Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/8IeUbOwS853SmApxlhlEYT9gqJU.roa
File: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (raw, json)
Hash identifier: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=
Subject key identifier: F0:87:94:6C:EC:12:F3:9D:D2:98:0A:71:96:19:44:61:3F:60:A8:95
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 0194206852B045BBADA56DC1F8461EBBBFD9
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/8IeUbOwS853SmApxlhlEYT9gqJU.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211699
IP address blocks: 194.113.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:52:b0:45:bb:ad:a5:6d:c1:f8:46:1e:bb:bf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f087946cec12f39dd2980a71961944613f60a895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:ae:2c:83:26:a2:7d:53:fa:a7:d1:62:6c:
dc:a1:da:7d:7a:a4:38:73:10:98:7c:dc:62:1e:aa:
88:4e:35:c3:38:92:67:17:c8:4e:ee:b2:e8:3b:c9:
b4:a1:43:9c:fe:6b:5c:ff:3c:c3:3c:6b:39:a4:09:
dd:5f:99:e0:99:af:af:ad:ac:52:fc:24:a5:e0:c9:
15:63:eb:d6:24:66:40:2d:59:f0:73:34:22:14:dd:
5a:00:c4:67:4b:c1:c1:3d:b0:24:d6:0f:bd:9f:29:
e4:de:26:1d:ce:22:59:df:4c:d8:cb:f6:3c:6b:63:
53:6a:03:e6:e7:1c:b7:45:3f:74:32:a5:90:9b:1f:
a5:e7:ea:e4:a3:67:68:35:d5:55:37:2b:55:1d:73:
4a:e1:af:25:04:4b:c4:e2:dc:ff:43:f9:21:02:2c:
89:68:89:73:8c:86:90:cc:6b:28:5f:07:5e:19:c2:
c2:18:5c:76:a9:c3:bd:8a:16:c0:c7:78:5b:84:50:
32:93:dd:86:88:8c:49:e5:4f:14:e3:96:03:c9:b4:
f5:e8:9b:7c:93:e4:f0:c2:90:98:12:82:51:f7:7d:
92:88:16:86:3b:98:01:87:90:d5:ab:7b:41:37:be:
1f:1f:22:fb:0e:36:4a:ae:70:9e:77:94:88:48:90:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:87:94:6C:EC:12:F3:9D:D2:98:0A:71:96:19:44:61:3F:60:A8:95
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/8IeUbOwS853SmApxlhlEYT9gqJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.156.0/22
Signature Algorithm: sha256WithRSAEncryption
67:17:00:a7:ef:4b:50:af:91:ce:7b:cc:91:a3:4d:55:7a:7f:
c7:5a:da:18:39:8e:ec:1d:26:e2:9c:d0:06:9e:eb:c7:24:9f:
d2:98:dd:e1:27:05:41:e8:b3:4f:4f:a8:97:1c:83:b2:56:0f:
24:a3:d8:17:de:03:54:90:04:d9:52:17:85:85:c4:6d:ec:dc:
07:42:07:a8:86:6c:e4:0f:b1:f4:9a:3e:99:cf:d5:63:18:7c:
c2:57:bc:d9:5a:22:dc:37:c5:f4:d6:7b:78:75:3d:8f:8a:de:
29:56:ef:26:cc:36:fd:69:59:eb:ba:bd:48:60:c5:5d:28:1b:
9f:ae:da:84:2d:c2:45:18:00:6e:1d:4d:e3:1e:96:d2:de:7b:
35:a0:29:49:07:13:04:76:1b:49:49:78:86:42:1e:b9:91:19:
2a:19:6e:6b:14:c2:c8:b3:37:1e:db:81:92:6e:f3:b9:7d:45:
d2:99:c7:a5:38:2c:4c:c2:dc:34:d0:ed:c4:63:2f:f0:3c:f4:
c2:5b:c0:15:fe:0b:d6:d8:6b:3d:60:d7:f0:c2:7b:6d:1b:d6:
07:7b:50:89:eb:2b:de:90:55:3d:25:d1:cf:7d:ea:eb:8a:5b:
1c:34:7c:32:3d:79:c2:ac:cc:67:6d:c1:b7:b6:30:ef:ee:0f:
a8:e7:45:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:15:09 2025 by rpki-client