Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8fZjBEylQQ7G4Nfq9kl8eMsKPWc.roa
File: 8fZjBEylQQ7G4Nfq9kl8eMsKPWc.roa (raw, json)
Hash identifier: ePHu4BkekyMRgboF78REdrHsv7fK/ffAGw8dzHK32Xs=
Subject key identifier: F1:F6:63:04:4C:A5:41:0E:C6:E0:D7:EA:F6:49:7C:78:CB:0A:3D:67
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01942369C35626CB23C0EA8D3C995728D048
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8fZjBEylQQ7G4Nfq9kl8eMsKPWc.roa
Signing time: Wed 01 Jan 2025 19:48:41 +0000
ROA not before: Wed 01 Jan 2025 19:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12552
IP address blocks: 170.62.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c3:56:26:cb:23:c0:ea:8d:3c:99:57:28:d0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 1 19:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1f663044ca5410ec6e0d7eaf6497c78cb0a3d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:1d:98:a7:f2:b0:ac:7f:26:21:73:a9:ff:
55:8d:a1:ba:3f:87:d8:60:16:c9:19:83:ce:9b:6a:
d2:60:3a:9f:78:d5:30:6a:71:c6:22:bf:03:bc:51:
8a:81:4d:5f:0c:3b:af:d3:a2:22:88:b4:b9:b9:da:
ff:98:95:dd:10:1a:cb:03:ee:db:ce:c6:c8:9e:69:
82:81:91:d8:1d:37:4b:04:ed:ff:81:f1:2f:cd:44:
e0:07:20:45:21:67:e1:6d:d9:22:fc:87:6c:90:38:
c1:f3:08:7a:37:c9:d5:d8:93:36:1c:d6:1c:9a:f9:
9a:40:1f:84:2a:84:3d:70:a9:1d:b5:25:ae:d9:9a:
03:3d:95:6b:f0:20:f1:86:78:c2:72:64:67:73:53:
88:39:10:bc:53:42:32:72:5a:fb:cb:81:cb:21:24:
d3:dd:69:5c:23:de:ef:7b:b0:a8:51:d3:f4:34:69:
93:41:7c:f6:af:45:b8:c8:69:df:1a:65:ea:4c:bb:
fb:6c:54:7f:80:05:43:fe:2a:31:64:de:fc:05:67:
aa:77:c8:9a:eb:84:00:2d:3a:74:99:90:5b:64:f6:
c5:81:0e:c1:ce:af:63:b3:98:bf:36:83:19:4c:07:
b4:2c:40:f7:34:25:e8:ae:86:dc:74:4a:2b:c8:93:
b9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:63:04:4C:A5:41:0E:C6:E0:D7:EA:F6:49:7C:78:CB:0A:3D:67
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8fZjBEylQQ7G4Nfq9kl8eMsKPWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.62.104.0/24
Signature Algorithm: sha256WithRSAEncryption
60:21:ee:75:1e:04:b7:dd:82:09:d1:97:d8:11:24:04:dc:9c:
99:bd:58:b0:d0:c4:30:c6:ba:e2:55:1f:6b:4e:f6:e6:14:3a:
82:78:ad:86:8a:2f:b9:fd:94:58:39:96:a8:f0:65:54:fc:09:
b6:ef:b1:0c:7d:10:f8:00:32:e9:2a:df:70:26:7a:d0:65:30:
59:c1:b3:0a:d5:df:eb:cd:7d:41:bf:b3:31:8b:d5:35:80:0b:
3b:12:5b:fd:54:46:a9:a1:a1:1c:0c:65:21:39:f3:9d:f8:64:
26:fe:ea:05:65:51:ec:71:3d:ae:3b:58:2d:ac:63:74:cb:11:
e7:97:99:f1:2d:a6:96:f9:c1:ce:1d:93:6b:f2:e8:ec:31:57:
bd:ad:ed:0c:2b:af:5e:b6:78:88:1b:35:e4:cb:ad:c4:6b:1e:
a6:90:d4:9d:84:71:12:3d:41:0a:2c:cb:70:ff:40:69:ee:5d:
89:24:c6:ea:81:ef:4e:12:a3:bf:7f:42:34:5b:62:bc:c9:78:
02:a7:6e:b1:8d:71:0d:32:d8:cf:e2:5c:a1:40:c0:6a:a5:34:
a5:83:ca:81:e0:cb:45:56:26:bb:e8:d1:32:d7:77:d4:35:e2:
c6:a6:47:bc:d8:1e:3e:3d:18:69:21:e0:ec:5e:c9:a7:c3:9b:
90:10:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:18:25 2025 by rpki-client