Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/8wA7Z8R93JqOIr4nUCX1S5SLIf0.roa
File: 8wA7Z8R93JqOIr4nUCX1S5SLIf0.roa (raw, json)
Hash identifier: 8DXy5Yj333BXczsMQt5oYuiRo4BwLMddhajfUUPGovk=
Subject key identifier: F3:00:3B:67:C4:7D:DC:9A:8E:22:BE:27:50:25:F5:4B:94:8B:21:FD
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0194221FDAFF47363897EFC36A7749461593
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/8wA7Z8R93JqOIr4nUCX1S5SLIf0.roa
Signing time: Wed 01 Jan 2025 13:48:20 +0000
ROA not before: Wed 01 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 213.137.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:da:ff:47:36:38:97:ef:c3:6a:77:49:46:15:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jan 1 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3003b67c47ddc9a8e22be275025f54b948b21fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:11:67:c5:35:01:72:c6:3f:b9:9c:66:93:
93:75:29:04:02:69:17:45:44:3c:78:5e:c3:ad:6d:
1c:9e:e3:f1:00:9f:de:9a:f3:09:7f:c7:5d:f1:8c:
20:3e:83:83:69:66:be:b7:e7:5e:cc:ba:40:45:e6:
6f:a0:94:51:e7:10:b5:e7:5c:c4:cf:bc:38:bd:17:
bd:de:2d:26:f4:88:c1:71:5d:fb:2a:5a:59:38:41:
cb:93:e1:50:80:c1:07:8e:45:fb:aa:d0:fc:09:01:
e0:82:46:0b:d6:97:00:53:52:c3:b4:5b:97:52:5b:
7d:ea:aa:39:d0:72:48:a8:7b:82:61:a9:31:cc:42:
f6:84:8c:83:a4:a8:12:a9:bd:89:ef:b1:e9:23:cc:
d1:77:50:65:be:37:87:e3:67:c3:6f:bd:9c:1b:83:
de:d3:8e:cb:ac:98:3a:52:54:5d:2e:74:b8:8a:02:
4c:ab:fd:be:e5:ce:c9:d1:0a:1b:e0:11:82:0f:00:
9b:ae:70:d6:f5:85:fd:92:cb:d1:0f:d7:cf:9d:ed:
c4:0a:97:88:3a:49:3d:7d:b6:3c:61:90:89:cc:3d:
64:ff:88:06:1f:de:d2:dc:9e:f7:ab:d6:b1:50:ad:
a3:21:b9:d5:1b:d0:bc:dc:9a:6a:af:fa:51:22:9c:
c0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:00:3B:67:C4:7D:DC:9A:8E:22:BE:27:50:25:F5:4B:94:8B:21:FD
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/8wA7Z8R93JqOIr4nUCX1S5SLIf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.83.0/24
Signature Algorithm: sha256WithRSAEncryption
74:00:80:1d:45:64:89:6d:74:b9:53:32:fd:e7:0e:26:35:53:
c0:85:a1:ea:95:d9:05:a9:9b:52:06:e9:ee:ed:a5:3b:be:28:
b0:70:b4:bb:5f:aa:c7:36:52:c4:17:a5:a5:77:cc:7a:dc:8f:
a8:ed:af:62:5e:26:73:86:94:87:c5:70:a7:3d:83:7d:db:df:
f0:2a:6c:a6:5c:15:e4:7a:8a:81:ab:6b:97:d3:03:34:18:ba:
82:46:96:05:27:0d:a5:f5:b9:88:26:76:61:d2:a5:71:a5:cd:
e7:11:b6:9d:bd:9b:e1:b7:a0:fd:15:86:5e:28:0b:d1:33:35:
cd:d1:31:62:08:e5:25:c3:19:6d:b1:4d:8e:ae:50:e4:f2:4d:
7a:17:93:63:fe:f7:c0:e1:b3:69:f0:3a:9a:0e:97:c7:97:15:
45:76:99:b3:60:69:79:76:a9:9f:10:bb:cc:fe:3b:53:d5:ff:
30:58:ca:0e:6f:a6:c6:ed:fe:5f:f0:06:b2:0c:13:b5:1c:10:
7b:18:90:d3:95:54:27:f1:18:a9:88:18:87:1b:ac:e3:82:a5:
a0:77:a7:5e:57:76:d0:ad:5b:c1:f5:fd:eb:73:b7:e2:01:30:
49:55:63:1b:ba:e0:1c:f6:7d:45:07:d8:be:ac:0a:d7:aa:1a:
f8:40:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:27 2025 by rpki-client