Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/yO8yGDlp-pgPsfCtW6-Sdqgf6z8.roa
File: yO8yGDlp-pgPsfCtW6-Sdqgf6z8.roa (raw, json)
Hash identifier: SH391E3HYBBZSzKR5WZ5E1ALuIU3dss9i9wIgwa0Lyk=
Subject key identifier: C8:EF:32:18:39:69:FA:98:0F:B1:F0:AD:5B:AF:92:76:A8:1F:EB:3F
Certificate issuer: /CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Certificate serial: 019423D6DA615288152ADF87BE015FCA3F21
Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/yO8yGDlp-pgPsfCtW6-Sdqgf6z8.roa
Signing time: Wed 01 Jan 2025 21:47:50 +0000
ROA not before: Wed 01 Jan 2025 21:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50296
IP address blocks: 193.104.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:da:61:52:88:15:2a:df:87:be:01:5f:ca:3f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Validity
Not Before: Jan 1 21:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8ef32183969fa980fb1f0ad5baf9276a81feb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:90:de:60:f8:f4:3b:28:5c:bd:db:bc:fb:
d4:57:2a:e9:76:8d:ca:78:17:a3:7e:bd:14:b8:82:
70:e9:c5:b7:af:be:cf:4e:fa:9a:66:a3:42:a4:fc:
5a:94:7b:c1:55:f8:4e:54:9a:52:c8:5b:4e:24:4b:
52:ee:da:26:64:d7:de:e9:3f:17:2b:a9:a4:db:58:
fb:1a:37:75:19:a4:47:81:14:47:a3:56:5e:1e:e1:
09:8c:21:d8:7e:aa:e2:ef:5d:b8:9f:6a:7d:cb:64:
d6:26:42:f3:0a:05:82:f4:2a:95:07:31:b5:ca:b7:
e5:a5:ca:db:24:62:31:e3:49:b2:10:fd:3a:25:c2:
9d:7b:0f:37:cb:c1:02:fc:5b:0d:d4:af:da:63:13:
61:75:11:b2:d0:dd:4a:8c:ab:48:3a:21:1f:5c:4f:
41:2c:8a:91:58:f9:a7:0e:82:a0:78:3e:6d:1a:0e:
19:5c:30:37:11:ca:38:62:fa:47:3e:8e:e1:28:80:
a5:03:82:82:e1:3b:fa:90:c1:06:b9:ff:18:97:3c:
93:dd:95:c1:7d:42:1b:71:3f:92:41:fc:ad:e8:37:
f8:98:16:49:13:56:da:af:a5:69:79:67:54:8c:cb:
75:be:d3:96:89:49:dd:3a:e4:2e:73:d6:f8:4a:b7:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EF:32:18:39:69:FA:98:0F:B1:F0:AD:5B:AF:92:76:A8:1F:EB:3F
X509v3 Authority Key Identifier:
keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/yO8yGDlp-pgPsfCtW6-Sdqgf6z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.196.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:28:3a:f7:0f:30:56:51:f3:87:88:9b:93:ba:f9:b3:2f:26:
06:4f:ee:e7:c7:4a:ac:36:80:96:7d:23:6d:e8:65:fb:81:93:
7a:64:1a:77:d4:be:7b:36:17:79:26:8a:2b:c5:7c:9b:93:22:
dd:3a:4b:49:ef:75:ca:38:7d:ac:0f:fb:3a:a1:7f:28:94:07:
c8:73:d0:70:cf:7a:11:71:3d:48:20:19:3c:01:74:62:56:a5:
d1:78:7f:2f:17:e6:1e:7b:76:18:13:f6:22:aa:c9:33:17:41:
80:7a:fd:6c:8d:46:d9:5c:d0:26:27:b2:82:de:12:dd:ff:95:
bb:11:75:5a:8a:5d:ff:34:e6:2d:4a:fb:7e:ef:2d:98:e0:ff:
17:31:80:8e:f5:bd:9a:66:58:27:22:84:ea:27:09:06:f9:74:
05:6b:6b:03:0d:e9:a2:f9:4d:c9:d7:c5:90:0b:9b:21:5a:3b:
06:77:a7:7e:94:0a:86:4e:4c:30:6f:5a:cd:25:d1:04:a1:8d:
25:2f:47:c8:b6:da:4a:6a:85:5d:e6:4d:3a:e9:d2:63:a0:fb:
c1:79:ba:0b:51:1b:e0:f5:4b:06:e2:97:8b:18:d3:df:6c:2a:
a0:1a:c7:d7:57:e8:d0:e7:cb:d7:2e:3f:ef:ff:db:7d:39:47:
3b:fd:c2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:44 2025 by rpki-client