Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/8MW4MyTiujw5C46WdyXXcfKkzKc.roa
File: 8MW4MyTiujw5C46WdyXXcfKkzKc.roa (raw, json)
Hash identifier: 6C2YH45T8hOiaLnYU22ZZIjD/KL3ckhUBH3dXDaStFs=
Subject key identifier: F0:C5:B8:33:24:E2:BA:3C:39:0B:8E:96:77:25:D7:71:F2:A4:CC:A7
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019426D9D692957160B5D9C5BAA009497F0F
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/8MW4MyTiujw5C46WdyXXcfKkzKc.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201167
IP address blocks: 94.20.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d6:92:95:71:60:b5:d9:c5:ba:a0:09:49:7f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0c5b83324e2ba3c390b8e967725d771f2a4cca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:19:97:5f:da:ae:70:22:32:a8:b9:b9:22:
bb:00:d7:62:88:d9:6f:27:b8:48:d7:dc:21:a4:4a:
6e:9b:b7:05:45:6e:db:44:9d:1f:8e:96:ca:6e:43:
ea:4b:4d:1e:ba:04:5d:1c:7d:e6:c0:20:87:3c:3f:
9b:c0:55:8c:b9:b7:ab:2b:46:76:dc:e0:b9:db:5b:
ca:1b:e8:30:6d:45:ec:3f:4f:50:a8:b3:9e:a9:10:
f3:77:2a:13:34:1e:1d:eb:8d:72:d9:50:ae:5a:ba:
44:bf:fa:10:1e:52:c5:a6:ab:ad:66:49:df:6a:c9:
e2:a7:ef:00:c2:54:c0:3a:57:61:37:00:fc:95:7e:
a9:65:e3:88:75:bf:1d:ed:2b:7d:f2:1c:4f:bf:c2:
c8:55:70:3f:50:bf:25:de:fa:6e:a2:ce:85:73:c7:
db:1a:49:73:61:e0:1a:1c:42:aa:0d:1d:d9:4c:3b:
2d:3f:85:0d:4d:9d:1f:69:73:d8:36:ea:b6:e9:ee:
2a:41:35:ae:26:35:98:d4:a6:c9:0b:a7:fa:e7:c7:
22:0e:e7:df:0a:00:55:74:ed:94:b2:19:5b:c8:64:
6e:d2:db:d3:be:2d:79:27:d4:52:d9:4a:ba:79:26:
44:d2:b2:96:35:64:ed:be:1e:68:b7:0e:63:04:1a:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C5:B8:33:24:E2:BA:3C:39:0B:8E:96:77:25:D7:71:F2:A4:CC:A7
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/8MW4MyTiujw5C46WdyXXcfKkzKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.20.239.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:97:d5:cb:69:d3:89:27:41:e5:84:2b:8a:99:b9:f3:c4:27:
5b:f8:02:55:a9:ee:af:3d:3e:f5:29:82:7e:9f:7f:31:95:26:
34:55:b8:c1:ee:78:02:85:b7:64:e2:96:87:a3:ac:d5:45:0f:
fe:8d:d8:6d:40:bc:4a:b1:37:01:26:f5:49:c4:b4:d5:e4:27:
48:31:dc:e8:c5:e8:0b:57:6b:f8:96:c6:7e:75:48:c9:6e:d8:
dc:fc:60:e0:0e:55:1f:14:ad:4d:a0:e0:21:ee:ab:22:e9:45:
bc:27:91:a4:10:4c:c3:19:b7:5e:b1:86:be:0b:60:15:3e:32:
58:bc:21:80:e7:b3:37:2e:26:31:a1:d3:8b:63:8b:a2:d8:2b:
3f:2d:d6:66:76:ae:34:6f:6c:77:3d:9e:c5:9f:5d:bb:34:7f:
93:e6:bb:94:c8:ec:2c:15:be:0f:51:b3:2a:f5:cb:c5:12:0a:
ec:59:bf:1f:05:a0:bc:cc:bc:ed:62:8f:91:c0:5a:42:ce:6d:
14:4e:e7:95:74:2a:05:49:04:36:fe:fc:f2:e5:14:9c:19:54:
9a:a6:2a:0a:8c:35:ba:bc:b6:6d:f4:73:5b:50:5e:e6:be:44:
d5:dc:80:91:53:6c:e3:00:1a:5d:4d:d2:e1:c6:32:91:ce:80:
25:14:e7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:29:46 2025 by rpki-client