Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/8sf3AriWeoOoKb2ZrL9ruFI5-yU.roa
File: 8sf3AriWeoOoKb2ZrL9ruFI5-yU.roa (raw, json)
Hash identifier: akXe86mXNL4F4xYmekk3EuMAOLAD/RcPwHK74zX/QY0=
Subject key identifier: F2:C7:F7:02:B8:96:7A:83:A8:29:BD:99:AC:BF:6B:B8:52:39:FB:25
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019420D638CC97F58825A0C15DDD5AF3AEA1
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/8sf3AriWeoOoKb2ZrL9ruFI5-yU.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197759
IP address blocks: 45.131.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:38:cc:97:f5:88:25:a0:c1:5d:dd:5a:f3:ae:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2c7f702b8967a83a829bd99acbf6bb85239fb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:1e:e1:ae:f1:8f:1e:c6:ac:e2:6a:2c:6c:
48:1c:4d:e2:fd:c2:e6:1b:f1:0b:77:45:64:4b:fd:
6a:40:5b:96:ba:41:8e:88:50:b7:9a:a6:ae:27:41:
ef:ed:83:9a:aa:ce:0a:77:b9:5a:23:ae:10:ee:23:
c6:41:70:93:4a:66:ec:b8:3d:a8:d1:04:c8:32:29:
dd:e5:f9:1a:b3:1c:8a:b1:de:b7:61:f9:29:c4:5a:
b1:73:db:6f:dc:05:bd:8e:d5:27:d3:03:f4:7f:08:
0e:a6:f7:9b:d0:d7:e1:07:d6:35:47:8a:e0:12:1e:
28:50:3e:5a:63:b6:3d:0a:99:46:13:47:f4:f0:c9:
6b:ea:bb:c0:10:ba:34:91:d1:64:c9:de:84:1a:11:
51:c1:27:11:c4:ca:4b:05:90:70:5a:99:51:9c:ae:
f7:8f:a6:ba:1c:7c:76:b7:7c:f7:e1:9d:48:5f:78:
f4:db:60:3a:26:7f:b4:43:74:36:21:13:f1:62:5a:
c4:70:2e:73:70:29:d5:4f:7b:40:61:70:ad:4b:01:
be:f4:ea:db:61:de:dc:14:89:b8:4d:82:13:7d:a9:
39:73:52:45:85:03:c7:9d:d0:dc:34:a2:cc:ee:85:
4b:c5:75:c6:06:d9:90:37:da:62:4a:fd:f9:fe:d2:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C7:F7:02:B8:96:7A:83:A8:29:BD:99:AC:BF:6B:B8:52:39:FB:25
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/8sf3AriWeoOoKb2ZrL9ruFI5-yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.78.0/24
Signature Algorithm: sha256WithRSAEncryption
49:27:c8:6c:48:86:10:56:a0:39:06:94:6a:4c:8d:3b:54:45:
e9:98:5a:42:e4:13:cd:ee:a8:25:5e:5c:3d:92:55:3f:68:e1:
50:2a:1c:3e:61:39:80:03:8c:34:74:08:77:b0:e3:fb:85:4d:
fd:5e:51:09:98:21:a4:4b:73:20:18:80:27:3e:ab:54:d9:36:
16:49:06:b0:56:9d:03:5c:a5:25:80:aa:16:96:77:5e:ef:89:
8e:6a:6f:f2:78:c7:9f:52:a1:22:b4:8c:de:b7:12:1f:a3:67:
49:b1:59:9a:d2:91:6b:d3:9f:0b:c4:62:dc:91:34:10:a6:3f:
ce:99:0a:24:ec:55:4d:30:76:2a:a4:f1:2f:db:49:ec:1f:80:
f9:37:31:4d:26:14:22:8d:08:75:37:77:e8:c7:6b:99:2a:71:
82:83:97:94:db:bb:c5:24:3d:2d:d2:05:b6:d6:73:9e:91:92:
f1:cf:ba:e7:fd:99:cd:27:19:39:06:87:bd:41:ef:6c:f2:a9:
91:40:f7:14:ad:6f:39:60:27:6e:2a:4c:8d:de:53:a2:2b:e0:
a1:57:4d:78:ad:53:d7:5b:1c:12:30:ce:ff:8e:39:5b:4d:81:
66:16:39:bd:81:ff:c1:62:76:3d:63:d1:88:d4:86:84:9e:aa:
78:4e:ee:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:50 2025 by rpki-client