Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v8b9qy5kD1R1H0xf8fn5_kRtVz8.roa
File: v8b9qy5kD1R1H0xf8fn5_kRtVz8.roa (raw, json)
Hash identifier: iIU5zT1ZqVJ8LoAimnpiYyM15HWsynoBl7FRLc4xgAE=
Subject key identifier: BF:C6:FD:AB:2E:64:0F:54:75:1F:4C:5F:F1:F9:F9:FE:44:6D:57:3F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421441CA4F052144BB8DCB7E3C4367491
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v8b9qy5kD1R1H0xf8fn5_kRtVz8.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213693
IP address blocks: 109.176.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1c:a4:f0:52:14:4b:b8:dc:b7:e3:c4:36:74:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfc6fdab2e640f54751f4c5ff1f9f9fe446d573f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:0d:e7:94:07:85:71:46:a8:60:1e:38:b9:
b3:d3:3b:ca:4a:a5:15:28:2a:ab:d0:ff:5b:ad:d2:
73:a3:65:98:ea:1c:a9:52:20:b3:64:11:bd:e9:f3:
8c:12:f9:75:48:7a:c8:89:f4:62:ec:1d:86:35:77:
5b:74:7f:00:6a:d2:73:3d:cf:38:dc:a4:16:c6:e0:
0f:93:87:91:20:57:cc:23:94:e7:6d:4e:73:c6:41:
5c:67:2f:f9:df:77:14:d7:08:f2:b1:90:9d:0c:6a:
84:89:9e:70:13:e7:d4:5a:39:93:d7:a5:a6:cb:f3:
34:1d:4d:41:eb:b5:d0:72:e2:c9:df:5c:66:f9:9e:
b6:21:e0:4c:68:d3:2d:e3:3a:52:97:02:be:48:68:
80:79:a1:1c:eb:ca:bc:79:50:7d:af:99:6e:c0:b6:
ed:a9:d6:2b:34:04:3a:86:f4:7f:15:3d:d1:40:07:
57:7e:b2:83:8c:26:e3:f4:1a:d0:b4:ea:d8:85:12:
9f:eb:ba:8c:37:70:47:77:af:db:a1:66:c8:a7:92:
02:e8:8f:dc:26:38:96:f6:96:f3:ea:21:81:49:dc:
d5:b7:c4:09:89:05:1f:f5:13:65:11:14:6e:bc:fe:
0f:c8:47:ea:15:65:94:99:58:73:24:34:2f:c5:26:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:FD:AB:2E:64:0F:54:75:1F:4C:5F:F1:F9:F9:FE:44:6D:57:3F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/v8b9qy5kD1R1H0xf8fn5_kRtVz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:82:5a:66:b8:2b:9e:23:1d:d5:da:70:29:0c:a7:ae:e7:e3:
22:8a:36:d0:4b:1d:14:af:c3:7d:fa:e2:54:97:85:5b:10:1a:
f3:0c:2d:28:b6:e5:3c:0f:11:66:07:c6:9e:3b:5d:fa:a8:40:
9a:e4:b6:20:a9:a3:09:d6:35:71:03:32:b7:fc:aa:50:df:84:
96:91:c2:e1:51:14:23:41:35:97:ea:6c:3d:67:50:35:a8:1a:
4e:e5:06:56:65:10:e3:a3:72:b8:3f:d3:48:19:52:9e:8d:0f:
80:16:19:25:11:38:c3:4c:3b:15:ce:b1:7b:14:52:05:3d:a9:
09:6f:83:02:e1:30:a1:cb:b9:c5:cf:27:77:03:3a:36:a2:b1:
51:d0:22:4f:21:f4:d4:66:a2:34:d8:a4:d1:b3:95:b5:5f:ed:
80:25:5a:bb:e5:32:5d:95:73:79:1c:07:38:65:6d:d1:39:70:
bd:03:db:b5:8b:c3:fa:e3:96:71:ce:2c:a0:92:b4:d8:e0:7d:
1c:c1:45:c2:b1:4b:40:ad:03:03:1f:4e:54:2c:98:e6:a8:3e:
bf:3b:c3:1d:c7:3f:bd:d2:9f:09:9a:ae:6a:cc:8f:d9:9f:3b:
af:92:00:80:7f:73:f0:d1:5e:b9:80:53:f0:02:5b:d3:ca:f7:
84:03:65:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:48:33 2025 by rpki-client