Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/f8mNy-1avonS_WiVxLnjQLPSSV8.roa
File: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (raw, json)
Hash identifier: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=
Subject key identifier: 7F:C9:8D:CB:ED:5A:BE:89:D2:FD:68:95:C4:B9:E3:40:B3:D2:49:5F
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 01941F8C1A1334D296D7072D6123708508D5
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/f8mNy-1avonS_WiVxLnjQLPSSV8.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31593
IP address blocks: 193.22.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1a:13:34:d2:96:d7:07:2d:61:23:70:85:08:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fc98dcbed5abe89d2fd6895c4b9e340b3d2495f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:42:ca:85:39:50:3c:6f:e5:38:6a:a5:04:d3:
39:58:78:7a:ff:00:51:3a:52:72:62:7e:fa:06:50:
46:ed:87:e9:15:c0:ea:20:93:34:de:80:77:0c:a8:
f7:e1:c0:3b:b4:b2:03:6e:71:e0:62:04:98:26:d1:
ac:5a:14:81:d9:e9:16:4d:6e:c5:71:3b:32:3c:6e:
df:6a:58:95:3d:97:66:28:89:bd:ff:ee:9e:34:81:
15:d4:1b:00:d2:0d:05:c8:6d:6b:84:3b:6f:94:41:
b0:e9:3a:8c:ae:6b:e8:5b:e5:af:45:0c:9b:8a:80:
dd:12:ff:1c:65:c6:e9:99:62:4b:4b:6e:16:e1:be:
16:a7:66:8b:7d:68:0d:ee:0f:ee:7a:99:66:f2:d7:
55:de:ba:89:73:18:b1:a1:5b:04:0a:3e:c0:e3:22:
a5:26:55:e9:48:b6:5a:34:27:20:34:82:c4:f8:d2:
01:b5:74:a2:67:62:39:7e:98:dd:fe:ab:2c:22:96:
29:03:e4:b7:72:71:fe:e8:d0:e3:17:19:e0:a0:5d:
05:7a:89:9e:aa:55:f6:71:04:cb:ee:b6:59:15:7f:
74:a0:7d:aa:41:96:23:35:7f:8a:fe:bf:64:39:7c:
8f:87:77:48:a6:61:84:4f:fd:c0:4c:6c:18:97:10:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C9:8D:CB:ED:5A:BE:89:D2:FD:68:95:C4:B9:E3:40:B3:D2:49:5F
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/f8mNy-1avonS_WiVxLnjQLPSSV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.84.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:fe:ac:f0:b1:01:2e:ca:5d:ac:3f:c5:dc:db:33:e4:3b:53:
80:9f:9e:a0:39:73:b8:88:6f:1f:ba:68:78:6c:3a:75:9c:50:
ad:f0:2d:cf:5b:87:f3:e0:78:a6:87:19:d6:0c:7d:e8:68:d9:
da:19:84:f5:d3:dc:f8:1c:84:f1:2c:c3:c5:e3:9f:8c:19:1d:
9a:81:2a:f7:0a:b3:c8:4f:32:1d:d0:6c:7f:54:84:17:24:35:
82:ac:25:55:e7:4c:9d:ce:fc:22:e3:95:21:96:6f:df:b5:b0:
7d:a9:00:85:7f:ea:41:31:df:43:2c:5a:05:00:4a:a7:da:69:
cb:8f:39:a8:fd:49:04:44:7f:fa:20:95:6e:83:b9:3c:40:65:
7b:f9:b6:37:4d:f2:7d:21:88:57:69:bb:1f:a9:77:bb:5d:7b:
9a:3a:3c:fb:43:35:29:d1:9a:20:1d:14:c6:26:02:83:4e:40:
aa:cb:e1:ea:0d:a4:a1:2b:17:bd:95:b8:28:f3:44:bb:5b:9b:
e6:50:a5:3e:2c:bd:c6:6f:f5:52:30:40:64:8e:31:fa:f2:89:
c3:b1:1e:0a:df:84:8c:22:47:5b:6a:92:66:6e:92:c9:58:8c:
97:f3:3d:c1:a1:9e:fd:aa:aa:f5:66:f2:51:53:c3:de:8e:61:
a1:10:02:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 20:06:49 2025 by rpki-client