Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/8zI-HN-JYFyfgILvr9zfTCbs0ds.roa
File: 8zI-HN-JYFyfgILvr9zfTCbs0ds.roa (raw, json)
Hash identifier: 1sTx3tescRJTi+8dNgjbNQgEYulQVlIWJfqn2hjKmvE=
Subject key identifier: F3:32:3E:1C:DF:89:60:5C:9F:80:82:EF:AF:DC:DF:4C:26:EC:D1:DB
Certificate issuer: /CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Certificate serial: 0194276E792719DFC93DAD70D97B899E837A
Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/8zI-HN-JYFyfgILvr9zfTCbs0ds.roa
Signing time: Thu 02 Jan 2025 14:32:18 +0000
ROA not before: Thu 02 Jan 2025 14:32:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34362
IP address blocks: 85.94.64.0/22 maxlen: 22
85.94.68.0/22 maxlen: 22
85.94.72.0/22 maxlen: 22
85.94.76.0/22 maxlen: 22
85.94.80.0/22 maxlen: 22
85.94.84.0/22 maxlen: 22
85.94.88.0/22 maxlen: 22
85.94.92.0/22 maxlen: 22
176.62.0.0/22 maxlen: 22
176.62.4.0/22 maxlen: 22
176.62.8.0/22 maxlen: 22
176.62.12.0/22 maxlen: 22
176.62.16.0/22 maxlen: 22
176.62.20.0/22 maxlen: 22
176.62.24.0/22 maxlen: 22
176.62.28.0/24 maxlen: 24
176.62.29.0/24 maxlen: 24
176.62.30.0/24 maxlen: 24
176.62.32.0/22 maxlen: 22
176.62.36.0/22 maxlen: 22
176.62.40.0/22 maxlen: 22
176.62.44.0/22 maxlen: 22
185.80.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:6e:79:27:19:df:c9:3d:ad:70:d9:7b:89:9e:83:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Validity
Not Before: Jan 2 14:32:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3323e1cdf89605c9f8082efafdcdf4c26ecd1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:6b:7f:c6:b6:a8:4c:8a:df:83:4e:40:bc:
de:84:8f:b2:8d:77:c0:6b:82:74:9f:7a:98:dd:92:
c0:fa:bd:a0:21:ca:93:dc:05:0a:15:c4:32:63:0b:
46:c2:6a:00:c5:c2:3f:1b:32:44:0c:c3:dd:05:8c:
03:69:1e:02:89:4e:c7:08:01:f9:de:a8:26:28:ae:
46:06:6b:d1:03:99:1d:3d:b3:65:7e:3b:db:be:ce:
82:87:2e:c6:d3:4b:8c:79:09:0f:33:27:65:f0:49:
b0:b9:68:cd:8d:64:a9:15:c8:1c:89:ad:02:b8:50:
fe:c3:61:09:10:67:dc:31:1a:b5:3f:21:0d:0d:8f:
a7:1c:bd:35:5e:38:78:b9:1e:35:18:78:06:62:4c:
0a:b1:7f:28:2a:e2:77:42:68:24:a4:a7:af:f4:3e:
0e:56:8b:fa:15:d2:1f:2b:23:34:7d:ac:26:eb:72:
aa:0b:9a:ea:7e:5a:70:fc:aa:e1:3d:ec:72:44:1e:
53:72:83:19:05:ac:64:36:40:b3:9d:c9:4c:34:a1:
3b:8d:89:03:d6:36:8f:68:1a:b6:23:68:3e:43:1d:
03:70:77:33:19:00:e3:83:e3:e6:c9:0c:48:3d:17:
af:2f:ea:07:12:fa:56:0f:ec:63:04:0a:d2:f8:f1:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:32:3E:1C:DF:89:60:5C:9F:80:82:EF:AF:DC:DF:4C:26:EC:D1:DB
X509v3 Authority Key Identifier:
keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/8zI-HN-JYFyfgILvr9zfTCbs0ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.94.64.0/19
176.62.0.0-176.62.30.255
176.62.32.0/20
185.80.192.0/22
Signature Algorithm: sha256WithRSAEncryption
08:79:3a:d7:d1:55:79:93:31:e1:71:9e:4b:94:65:3a:c7:12:
8a:9b:7b:7c:f6:62:bf:71:fc:1f:98:89:4b:8b:d2:63:92:72:
3a:4b:46:c5:82:22:11:68:a3:ec:2a:99:07:a9:4c:0c:d7:ea:
e3:67:ff:41:1c:74:8c:22:9b:ff:32:7b:05:25:43:92:be:a5:
17:d4:c0:5e:9b:9c:d5:4e:1c:b6:8b:f9:d5:07:22:89:34:19:
f8:b9:64:4a:fe:44:ab:9f:ad:4e:60:61:20:39:ec:fc:86:a4:
38:fc:76:45:d7:ff:79:1a:ab:27:70:9e:d3:0d:3d:01:5e:87:
ab:8f:35:7a:7e:ef:c3:df:f6:d4:46:92:2e:85:d9:e3:75:c4:
4f:56:dd:3d:15:21:04:2f:19:04:d1:5c:7a:42:37:36:71:c8:
81:48:7e:19:62:d5:92:3d:80:18:45:ba:86:d4:73:bc:e8:65:
25:f6:aa:47:9c:67:de:38:a2:c0:1d:76:5f:67:34:57:d0:15:
d7:ab:ac:24:4e:a0:da:4d:69:0f:34:28:b3:cd:55:db:1f:28:
a5:09:37:c7:3e:db:54:d3:02:5e:68:02:de:5b:b3:25:07:74:
8d:cb:18:df:70:16:8f:5d:15:93:88:bf:04:1f:2a:af:c6:6a:
83:3f:95:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:38:57 2025 by rpki-client