Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8zHdGKW8nX_0N-UsRjEBxENu320.roa
File: 8zHdGKW8nX_0N-UsRjEBxENu320.roa (raw, json)
Hash identifier: BxiyuGH5V9COa53fXtgYjDapLPGllDopI7FBK1Dmvwo=
Subject key identifier: F3:31:DD:18:A5:BC:9D:7F:F4:37:E5:2C:46:31:01:C4:43:6E:DF:6D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FB4100EE3AB2E9EC0DEE7FC729835
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8zHdGKW8nX_0N-UsRjEBxENu320.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49491
IP address blocks: 31.148.134.0/23 maxlen: 24
31.148.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b4:10:0e:e3:ab:2e:9e:c0:de:e7:fc:72:98:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f331dd18a5bc9d7ff437e52c463101c4436edf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:05:e9:0e:2b:79:a6:13:82:8e:6e:a0:3c:
a5:81:ef:8a:f3:14:84:19:e6:45:fa:62:ff:19:e4:
c3:b9:2b:22:ce:71:41:4a:3e:0b:37:9d:e9:6c:c6:
c8:83:74:eb:50:2d:6a:e6:1e:d3:43:e0:ff:e7:25:
7d:07:15:9d:11:64:60:c4:d8:e5:50:d2:5d:52:4d:
cc:d8:8c:80:40:95:06:12:92:16:9b:24:31:6e:ef:
93:59:66:f8:2e:31:4d:05:ca:0e:70:da:dc:62:c7:
1c:12:46:e8:f8:21:04:15:d3:49:e2:5d:c1:42:9c:
10:9f:77:cd:6e:07:21:ca:34:a9:2e:5f:93:de:bf:
8c:e2:7b:86:90:46:d3:77:cc:a5:15:e0:93:9a:a1:
92:0d:44:28:6e:04:45:e3:2f:1b:bd:3a:fa:dd:82:
96:46:fb:5e:53:4d:c0:2b:ba:9a:09:47:80:d2:76:
de:11:21:e3:20:89:3e:fa:09:36:42:d2:7e:3f:b6:
1e:0d:82:a2:2f:1c:87:24:41:22:7f:97:c6:a1:be:
75:9e:d0:64:a2:25:d7:37:8d:be:d8:79:5a:83:b6:
da:e3:d2:f3:9b:1e:ca:2d:0d:bb:5a:16:be:16:cf:
e1:21:b7:4b:24:d7:12:78:8e:ab:56:83:3e:68:14:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:31:DD:18:A5:BC:9D:7F:F4:37:E5:2C:46:31:01:C4:43:6E:DF:6D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8zHdGKW8nX_0N-UsRjEBxENu320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.134.0/23
31.148.150.0/23
Signature Algorithm: sha256WithRSAEncryption
08:2b:a7:e5:c6:da:24:05:ac:f2:6e:d1:7b:5e:5a:6f:3c:2e:
ac:a1:13:11:cf:66:4a:f8:6c:fa:c6:8e:c9:9e:10:51:9e:1c:
96:e9:04:4c:29:cb:9b:af:04:3c:97:ae:cb:95:ea:b1:be:cc:
b0:b0:00:8b:fb:bc:3e:b4:f1:fa:59:4f:c8:65:c4:77:1e:2a:
a2:37:8f:7d:03:84:aa:fc:d4:37:13:93:9e:6e:24:11:1d:67:
61:7c:62:03:30:93:75:c0:6a:b4:94:6f:0a:07:65:a1:3c:21:
52:48:da:e1:0b:cd:a8:f3:5a:65:16:bb:21:a1:eb:ed:24:ed:
28:a7:53:36:3c:2f:89:82:7b:f7:86:31:66:b0:a6:c7:96:a2:
15:3a:db:8c:02:e1:4d:d5:1a:6d:4e:69:53:9c:14:54:d7:49:
78:bd:b8:4e:b7:c9:a3:46:36:1c:06:44:9b:88:46:6a:00:f8:
d8:7e:92:f7:82:e2:57:2f:8f:cc:cc:0c:0c:98:ad:42:cc:ab:
78:7b:e6:01:c8:47:a8:3b:fe:8e:09:c5:69:be:c5:88:10:f7:
ac:64:72:38:db:f4:08:e7:ff:32:c0:36:7f:9a:9e:b8:d0:92:
d8:82:4a:c1:54:92:bf:64:f7:f9:7f:3c:0d:88:1b:d2:10:6c:
a4:c7:29:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:48 2025 by rpki-client