcZ9BSDI/TwA/raM3+jbE3GyvHYEPIip
SXFL/x9WYYaYVDH5z4KoEMO2nAsvAJuzwkyxQErBv0JrzfT/cs2q5o94qZcAKzMn
FAEcI0NS/zVCdRkzyXI06h+CF3teEniALgKag19StXkG0/vCgu717gwPgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPGyfCgjCW1PtRrCaKfUxc7WbHePMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvOGJKOEtDTUpiVS0xR3NKb3A5VEZ6dFpzZDQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTrvMA0G
CSqGSIb3DQEBCwUAA4IBAQCU/iLTfILezkjLlsslAfzTm/AVVtYgM9ALzYcgI9Gv
rXt8mFBZ8P9rbicSyMlYy+Sc9X7gG+m5T/aeIhJOIJEdcWOd7gvTQjpb0RdBkDBY
A0831qyLH1QY0G7EQgVSI/rQN0MR67xlSg/ADf3ltyDBblaq7Pn0VmYl9fv2yuBO
dPUwWkqwoAMFnrDmoUtCoP4TY0a7NMnJ14pt+X2yfy1I9KxR4K69Fr7w9Ujg6NL6
Cazq17NS6IAQchk3Ch1cRJdqrcy5Z4E38vTesm/MWvVurMZnGrvU4i14zXoffpsi
s26+OZHBkXtNAj47Tko0r+Jk/iUhLHlP0ePpsg3RDcIP
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:51:58 2025 by rpki-client