Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/8CD_BDNohDu7BFPue0FAVtqeSKE.roa
File: 8CD_BDNohDu7BFPue0FAVtqeSKE.roa (raw, json)
Hash identifier: MBbBcYx0OZxz+xXv93fCUqPEHeogAGDOWRTI0SELjnU=
Subject key identifier: F0:20:FF:04:33:68:84:3B:BB:04:53:EE:7B:41:40:56:DA:9E:48:A1
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0194228D3BDFB92A9582A924ADAFC8CB7E1D
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/8CD_BDNohDu7BFPue0FAVtqeSKE.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205097
IP address blocks: 195.114.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3b:df:b9:2a:95:82:a9:24:ad:af:c8:cb:7e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f020ff043368843bbb0453ee7b414056da9e48a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cf:9e:ef:13:de:8f:ff:0d:bb:36:5b:ce:61:
d8:fc:4b:6d:02:c2:a6:5b:f7:23:5d:b7:27:3b:7b:
75:60:d8:db:3a:6a:fc:70:e1:72:f4:c8:47:71:df:
a2:63:96:0c:56:15:2c:b1:cf:d3:48:8a:64:e1:ce:
bd:6a:e5:f2:b9:67:fc:29:a2:e4:37:8d:c7:aa:40:
99:b1:a2:00:fd:91:ff:0f:aa:bf:1b:ed:68:31:68:
cf:4e:d9:b0:01:d3:bb:96:9e:54:de:1f:44:59:ea:
e1:74:01:17:7e:b6:28:74:ed:36:7c:cc:ab:09:fa:
75:74:3b:ce:72:4b:f4:04:b5:2d:a6:23:97:0a:52:
e2:a0:9f:d2:d4:e5:64:51:9f:2c:eb:cf:2b:98:f6:
a4:4c:1b:ff:0b:de:95:a1:d8:67:6e:0e:28:f6:ab:
a7:6e:af:77:b6:95:01:cd:63:14:bb:df:0d:45:9f:
91:db:c0:fb:44:8e:3d:ef:8b:8f:bf:9e:30:48:6a:
aa:b6:54:1f:65:7e:4e:0f:0a:58:45:75:82:cb:3a:
76:53:c9:1c:03:8f:cf:11:20:93:37:d6:fd:6d:7d:
00:8b:9c:fe:59:31:03:c4:f2:d1:85:b0:34:22:ca:
2a:0b:77:f4:cb:ce:25:6e:ca:c1:4b:04:ec:f1:c1:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:20:FF:04:33:68:84:3B:BB:04:53:EE:7B:41:40:56:DA:9E:48:A1
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/8CD_BDNohDu7BFPue0FAVtqeSKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.130.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fa:cf:83:a8:0c:84:78:7f:a0:e8:7c:9c:22:70:8c:7c:62:
38:ef:35:7a:a9:14:18:1f:16:da:f2:6f:06:e5:73:46:d9:f7:
e8:e1:8c:9e:1c:53:f1:3b:a3:a9:1a:6d:fe:d8:0d:1f:c7:51:
da:06:13:b6:76:3b:94:5e:09:30:ab:45:a4:d2:2a:6e:55:7e:
b2:c9:c0:d8:7a:91:02:5d:bf:67:2a:7d:57:9e:56:20:00:1e:
e2:75:dd:cd:cd:8d:5f:a0:cd:d0:a4:a5:32:a3:ce:fe:6d:2a:
37:8d:28:c5:c1:e3:70:87:56:6c:8d:97:d5:4e:7d:6b:44:d0:
75:98:bc:67:f5:93:80:94:53:42:1c:72:48:8f:6d:34:a6:75:
26:8f:16:e0:e6:01:ec:fe:05:98:ca:48:aa:c7:31:4c:69:1f:
7c:f0:86:1f:23:44:b3:22:66:59:8e:77:cb:f6:e3:ff:a5:1e:
4f:35:9c:c7:3e:e8:7a:df:f9:7c:71:9e:29:26:9d:e7:fb:4f:
09:cc:eb:14:ff:69:03:aa:2d:79:b9:14:5c:c4:14:6c:5c:50:
51:47:fd:57:cb:97:70:fd:59:43:57:ec:58:e1:a6:82:81:c4:
75:aa:38:78:12:76:a2:b8:bd:11:42:f9:65:9c:44:65:b3:1d:
d8:2f:a3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:22:08 2025 by rpki-client