Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/Z8_72VViKIEya-8jYQ4foPa8uyM.roa
File: Z8_72VViKIEya-8jYQ4foPa8uyM.roa (raw, json)
Hash identifier: VfRJSQVqCqPZi9LVFFlh6oeMG2gSmAPtA9TzAjDBjm8=
Subject key identifier: 67:CF:FB:D9:55:62:28:81:32:6B:EF:23:61:0E:1F:A0:F6:BC:BB:23
Certificate issuer: /CN=31518c7b54b44127083f626d3e1518f4454ce055
Certificate serial: 019420D5E65307A7F1BC507F1064CE65D71E
Authority key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/Z8_72VViKIEya-8jYQ4foPa8uyM.roa
Signing time: Wed 01 Jan 2025 07:47:56 +0000
ROA not before: Wed 01 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201473
IP address blocks: 185.218.206.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e6:53:07:a7:f1:bc:50:7f:10:64:ce:65:d7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31518c7b54b44127083f626d3e1518f4454ce055
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67cffbd955622881326bef23610e1fa0f6bcbb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:84:75:b0:24:8e:fc:8e:37:b4:45:bd:a6:
c4:b7:40:37:aa:80:b0:c2:ee:9b:0d:87:f4:e7:86:
ce:92:b6:9f:7e:5d:f8:53:ff:fc:75:7d:ac:31:7a:
03:f9:7a:15:bf:e3:d4:32:e5:ce:64:59:e8:76:6c:
d8:4b:d6:3b:37:15:66:c7:fb:82:4f:03:f3:ce:97:
92:76:2a:97:72:df:67:a3:ca:04:92:78:12:ca:af:
ea:21:99:40:07:ed:79:ed:0a:72:98:5b:3f:27:5c:
24:8d:1c:43:c9:30:ec:51:15:9e:a6:3c:51:e5:7a:
c6:e8:31:4d:15:59:4d:ae:15:21:69:25:64:6c:03:
5e:1d:d9:6d:9a:22:fa:26:1d:32:ad:fc:e9:d3:84:
0e:a4:a1:be:57:aa:e9:14:17:eb:ff:cd:c4:4d:ef:
3d:3d:06:8e:0a:f8:27:1d:e1:09:4a:fd:04:b2:39:
af:95:16:bc:18:36:2a:07:e5:1e:36:64:6f:04:f1:
06:19:bb:bb:a0:fb:67:a8:d9:07:b9:d0:d0:9e:d9:
69:a4:1e:4f:f2:0f:88:79:c6:36:ec:3e:78:e8:2f:
0a:2f:c4:73:f0:65:41:6b:0c:8c:99:fc:5e:f2:08:
b7:5d:5e:eb:67:a8:d8:7d:99:28:8e:b2:5d:e4:ee:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CF:FB:D9:55:62:28:81:32:6B:EF:23:61:0E:1F:A0:F6:BC:BB:23
X509v3 Authority Key Identifier:
keyid:31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/Z8_72VViKIEya-8jYQ4foPa8uyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:75:b0:b0:77:57:7f:b2:6a:bf:69:65:b8:2a:d3:ee:c6:d7:
1a:98:f1:6e:2a:22:aa:d1:61:dd:db:b2:ca:45:19:54:6f:21:
20:8e:92:72:06:de:21:83:d5:c3:88:36:ea:55:37:56:59:78:
33:60:e8:f8:bc:ef:72:31:a0:b6:37:87:53:46:f3:2d:70:11:
ab:65:9a:00:68:27:45:a7:f2:e2:67:2f:36:6b:43:00:44:e6:
76:e4:7d:c9:10:42:ae:bd:77:b7:24:cd:cb:e9:5b:24:8a:81:
e0:15:16:50:ff:ce:19:dc:ac:a9:de:74:78:b6:d8:1a:7d:e1:
55:48:d3:b8:0c:99:9a:98:81:bb:ac:ef:c5:e4:88:c8:d8:71:
fb:c7:c4:5f:ac:34:11:f3:f4:0f:b4:8d:86:44:3a:2f:8b:71:
08:6f:a7:aa:0c:ce:26:cf:56:e4:0b:a1:f2:b9:77:49:96:a3:
18:8c:a6:53:27:b2:ec:3f:7b:18:db:04:56:b6:61:1c:bd:fb:
99:dd:a2:80:90:a2:c9:fe:1b:42:24:c4:b9:a5:66:84:7a:3a:
ef:bb:c8:0a:1b:e1:15:4a:fb:43:64:25:3c:91:17:6c:63:81:
cf:eb:53:ab:a7:9a:25:0c:15:ad:88:b4:d7:ac:ef:2f:31:e5:
c8:8a:97:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:48 2025 by rpki-client