Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/l8RFk6zDl6ju8feiqfFPDPFr9EA.roa
File: l8RFk6zDl6ju8feiqfFPDPFr9EA.roa (raw, json)
Hash identifier: NmgijbzluDxtylHBOUh6fBieqg3XgYFZdaJMtuWYfzY=
Subject key identifier: 97:C4:45:93:AC:C3:97:A8:EE:F1:F7:A2:A9:F1:4F:0C:F1:6B:F4:40
Certificate issuer: /CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Certificate serial: 019428283625217A21E9D55B9B86F792AF99
Authority key identifier: 15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/l8RFk6zDl6ju8feiqfFPDPFr9EA.roa
Signing time: Thu 02 Jan 2025 17:55:11 +0000
ROA not before: Thu 02 Jan 2025 17:55:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3225
IP address blocks: 185.150.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:36:25:21:7a:21:e9:d5:5b:9b:86:f7:92:af:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Validity
Not Before: Jan 2 17:55:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97c44593acc397a8eef1f7a2a9f14f0cf16bf440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:a4:b2:a1:b4:92:8b:18:f8:b0:5b:b6:55:
a4:bc:61:71:2b:1c:ca:54:c1:1f:6d:22:28:8d:7d:
6a:ee:1e:63:e6:47:1f:a8:55:37:86:ae:17:59:14:
d3:cf:24:bf:77:88:36:77:fd:0e:7d:10:92:76:b1:
ec:b6:0b:97:93:5e:46:0d:52:d4:3f:0d:97:3e:b6:
0e:11:f5:1f:08:3f:64:2c:b4:e1:ef:63:f2:8e:33:
de:73:d2:9c:c2:d8:65:6e:58:d9:b8:3b:fe:ed:36:
cb:12:07:20:8b:8e:c7:53:0f:81:cf:94:fe:1b:bf:
95:c8:97:ba:d9:c1:02:02:89:1f:04:67:8d:4f:00:
6e:1d:0e:ce:3f:8a:a7:d6:d5:fd:af:de:17:b7:bf:
6b:05:dd:b6:22:12:f2:2d:7d:c7:ad:a9:2f:99:14:
5f:3d:c1:d9:9e:42:56:b9:24:83:74:e1:86:18:09:
c1:55:25:36:41:0d:0d:d3:63:99:65:46:e6:6f:24:
00:1d:20:74:90:63:5a:ab:7b:75:ad:81:a2:e3:9b:
4f:34:b0:1e:4f:ed:56:3b:1e:b9:4c:66:7e:39:72:
56:50:21:75:07:d5:ff:c4:b4:d3:33:08:e3:42:70:
75:2a:04:6b:09:e1:d2:81:04:c7:6b:85:57:2c:c0:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C4:45:93:AC:C3:97:A8:EE:F1:F7:A2:A9:F1:4F:0C:F1:6B:F4:40
X509v3 Authority Key Identifier:
keyid:15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/l8RFk6zDl6ju8feiqfFPDPFr9EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.219.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:32:47:a5:f9:ba:00:63:d6:4f:90:ba:ea:3f:6e:c2:16:4b:
9b:3f:ca:bd:21:d6:b5:a3:d8:4f:1b:5a:5f:e8:99:7f:72:47:
d6:90:88:04:f7:f4:03:7b:0d:16:7f:76:8c:4c:e1:fa:4f:e1:
77:87:a0:17:26:17:d1:c5:47:6a:1c:73:ef:77:3c:72:ee:84:
10:a4:84:a7:82:bf:af:b5:16:3e:20:19:80:a4:0a:f5:05:59:
06:02:46:09:53:08:61:87:59:a4:79:55:d4:b7:13:75:e9:e9:
e4:82:62:cb:f7:ec:0e:a6:9a:07:0e:43:c3:99:23:15:16:f0:
6f:ff:fc:60:f1:e8:e0:4d:4b:76:94:ee:87:b2:ba:a4:64:1e:
cd:a8:c2:89:8a:87:86:76:80:5b:9c:d7:f7:a2:59:c6:70:ce:
e8:b0:91:91:21:4a:7e:c3:45:86:58:37:46:71:f2:35:54:46:
13:c8:38:28:14:d0:e2:88:10:f7:e5:2e:3e:48:04:fc:09:41:
a9:95:d6:ea:eb:3f:77:5d:e1:d6:64:d4:f3:0d:76:1b:01:ee:
c6:d9:3e:15:03:11:65:e2:28:ed:ed:92:dd:18:c1:8e:52:28:
e8:56:4e:d6:f9:b6:2e:fc:6c:21:4f:7a:94:51:af:5d:13:9c:
61:0e:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:32:50 2025 by rpki-client