Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8tVXIPJb9kBd9MOWcr07r8UR6To.roa
File: 8tVXIPJb9kBd9MOWcr07r8UR6To.roa (raw, json)
Hash identifier: 5RN9dwEJ9UWlgv8aEcB2DfOkq/I3f6y7d4Z6ffoRAdU=
Subject key identifier: F2:D5:57:20:F2:5B:F6:40:5D:F4:C3:96:72:BD:3B:AF:C5:11:E9:3A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01943AEED9D89051C83B031B7CD696E6A658
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8tVXIPJb9kBd9MOWcr07r8UR6To.roa
Signing time: Mon 06 Jan 2025 09:25:19 +0000
ROA not before: Mon 06 Jan 2025 09:25:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 81.168.96.0/24 maxlen: 24
82.153.51.0/24 maxlen: 24
82.153.148.0/24 maxlen: 24
82.163.15.0/24 maxlen: 24
89.213.63.0/24 maxlen: 24
89.213.107.0/24 maxlen: 24
89.213.112.0/24 maxlen: 24
89.213.113.0/24 maxlen: 24
89.213.116.0/24 maxlen: 24
89.213.121.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
89.213.227.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
213.130.152.0/24 maxlen: 24
213.130.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3a:ee:d9:d8:90:51:c8:3b:03:1b:7c:d6:96:e6:a6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 6 09:25:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2d55720f25bf6405df4c39672bd3bafc511e93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:e0:67:24:cc:88:3a:32:d0:1e:61:d7:e9:
ed:c8:c7:41:d3:45:1a:07:49:03:1e:d5:4e:63:7d:
a0:5f:d6:90:1f:56:4c:5d:4b:c2:48:97:a0:32:09:
f5:52:a8:60:9c:7a:83:a0:d3:85:18:ab:d8:e8:07:
bc:95:dc:d0:b6:b0:c2:1f:08:fa:b7:5d:c4:bb:ad:
a0:a7:dc:5a:a5:dc:f8:9d:a3:d7:ff:78:7a:37:29:
c9:db:e6:a5:7a:ad:ab:5c:75:98:45:ea:91:8b:58:
4a:73:99:3d:73:cf:69:0f:eb:4c:bd:90:c6:63:3b:
0c:3b:30:6d:91:45:47:91:45:fd:69:0e:00:30:8e:
09:32:7a:bc:20:a0:8b:6c:be:e0:fd:2b:54:01:a8:
77:36:8a:e9:07:0d:d7:05:07:70:33:7c:4c:42:1f:
08:ea:ed:e4:33:ac:b5:3f:d6:72:64:48:d1:a1:03:
37:24:39:17:9b:43:56:8d:9f:c5:63:71:40:b7:28:
b7:28:3a:c4:ce:7a:a7:1d:15:ad:65:b6:b5:d3:c4:
aa:ff:76:97:dd:b9:c5:12:8e:25:1d:30:85:89:44:
10:02:20:69:71:87:e2:41:fc:fd:2a:fc:58:4a:58:
a5:89:b0:62:32:d7:81:13:9c:33:96:bc:82:09:4a:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D5:57:20:F2:5B:F6:40:5D:F4:C3:96:72:BD:3B:AF:C5:11:E9:3A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8tVXIPJb9kBd9MOWcr07r8UR6To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.96.0/24
82.153.51.0/24
82.153.148.0/24
82.163.15.0/24
89.213.63.0/24
89.213.107.0/24
89.213.112.0/23
89.213.116.0/24
89.213.121.0/24
89.213.157.0/24
89.213.227.0/24
109.176.242.0/24
213.130.137.0/24
213.130.152.0/24
213.130.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:17:ad:5f:4d:c7:11:ba:9b:01:ad:8e:0f:24:90:9b:9c:b0:
70:71:26:8e:a2:d3:d5:38:60:66:4c:fd:d4:31:a9:0e:30:4c:
1e:58:2c:28:f0:2e:ba:b0:6f:01:aa:20:95:2f:5a:09:11:d2:
80:eb:33:ab:3a:2e:ec:29:20:4f:4f:47:06:73:65:e4:01:1d:
30:b0:6b:61:a4:70:54:dd:04:a4:78:f2:24:b6:8d:e6:bc:43:
f8:d6:94:ce:ee:31:45:6c:d1:6d:8c:65:46:26:1c:19:a6:d7:
c1:17:0d:cc:df:ed:13:89:16:dc:13:19:ef:f4:6a:e5:b7:c3:
01:a8:37:d7:7e:bf:91:74:0c:46:c8:19:71:d1:cf:e7:aa:8c:
87:25:84:22:5e:5f:91:46:92:9f:06:31:09:c6:7c:10:b5:78:
ea:28:df:9b:a5:b0:1d:c6:83:57:70:c7:f9:07:f0:b4:8a:2c:
cd:b0:a5:96:fc:30:f3:01:e9:97:44:85:f8:79:5e:24:aa:c3:
82:1a:61:47:25:98:f4:6a:ed:c3:25:6d:da:96:3c:78:39:b5:
b8:31:88:2c:9c:5a:24:cd:78:b4:6b:20:d0:da:94:48:b8:5f:
1d:6b:3f:0c:cc:9f:59:ff:f9:11:c8:68:76:9c:d4:93:82:4b:
4f:c1:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:42:00 2025 by rpki-client