Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/8seasK16GsaOFWr-SwwyW57ek-Q.roa
File: 8seasK16GsaOFWr-SwwyW57ek-Q.roa (raw, json)
Hash identifier: qX7qnakcmcX1EuhGkXbf2jHBxhoO6I07uSRi1nBbABs=
Subject key identifier: F2:C7:9A:B0:AD:7A:1A:C6:8E:15:6A:FE:4B:0C:32:5B:9E:DE:93:E4
Certificate issuer: /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Certificate serial: 0194228D73B9D32B0992BFFAA755A2F01542
Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/8seasK16GsaOFWr-SwwyW57ek-Q.roa
Signing time: Wed 01 Jan 2025 15:48:03 +0000
ROA not before: Wed 01 Jan 2025 15:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31454
IP address blocks: 194.102.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:73:b9:d3:2b:09:92:bf:fa:a7:55:a2:f0:15:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Validity
Not Before: Jan 1 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2c79ab0ad7a1ac68e156afe4b0c325b9ede93e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:ce:92:99:7d:54:77:be:3b:27:72:fd:a9:
05:01:01:be:4b:a6:3a:ed:65:17:73:78:42:60:9e:
cc:45:14:78:83:92:09:d4:b9:b9:34:e9:2c:73:74:
95:29:60:90:e5:a4:be:d5:53:89:ca:14:6f:5c:06:
59:37:8c:2d:d6:dc:db:52:05:87:4f:1e:ef:51:0d:
79:c6:27:74:41:98:c9:21:90:a5:11:27:2d:8b:b2:
20:6a:db:a8:dc:bd:e8:e9:79:59:5c:af:74:80:1c:
2b:ca:9b:dc:ba:3c:d3:be:79:58:ba:ad:a7:0d:8b:
78:59:b8:5d:1b:c0:c5:c9:b2:82:39:c5:05:d6:2d:
52:a9:b5:e2:ed:55:19:ee:c5:c9:7c:66:d9:e3:08:
4c:cb:4a:62:d1:af:85:6a:e0:27:b6:ce:2d:16:c4:
a2:1b:9a:64:40:e0:7a:29:2b:69:44:49:b4:19:46:
31:1f:e0:eb:7d:d5:4c:dd:09:eb:31:59:40:7e:e7:
c2:c1:4f:c6:89:94:c8:2c:c3:a8:76:2d:4f:c5:74:
92:65:45:46:99:ca:bf:46:40:1c:c8:f3:81:97:d8:
d2:f9:9b:d1:bf:b6:d9:8f:97:de:e4:4f:86:e2:20:
82:7f:cb:95:37:4c:81:8f:e0:01:92:9b:5f:6b:29:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C7:9A:B0:AD:7A:1A:C6:8E:15:6A:FE:4B:0C:32:5B:9E:DE:93:E4
X509v3 Authority Key Identifier:
keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/8seasK16GsaOFWr-SwwyW57ek-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.86.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:84:c5:2c:38:90:3e:a9:b4:63:5f:a5:7c:63:cd:8d:bf:28:
2a:18:05:2d:4c:ab:fb:29:a4:69:58:02:08:e5:16:54:b5:f5:
2c:4c:17:70:c7:2e:b5:c6:ae:4c:a4:87:05:49:92:23:18:17:
d4:2b:4c:5f:af:16:00:7f:75:b3:5c:d5:58:7d:86:74:cb:ad:
f3:03:bb:a1:86:b3:e2:f9:ae:d9:c4:21:fc:63:e8:ff:0b:49:
cc:f9:f1:dc:4b:15:ed:a0:07:1a:41:e0:ab:b1:53:28:97:12:
cb:6e:c9:5b:d4:87:cb:d5:43:83:00:7e:19:b0:d8:ec:df:0f:
6b:c8:b1:8e:95:b9:db:e5:cd:08:e4:40:5a:e2:87:ae:ef:ae:
a7:3f:e5:c3:9d:8d:c6:16:47:b7:30:80:42:a9:f9:18:53:54:
24:70:47:52:91:71:fa:a3:fa:14:a2:c2:f5:11:72:fc:4d:5d:
b4:05:20:e3:5b:9e:4e:2d:ce:fa:49:05:62:85:b4:67:c0:84:
21:8d:90:75:54:0f:f4:3e:9c:96:f0:0b:3b:6b:99:16:bf:22:
49:26:0b:28:03:25:a9:c8:b7:c4:44:68:f8:84:ac:40:d0:28:
b0:86:31:02:f2:58:d0:cb:04:e7:0d:de:b2:73:69:5a:a7:4a:
d1:5e:c2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:14:00 2025 by rpki-client