Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa
File: 8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa (raw, json)
Hash identifier: YQDznsFHlF+2/HPFbS/bHU432YG3aHbKtyIjPPD/5uU=
Subject key identifier: F2:BF:C2:76:E9:2A:BF:91:0A:B4:71:A0:18:CF:0F:0B:ED:C9:71:6D
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 0196D398385B03AAE8F5DC431353ED497DE4
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa
Signing time: Thu 15 May 2025 10:58:10 +0000
ROA not before: Thu 15 May 2025 10:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8311
IP address blocks: 93.177.114.0/23 maxlen: 24
185.212.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:98:38:5b:03:aa:e8:f5:dc:43:13:53:ed:49:7d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: May 15 10:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2bfc276e92abf910ab471a018cf0f0bedc9716d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:bd:2b:56:bc:fd:27:8f:f7:c1:5d:1d:e1:
91:21:b6:f2:bc:74:ba:7d:67:1e:13:6f:52:07:c7:
a8:f1:a5:8d:5e:94:97:87:d1:e6:48:59:49:6d:ce:
cf:5b:d8:71:74:fb:41:e6:9d:9e:cd:c6:88:db:67:
6a:5a:38:56:65:24:5a:56:17:0e:81:20:cd:9a:16:
47:cd:7b:f9:d6:6f:bb:23:43:56:7b:d4:5b:b8:75:
93:1f:a2:15:ec:d2:92:dd:9a:64:79:4c:ca:4a:0b:
f0:44:a7:00:a6:4b:54:da:73:96:90:95:bd:dc:11:
99:4f:6d:c7:ba:21:b9:41:95:94:9f:21:b3:53:17:
51:ad:06:14:88:fa:2c:a5:21:f2:50:15:c5:5d:88:
23:e8:25:1c:17:5c:5b:f5:bb:0f:d6:38:0d:53:03:
14:36:e5:f5:0d:94:15:8e:fa:1a:73:35:c9:09:de:
16:6a:3f:4c:34:ac:44:97:cd:c7:86:5f:bb:9d:7d:
74:63:ff:30:f1:de:9a:2e:ad:a6:35:cd:71:56:48:
01:f7:b4:42:9f:4e:ea:c9:1e:52:ba:e6:55:d6:e1:
51:ac:3b:f7:e1:f1:68:60:d4:5e:ae:80:c5:ee:22:
58:85:c9:c3:ed:98:a2:44:0a:bb:93:46:dd:57:fd:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BF:C2:76:E9:2A:BF:91:0A:B4:71:A0:18:CF:0F:0B:ED:C9:71:6D
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/23
185.212.204.0/22
Signature Algorithm: sha256WithRSAEncryption
98:be:cb:1d:c9:1b:44:a1:48:91:0a:22:60:e1:51:a8:ee:f8:
0a:c6:53:0e:16:02:da:a3:04:0c:3c:5d:27:8f:a4:cd:93:be:
10:b9:1a:d1:de:ef:45:03:e9:8c:c0:07:e7:c8:4e:37:cf:19:
57:8f:78:9c:81:dd:a1:71:05:dd:d3:00:d5:fc:be:74:6b:da:
26:1f:3d:d9:2c:08:41:0a:d8:54:99:63:a4:db:10:ee:29:6f:
2a:a6:fe:61:ec:87:69:7f:4a:92:6e:ac:d4:b7:2c:60:47:a3:
71:89:53:d2:06:f1:71:77:2c:00:72:ff:d7:cc:02:73:76:17:
73:70:dd:6d:d9:bd:6f:c7:9b:6c:6f:f6:be:61:f0:d7:02:b7:
21:9f:63:ca:6f:54:78:2e:cb:e4:de:94:8a:f6:07:86:de:5a:
75:af:d5:30:85:4d:45:12:e4:3c:84:24:9f:9c:01:2c:aa:6c:
0c:42:5b:fb:fa:b1:48:e7:9d:59:50:18:71:e8:40:ae:13:c0:
a1:03:0b:62:d3:e8:31:85:63:1c:49:f3:f1:1f:86:9f:7b:93:
96:ef:a0:e8:bd:89:9f:7e:fa:b7:f1:6a:12:91:53:27:c1:c5:
7a:f3:04:be:32:81:55:bf:c4:b4:a4:d6:50:a3:66:e0:1f:2f:
94:1c:75:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:35:59 2025 by rpki-client