Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mD8jBPKeb8-J3-fY3Xc6YRGus4M.roa
File: mD8jBPKeb8-J3-fY3Xc6YRGus4M.roa (raw, json)
Hash identifier: DUaGCubyyhiHItEkL5fskq53ENJ34mp+muIBwsrRhmc=
Subject key identifier: 98:3F:23:04:F2:9E:6F:CF:89:DF:E7:D8:DD:77:3A:61:11:AE:B3:83
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195427A8F35371C635872329298A7B41BEC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mD8jBPKeb8-J3-fY3Xc6YRGus4M.roa
Signing time: Wed 26 Feb 2025 13:38:03 +0000
ROA not before: Wed 26 Feb 2025 13:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216022
IP address blocks: 82.152.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:7a:8f:35:37:1c:63:58:72:32:92:98:a7:b4:1b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 26 13:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=983f2304f29e6fcf89dfe7d8dd773a6111aeb383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6a:a9:be:c6:12:78:fd:bc:9c:b6:7e:10:b8:
56:20:90:59:1a:dc:86:80:bc:61:a9:8f:13:90:33:
83:1a:c7:3b:42:fd:08:65:65:f3:ce:5c:5c:a5:26:
18:56:48:09:ba:5d:cd:34:d5:8e:a6:8f:27:99:52:
0e:75:a2:99:25:71:2c:a1:27:27:8e:b4:dc:a7:25:
83:a5:bf:ca:d2:d9:2f:13:dd:7a:79:3f:ff:4f:29:
de:6b:db:17:c1:6d:7c:94:d6:f9:d3:d6:95:a9:e1:
17:e4:41:10:29:64:8d:f2:94:0e:7c:ea:7e:e6:2a:
ca:f4:91:94:a8:b3:c9:19:d4:32:e4:d3:10:37:0f:
57:ee:31:01:f7:ab:ae:98:18:91:78:5b:7d:ab:a3:
fb:85:69:f8:27:f0:2a:06:6f:8f:7e:6b:fd:2a:cd:
51:8e:fa:a4:04:3a:8f:a7:f2:9c:08:1e:02:81:7a:
74:47:00:d5:2f:44:2b:da:16:cf:8d:36:0c:bb:8e:
ab:22:e7:85:15:33:45:88:8e:be:35:f6:94:ad:e4:
3c:4f:c9:1c:2b:a1:de:31:62:a7:67:09:9f:3a:47:
9c:d8:fc:a5:87:e7:1f:95:8e:86:7c:41:6f:c3:89:
8e:b4:2f:0f:87:01:58:40:71:eb:f5:95:5d:30:00:
dc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3F:23:04:F2:9E:6F:CF:89:DF:E7:D8:DD:77:3A:61:11:AE:B3:83
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mD8jBPKeb8-J3-fY3Xc6YRGus4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.249.0/24
Signature Algorithm: sha256WithRSAEncryption
60:29:73:9b:23:49:bc:3e:99:cd:1f:39:84:91:1d:43:4a:95:
d8:8a:b4:36:01:64:e6:8b:c9:ac:a6:65:f3:ba:88:74:f8:c0:
22:18:1c:eb:c4:59:51:c3:33:33:92:b5:93:ac:28:98:f2:5d:
13:ef:c0:63:a1:c8:86:97:7b:74:c2:59:8e:81:b5:c3:6b:14:
a6:fe:ab:79:1c:0c:e9:79:93:85:a7:be:7b:d2:96:6e:5a:7d:
54:b6:77:27:b5:9a:db:e1:99:6e:00:f3:aa:cf:26:f7:f2:ee:
78:32:95:46:08:ac:a7:96:d7:c2:07:0c:a6:e6:66:ae:47:a0:
6d:a8:d9:f0:6f:a5:f6:66:aa:3b:f2:e5:81:9d:ee:61:f9:56:
89:67:f1:f6:47:d0:8e:f2:cb:6a:ec:a9:0a:af:ff:e7:99:26:
6d:f4:ba:cd:af:e4:be:bb:ac:10:cf:b6:74:d9:8e:ef:73:31:
7b:fc:c8:1e:3a:e3:30:16:39:51:43:4e:ce:71:96:dd:d7:d3:
15:f3:9e:7a:85:d5:4c:90:f4:68:39:cd:3f:a3:81:e9:35:25:
f0:e9:30:ec:27:05:af:fa:8b:4d:ec:0b:16:33:bb:8d:c4:cb:
24:cc:fa:35:cf:27:46:4f:77:67:bf:73:a7:77:95:08:62:f8:
54:ca:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:17:29 2025 by rpki-client