Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/8eT8mItdm-eFNRvcC95AKoGdkEY.roa
File: 8eT8mItdm-eFNRvcC95AKoGdkEY.roa (raw, json)
Hash identifier: V3x7HEHI2C6TpwyRaJQsDy3CR99xipPFrG4gu0IK5ZM=
Subject key identifier: F1:E4:FC:98:8B:5D:9B:E7:85:35:1B:DC:0B:DE:40:2A:81:9D:90:46
Certificate issuer: /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Certificate serial: 019423D72D52FBD71360ECE15B2679B1B709
Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/8eT8mItdm-eFNRvcC95AKoGdkEY.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 141.46.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2d:52:fb:d7:13:60:ec:e1:5b:26:79:b1:b7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1e4fc988b5d9be785351bdc0bde402a819d9046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:ff:7d:f4:49:eb:1c:b9:8b:45:88:e1:62:
aa:21:f2:cf:53:7e:91:45:b5:c2:79:33:11:84:fd:
3e:39:60:65:65:d7:12:59:e8:37:e3:82:38:2b:af:
cd:e2:74:c9:3e:51:17:d4:01:b3:35:e4:32:06:d0:
cb:4e:93:36:25:29:d3:47:79:42:cb:f6:3a:3b:67:
09:ce:7e:72:6d:bc:7b:22:08:b8:a2:c7:59:e9:09:
37:35:89:45:25:85:e3:e8:9a:23:10:3f:d2:7a:cc:
33:c0:b1:9a:aa:fe:b7:a7:db:47:e1:86:dd:2e:16:
e0:14:0c:ba:30:ed:30:d8:eb:21:38:3a:7d:06:53:
30:14:37:98:d4:e2:31:85:59:c8:d5:8f:c3:b4:12:
16:e1:f3:81:6e:1d:d4:fa:80:b6:2c:31:cb:85:93:
6d:26:3d:c0:98:82:cf:c3:e9:3f:04:62:1d:cd:5c:
24:67:32:7b:71:d0:e6:d6:87:4f:71:ca:aa:92:3f:
b1:1f:65:07:8d:fc:92:46:e7:95:ad:90:55:a6:9a:
00:5d:88:55:23:03:cd:9c:db:d8:5b:53:85:1a:03:
bf:0a:42:ab:92:24:1a:c8:ec:17:a0:74:7e:b9:b9:
e2:34:66:92:99:bb:f0:2a:20:41:aa:20:29:99:91:
9d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:FC:98:8B:5D:9B:E7:85:35:1B:DC:0B:DE:40:2A:81:9D:90:46
X509v3 Authority Key Identifier:
keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/8eT8mItdm-eFNRvcC95AKoGdkEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.46.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:3c:49:c4:6c:23:6d:79:9e:94:06:db:cb:57:83:30:a7:20:
14:01:90:37:51:22:cf:71:61:44:98:8c:bd:b4:04:64:7f:59:
bb:00:12:3c:f0:13:34:5f:08:15:5f:9c:3e:a0:95:94:bd:bc:
37:f8:f4:9c:1a:15:ad:af:bf:46:52:18:5a:df:8c:2d:ec:f1:
6d:49:55:1b:df:ce:d0:e0:04:6e:c5:a2:f4:a5:fe:ac:54:9f:
37:67:ba:a2:19:9c:be:3a:d0:2a:9f:b0:8c:54:cc:14:42:f3:
bf:5e:4f:ea:68:51:ff:2a:fc:18:0a:85:09:df:14:6e:50:5e:
51:03:4c:1c:6e:7f:6b:d9:30:67:6c:75:2a:e2:56:57:24:f4:
0e:5f:0d:0a:f0:c7:db:f6:70:ef:55:f2:a9:8e:1c:84:d8:58:
de:52:b6:f1:89:0e:d8:99:bc:c0:a2:1b:66:87:1b:83:63:8b:
9d:27:40:3c:14:6f:25:c0:9f:a8:6d:21:dd:80:fd:c4:52:52:
3f:2e:c9:47:7c:bd:c4:3c:9c:5b:24:10:bd:2a:27:88:57:89:
c5:27:11:7d:ab:da:f0:96:1e:2f:df:32:24:f0:ec:fb:4a:de:
b2:87:16:5a:bc:78:6c:c9:e1:64:9c:43:ef:e1:86:62:6a:00:
d4:81:de:85
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQj1y1S+9cTYOzhWyZ5sbcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOGFhZGMwNjk1NTVhMWFiZTAzMWZkMGEwMjgwNjljOGZi
ODliMmIwHhcNMjUwMTAxMjE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWU0ZmM5ODhiNWQ5YmU3ODUzNTFiZGMwYmRlNDAyYTgxOWQ5MDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXr/ffRJ6xy5i0WI4WKqIfLPU36R
RbXCeTMRhP0+OWBlZdcSWeg344I4K6/N4nTJPlEX1AGzNeQyBtDLTpM2JSnTR3lC
y/Y6O2cJzn5ybbx7Igi4osdZ6Qk3NYlFJYXj6JojED/SeswzwLGaqv63p9tH4Ybd
LhbgFAy6MO0w2OshODp9BlMwFDeY1OIxhVnI1Y/DtBIW4fOBbh3U+oC2LDHLhZNt
Jj3AmILPw+k/BGIdzVwkZzJ7cdDm1odPccqqkj+xH2UHjfySRueVrZBVppoAXYhV
IwPNnNvYW1OFGgO/CkKrkiQayOwXoHR+ubniNGaSmbvwKiBBqiApmZGd1QIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFPHk/JiLXZvnhTUb3AveQCqBnZBGMB8GA1UdIwQY
MBaAFOCKrcBpVVoavgMf0KAoBpyPuJsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84NTIyMjEtZDYxNi00ZTEyLThmYTQt
OWE3MmQ5OTAzZWI4LzEvOGVUOG1JdGRtLWVGTlJ2Y0M5NUFLb0dka0VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny84NTIyMjEtZDYxNi00ZTEyLThmYTQtOWE3MmQ5OTAzZWI4
LzEvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjS4wDQYJ
KoZIhvcNAQELBQADggEBABQ8ScRsI215npQG28tXgzCnIBQBkDdRIs9xYUSYjL20
BGR/WbsAEjzwEzRfCBVfnD6glZS9vDf49JwaFa2vv0ZSGFrfjC3s8W1JVRvfztDg
BG7FovSl/qxUnzdnuqIZnL460CqfsIxUzBRC879eT+poUf8q/BgKhQnfFG5QXlED
TBxuf2vZMGdsdSriVlck9A5fDQrwx9v2cO9V8qmOHITYWN5StvGJDtiZvMCiG2aH
G4Nji50nQDwUbyXAn6htId2A/cRSUj8uyUd8vcQ8nFskEL0qJ4hXicUnEX2r2vCW
Hi/fMiTw7PtK3rKHFlq8eGzJ4WScQ+/hhmJqANSB3oU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:24:57 2025 by rpki-client