Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/8e7eehP1l-DLf5STdKJWnoHYbKQ.roa
File: 8e7eehP1l-DLf5STdKJWnoHYbKQ.roa (raw, json)
Hash identifier: K8SacJP+Z6piM83BegnBqW6J1m/glPf8EgTcnUYrotM=
Subject key identifier: F1:EE:DE:7A:13:F5:97:E0:CB:7F:94:93:74:A2:56:9E:81:D8:6C:A4
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019421B1C5B3BA76917C9E53B4FA8C7C8869
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/8e7eehP1l-DLf5STdKJWnoHYbKQ.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211611
IP address blocks: 45.86.220.0/24 maxlen: 24
91.244.247.0/24 maxlen: 24
146.19.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c5:b3:ba:76:91:7c:9e:53:b4:fa:8c:7c:88:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1eede7a13f597e0cb7f949374a2569e81d86ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:d1:8c:86:91:28:e1:6e:bc:a6:ae:d6:73:
ae:de:93:e8:0c:70:29:08:2d:e8:8b:3c:2b:c9:5b:
ff:74:cb:4e:70:8c:a0:76:6e:1b:0d:d8:14:77:ce:
39:f8:10:c5:f3:35:de:0a:0c:71:f4:fa:cf:5d:3e:
96:e9:09:72:20:9b:6d:c6:7e:be:04:a2:22:af:7c:
69:9a:78:13:82:fc:a1:fe:3e:f9:a8:6c:f3:5c:0a:
ae:16:62:6b:fc:2d:66:61:91:6a:1d:23:c4:75:55:
85:27:88:c8:70:3d:bb:3a:aa:a7:48:0e:97:ce:da:
5f:7d:b2:81:8e:de:c7:27:9e:9d:75:85:cb:79:0c:
e0:f8:3f:91:05:7f:2d:ae:8d:ab:26:e3:b5:ad:f6:
da:95:a4:33:72:85:1c:6c:97:46:fb:60:bc:0f:1f:
2f:4d:e0:e7:4b:60:ef:7e:80:6e:a3:d7:7b:b3:1c:
ae:e4:e6:89:da:99:67:de:6b:06:fe:ea:ab:23:79:
14:13:31:8d:1e:e1:d2:ca:c7:ab:ca:3b:a1:34:5a:
c0:3b:ff:bc:f4:09:1d:75:5f:1f:62:53:5f:33:6f:
9e:59:6f:c7:92:ee:f2:25:15:18:ae:41:bd:c6:00:
67:1c:ee:22:99:4a:84:49:e1:5a:6b:d4:b2:aa:3d:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EE:DE:7A:13:F5:97:E0:CB:7F:94:93:74:A2:56:9E:81:D8:6C:A4
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/8e7eehP1l-DLf5STdKJWnoHYbKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.220.0/24
91.244.247.0/24
146.19.133.0/24
Signature Algorithm: sha256WithRSAEncryption
01:50:9d:13:77:e6:64:0b:e5:1e:2a:bf:de:f5:64:30:92:3e:
bb:91:b2:b9:2f:27:0c:23:16:cc:9c:db:9f:43:5e:36:94:0e:
97:e8:9e:dc:33:8c:53:2a:0e:9f:4c:61:d5:0a:ae:70:78:8f:
5c:c8:5b:9f:af:b4:ba:f1:ed:5f:c6:65:5f:d4:3c:8a:3f:06:
f7:b8:0c:bf:96:9f:ad:5c:5b:dc:98:e0:27:e5:13:52:7f:68:
0f:3d:62:be:d0:d7:0e:d5:d0:18:95:14:4d:f2:89:ff:67:92:
84:48:27:af:0c:8b:5a:f4:5d:04:6c:bd:da:e8:1b:d6:68:20:
73:29:bb:ba:59:54:e5:70:4c:f0:57:b8:b8:0b:be:54:47:57:
dc:b2:4d:06:e3:9a:38:25:59:15:53:73:51:35:6b:a8:22:a4:
25:a6:0c:04:86:e0:43:ed:8b:0b:43:62:d3:fa:b7:5e:71:04:
1a:45:88:72:35:72:7b:86:77:b1:43:1e:b9:19:81:89:dc:83:
2c:d4:78:2f:0e:1b:b1:27:e8:f9:d8:8d:c5:1d:68:d2:04:0d:
90:6c:8c:1c:70:b7:04:cc:dc:30:36:92:87:05:9d:10:fb:f4:
06:22:b5:3f:ea:05:ef:14:dd:d4:5f:3c:c2:a4:48:2a:8a:87:
26:32:13:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:04 2025 by rpki-client