Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa
File: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (raw, json)
Hash identifier: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=
Subject key identifier: F0:FC:4C:41:6F:2B:EA:03:58:C7:A7:11:DC:F3:2C:DB:2A:E5:E5:EC
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 019422FC3F0DC110CCE925057949C0BC46B7
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa
Signing time: Wed 01 Jan 2025 17:49:03 +0000
ROA not before: Wed 01 Jan 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206531
IP address blocks: 94.188.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3f:0d:c1:10:cc:e9:25:05:79:49:c0:bc:46:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0fc4c416f2bea0358c7a711dcf32cdb2ae5e5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:81:0b:93:19:be:36:b4:ff:9c:aa:50:81:
07:a2:a5:0a:f3:97:11:c1:0d:75:4f:f8:28:d3:fe:
26:34:ef:cf:56:ee:95:05:69:10:67:58:12:0c:c6:
2d:4c:4f:84:94:53:70:d1:46:f9:ff:bd:4d:94:03:
a0:d5:44:a4:0d:3d:08:91:8e:25:93:f5:ba:5c:51:
5c:28:63:56:67:98:3b:91:35:43:c2:99:9d:29:1d:
42:44:ee:07:9c:fe:cf:40:f6:fa:24:4d:97:7b:41:
41:84:c2:85:09:25:0d:86:e4:e0:94:54:a2:1d:21:
41:58:8d:02:f5:77:42:75:f2:d1:57:ca:bd:b7:99:
70:88:b9:48:52:69:7d:82:00:e2:ee:07:3b:4d:ea:
7a:b6:16:bc:38:bb:a4:67:7b:5e:e5:1b:b5:81:b5:
0c:a0:4b:dd:6e:26:aa:44:4a:a4:a8:23:62:54:e2:
93:e1:26:98:83:6b:39:a2:a3:04:98:da:d9:ca:64:
c7:55:04:a8:8b:d9:aa:48:a1:33:54:b7:b5:0e:14:
ca:60:2c:c1:2d:02:00:76:42:77:9a:c9:b6:dd:53:
4d:b1:8f:ff:3b:b8:73:c3:b0:a4:ca:44:72:7e:b1:
6b:75:40:c4:7c:51:38:8d:48:3b:9b:72:55:be:59:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FC:4C:41:6F:2B:EA:03:58:C7:A7:11:DC:F3:2C:DB:2A:E5:E5:EC
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:95:85:a9:ae:09:02:36:b5:21:48:2e:89:08:e1:26:84:32:
20:4b:e9:f4:90:80:5d:5d:d8:e3:7b:0f:e3:2a:02:91:ed:c4:
02:61:19:86:cb:b2:2b:e7:ce:7b:1a:6f:26:2b:bb:68:e6:23:
be:6d:8c:77:ec:35:b3:ec:1e:57:12:04:36:ae:43:e3:3b:64:
f6:5b:6e:51:53:ad:ee:fa:34:b1:2e:1b:63:31:29:1d:2b:c7:
23:df:23:08:aa:ae:bd:dd:72:99:de:8f:53:be:b2:59:c6:2f:
e1:ba:b6:28:ea:1a:45:3d:49:00:fe:c0:61:6f:c9:0c:26:5c:
b9:52:9f:8b:04:b6:47:83:d3:d3:c5:dc:7b:09:f3:9b:ab:2a:
6e:3d:bc:f8:bf:fd:37:5a:45:f0:8b:15:7a:47:a4:43:ac:d4:
4e:83:b2:c5:43:a9:3d:29:e7:8f:49:97:ac:bf:48:f0:fb:ca:
41:f4:a3:d8:d6:21:35:96:36:c8:b7:b1:5e:95:0b:68:3a:32:
17:e1:b7:ab:cf:36:34:3f:ad:b0:fc:d8:93:e0:95:df:f2:af:
fd:48:cf:76:c8:86:53:07:63:ba:78:8f:47:26:71:a2:a2:61:
54:1f:07:c1:b9:5d:e2:ea:61:0b:e3:71:2e:66:38:2e:3f:0d:
8f:3a:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:55 2025 by rpki-client