Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/8rSm2TYmCggVgedhJYf2d5mO9bY.roa
File: 8rSm2TYmCggVgedhJYf2d5mO9bY.roa (raw, json)
Hash identifier: u5F6NWnwd9MOKoxteUtWCw1+tPwzMsMfG5qFtnCO6pk=
Subject key identifier: F2:B4:A6:D9:36:26:0A:08:15:81:E7:61:25:87:F6:77:99:8E:F5:B6
Certificate issuer: /CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Certificate serial: 0194221FAB98E8F7B4D043D0F8E345414340
Authority key identifier: 5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/8rSm2TYmCggVgedhJYf2d5mO9bY.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 194.127.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ab:98:e8:f7:b4:d0:43:d0:f8:e3:45:41:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2b4a6d936260a081581e7612587f677998ef5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:a9:11:63:be:f7:16:cb:9c:c1:9e:23:d7:
98:b8:d0:d4:2f:56:b9:7d:74:e8:8c:36:4f:13:7c:
bf:0f:b1:84:f7:99:42:11:1d:62:ef:be:95:d7:aa:
14:9a:cd:87:d9:b2:9f:ea:9d:1d:91:c3:fd:34:1a:
62:a9:0b:ff:e9:2d:30:2f:a4:cc:ac:0a:f9:31:39:
3b:17:e2:ea:0f:30:4a:08:35:cc:50:ad:66:f9:19:
41:ed:31:71:ed:73:00:93:32:70:8f:4f:d3:5e:5b:
cd:50:12:8a:1e:d7:46:42:d7:cb:86:a4:f2:ea:74:
2c:53:bb:f0:11:f4:97:54:a1:95:1f:43:ca:3f:da:
50:b1:b2:2f:e4:2e:5a:cb:9a:30:4f:bb:a9:ae:90:
a7:fa:62:b9:65:ba:cf:df:49:16:7f:b3:5c:8b:19:
6b:3f:c8:3a:40:28:a0:60:b1:e1:8c:5f:82:73:77:
b4:95:c7:02:40:3b:0f:95:3d:99:34:15:71:6e:6d:
62:fd:10:d2:80:65:de:86:58:f6:4f:6a:5f:f6:20:
63:12:b3:51:7f:ce:6b:32:03:44:6a:bb:c9:c2:c8:
59:bd:22:46:2f:bb:7e:da:cb:f3:11:4c:80:30:47:
e4:41:b0:56:3d:85:3e:96:2a:41:a4:fc:11:01:2d:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B4:A6:D9:36:26:0A:08:15:81:E7:61:25:87:F6:77:99:8E:F5:B6
X509v3 Authority Key Identifier:
keyid:5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/8rSm2TYmCggVgedhJYf2d5mO9bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.172.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:f9:3b:12:cb:cd:39:f9:80:a8:8d:3c:89:79:95:ea:29:e6:
20:a7:f7:cf:18:9d:64:99:87:b6:49:5e:3f:3d:0c:8e:a2:48:
d7:8b:70:50:1f:5e:df:34:a0:5e:2e:ef:a4:23:0b:a4:6f:77:
72:98:4a:61:82:ef:a4:3e:ba:5b:67:f4:42:e8:e3:90:4c:49:
8f:97:af:0d:c5:4f:44:d4:bc:df:70:2d:16:11:a1:a9:d3:f6:
ff:d3:4a:8f:f8:38:39:4f:98:2d:80:98:38:10:d5:74:e2:72:
f3:fb:84:97:40:89:5e:bc:d7:fb:e2:be:85:43:f6:22:0c:6c:
a9:b8:15:ac:9a:cb:4e:3b:76:cf:47:2a:93:81:61:cf:8c:1f:
3a:e1:d3:2f:f8:57:3e:53:1d:b5:e3:e8:00:1e:73:b6:54:cf:
4b:64:5b:86:98:2b:5b:a2:c6:b0:7a:aa:5a:d9:d2:87:78:47:
bf:06:34:42:67:9d:cf:d3:a8:05:61:f7:c8:79:46:ff:2b:aa:
a9:21:9e:d8:1c:4c:b7:09:58:6c:fc:09:0a:b5:3f:aa:ae:30:
92:f0:dc:29:02:ff:67:38:69:cf:68:2e:52:71:c3:78:eb:36:
66:94:07:76:62:8c:3b:ee:a4:0d:3b:36:5c:7b:7c:40:df:6f:
48:56:0c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:29 2025 by rpki-client