Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/1F8onmseCNCuGUO4DR0wCF969LM.roa
File: 1F8onmseCNCuGUO4DR0wCF969LM.roa (raw, json)
Hash identifier: 5Q04Z/04ubuR0XnIvzjk6WhZzGAxE4KZkR5m6+NYcEk=
Subject key identifier: D4:5F:28:9E:6B:1E:08:D0:AE:19:43:B8:0D:1D:30:08:5F:7A:F4:B3
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 019428272900408DE64E89049034997B5761
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/1F8onmseCNCuGUO4DR0wCF969LM.roa
Signing time: Thu 02 Jan 2025 17:54:02 +0000
ROA not before: Thu 02 Jan 2025 17:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203221
IP address blocks: 185.141.248.0/24 maxlen: 24
185.141.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:29:00:40:8d:e6:4e:89:04:90:34:99:7b:57:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Jan 2 17:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d45f289e6b1e08d0ae1943b80d1d30085f7af4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:1d:b6:73:c0:a9:68:04:c9:a1:9e:a3:2a:
6b:70:a2:1b:1e:8f:44:1b:cc:ba:4e:65:f7:a0:0b:
5a:e5:98:e7:f9:95:3a:44:79:73:6e:a0:7f:a0:87:
0a:73:34:50:8d:50:6c:f0:f2:08:7e:24:f2:3c:12:
07:0b:88:2c:91:5d:d4:6c:0c:1a:24:c0:3f:a8:1b:
b4:0b:a9:f4:aa:cd:65:07:85:e1:3a:2b:90:97:13:
c2:71:1a:3b:54:f3:05:0e:24:37:d4:83:17:c2:8a:
be:9a:2d:a8:f1:b6:7b:d7:14:ff:6c:45:bf:f3:d5:
48:b5:eb:d8:b4:69:c9:ce:52:97:ec:e2:2a:70:5d:
30:9f:07:50:c2:d6:26:89:10:1e:1e:5c:75:0a:a4:
5b:29:8a:eb:b7:92:80:ca:ca:cd:96:7f:ec:ea:97:
e5:ab:94:0e:f9:dc:25:38:18:3d:dc:d1:f7:e4:84:
36:5e:20:fa:92:9f:f7:6e:d4:3e:1d:27:1a:c9:e5:
1c:2b:22:6f:12:c2:92:1a:7a:03:05:b3:99:52:c1:
4f:69:9a:dc:ed:5d:01:0d:45:4f:fe:dc:52:95:39:
41:c7:f2:4c:c6:23:72:f9:09:d0:12:be:cc:8d:ba:
db:81:61:6a:47:16:03:19:53:e2:c9:e0:0d:4b:1d:
8b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5F:28:9E:6B:1E:08:D0:AE:19:43:B8:0D:1D:30:08:5F:7A:F4:B3
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/1F8onmseCNCuGUO4DR0wCF969LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.248.0/23
Signature Algorithm: sha256WithRSAEncryption
45:15:7f:4c:68:67:f9:12:01:3b:3b:2a:22:e9:35:fe:57:94:
65:dc:73:3a:6a:03:f8:ba:52:db:d9:e8:f9:b7:f6:11:de:30:
cb:9d:c7:60:22:91:79:21:99:be:d7:a9:75:bc:1f:ca:4a:5e:
13:3c:4e:31:7d:e5:10:49:05:71:87:90:61:ae:64:2a:bf:73:
92:ca:8e:e2:ef:05:c2:db:12:35:88:e3:6d:83:c0:3d:9f:ff:
47:3a:e5:17:fa:63:3a:61:86:f5:f1:f7:5a:b5:fc:0c:00:dd:
ee:d4:cf:26:a9:d8:e5:33:6e:65:9e:1b:a9:62:47:8f:63:3d:
9a:f2:e8:0d:7f:09:36:8c:4b:f5:da:c6:e4:5a:76:ee:c8:09:
60:e4:39:3f:bc:d0:ac:f5:15:d8:69:6e:4d:6d:60:84:ce:e7:
cb:4d:70:fe:c1:21:3d:b3:0d:7d:d2:8a:06:ff:a8:ff:be:ce:
93:df:9f:3b:a2:06:a6:48:96:a7:bf:9a:03:32:03:2e:cd:f2:
e2:db:5c:36:66:3f:74:2b:60:70:03:c2:86:54:1b:56:63:6a:
24:47:ac:8f:74:36:be:7e:ec:ad:1b:ab:ec:c3:32:4c:d2:69:
ff:d0:cf:9c:36:b4:89:aa:56:ed:b9:69:60:0b:01:27:71:63:
31:50:dc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:40:47 2025 by rpki-client