Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/8AEYtyDng2JrczsuFPGKVviyc9s.roa
File: 8AEYtyDng2JrczsuFPGKVviyc9s.roa (raw, json)
Hash identifier: bu4yeJwv9MMrj8IdBFvelQwTvzrOnjRhUdtSSS/gVBE=
Subject key identifier: F0:01:18:B7:20:E7:83:62:6B:73:3B:2E:14:F1:8A:56:F8:B2:73:DB
Certificate issuer: /CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Certificate serial: 0194258ED43D42297FED57D9B81EB13C985E
Authority key identifier: 62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/8AEYtyDng2JrczsuFPGKVviyc9s.roa
Signing time: Thu 02 Jan 2025 05:48:24 +0000
ROA not before: Thu 02 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211583
IP address blocks: 188.94.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d4:3d:42:29:7f:ed:57:d9:b8:1e:b1:3c:98:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Validity
Not Before: Jan 2 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f00118b720e783626b733b2e14f18a56f8b273db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9a:1c:d0:6b:b9:e8:b8:1e:de:97:17:ec:3a:
2e:6d:fc:fa:bc:8c:8d:9f:e4:86:30:cb:1b:f3:ed:
b6:44:3e:6c:bd:fb:cd:f4:97:9d:9c:9f:68:be:1c:
23:c4:d2:ee:80:94:8c:8f:7c:2e:62:17:2f:5d:f9:
7c:8c:56:6d:99:23:69:90:32:c9:28:1d:02:72:a5:
e7:57:8e:df:82:4a:80:c2:b8:05:3a:03:ed:10:c5:
91:6a:f0:af:af:e1:6f:52:8d:8a:9b:1e:17:7c:9a:
81:6e:57:a2:65:2d:ee:e5:c8:3c:e1:43:1e:94:e4:
17:3f:4e:a2:fa:61:a3:4d:d2:48:47:05:24:f9:3d:
0f:91:48:77:06:15:c5:98:36:62:ab:24:62:db:18:
c8:02:aa:89:06:8b:fd:b6:86:07:91:19:d8:0b:e1:
59:18:a4:98:5d:95:9a:5d:44:40:2d:f6:06:d1:a2:
7d:56:8b:5a:fd:10:d0:80:85:11:2d:6b:66:96:44:
03:09:7d:fb:e9:04:a4:0b:85:0a:3e:7e:7a:85:6f:
39:d3:87:be:f3:be:87:72:05:87:d5:2e:a5:d2:bc:
88:38:71:da:0a:14:09:95:71:28:80:ca:c5:01:5f:
8e:9f:47:33:de:ed:11:6c:80:ba:7e:ae:46:4c:22:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:01:18:B7:20:E7:83:62:6B:73:3B:2E:14:F1:8A:56:F8:B2:73:DB
X509v3 Authority Key Identifier:
keyid:62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/8AEYtyDng2JrczsuFPGKVviyc9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.188.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:de:47:7f:dd:1a:56:ac:1d:9c:f8:48:d1:f7:7f:03:d9:f6:
de:82:02:ec:7c:91:68:2d:0f:2d:5f:46:74:ee:0b:c0:e5:43:
71:f4:71:7a:99:24:31:49:0c:bf:80:96:53:b3:08:32:11:ef:
a5:f8:ae:85:19:57:3c:5a:b2:77:49:12:f8:bf:11:6c:ad:ef:
95:12:69:94:d0:80:4a:38:bf:a5:63:e4:4b:16:e2:74:50:1a:
ee:5a:ff:b4:bb:2e:a8:46:56:b9:25:7e:9e:3b:7d:21:42:96:
6e:36:23:a2:f6:04:17:b8:d0:37:0c:b2:c7:a2:58:5e:55:03:
63:8c:8f:e6:74:20:31:9c:29:36:7a:a6:0c:c7:25:5b:0e:0a:
96:08:ee:26:53:34:4e:eb:47:a7:79:9b:98:c7:1e:9b:7d:70:
6d:8d:e8:dd:9a:3d:83:58:22:e1:65:0a:fa:42:39:3b:95:2e:
96:41:35:a7:a4:8b:d1:a3:d2:cb:8d:fc:af:ce:a3:7f:34:33:
ac:e4:64:a8:13:07:99:bf:b7:73:96:75:1a:e5:3c:e2:80:6e:
59:3a:f3:b3:d3:23:33:1c:3e:c2:8e:47:cc:32:d3:47:ec:23:
f0:1c:04:70:c7:4f:ed:b1:3d:bd:e2:ed:87:de:6e:3d:e6:5a:
50:81:7b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:38:18 2025 by rpki-client