Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa
File: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (raw, json)
Hash identifier: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=
Subject key identifier: F8:BB:6B:E1:7E:ED:1E:08:8D:F3:4D:E1:F2:33:DB:06:75:AB:02:FD
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 019420D5CC39CBB4B6A83B7FBEB97BD34785
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28958
IP address blocks: 82.146.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cc:39:cb:b4:b6:a8:3b:7f:be:b9:7b:d3:47:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8bb6be17eed1e088df34de1f233db0675ab02fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:54:73:9b:98:cc:39:83:2d:bf:5b:5d:29:0d:
a0:7e:87:14:2f:1e:4b:c8:9d:7e:b0:a4:52:3b:e2:
fe:48:d7:52:ac:b8:3c:d6:a6:a3:18:39:7f:86:e3:
ff:ef:27:db:11:1a:af:00:72:9e:dc:18:05:f8:9c:
66:64:1a:70:76:5e:c6:25:f3:1d:fc:a7:b7:8a:66:
86:0d:f4:03:91:42:20:db:c5:71:fe:a8:f6:84:3d:
40:d4:7d:43:f0:53:06:42:4a:b3:0a:e0:55:7f:51:
28:46:fe:ba:6b:4f:bf:63:ca:95:59:a5:59:1c:16:
1d:76:00:de:d8:40:2f:45:8f:f8:f2:48:51:0f:5b:
ae:d5:22:17:e3:96:c6:ec:9b:c5:20:cc:d0:b5:e5:
cd:77:9d:71:1f:30:df:c7:a8:48:91:dd:83:04:8f:
c5:f2:a5:ba:ff:6b:dd:dd:93:a1:d8:69:04:da:f8:
bc:9c:26:db:bf:df:ba:7c:22:39:1c:c5:cd:fb:fe:
e4:b4:07:69:6b:7f:8b:5c:9f:98:48:b6:6b:52:78:
99:82:45:63:ad:d1:d3:93:12:d6:b5:0a:ac:f7:18:
47:75:00:81:14:23:09:04:e0:1a:20:47:93:26:4f:
fa:c1:9e:04:d1:2c:d4:e7:1f:4e:72:59:de:3e:aa:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BB:6B:E1:7E:ED:1E:08:8D:F3:4D:E1:F2:33:DB:06:75:AB:02:FD
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:08:a7:5e:a8:c3:0e:1e:6e:fc:d4:d0:17:31:5a:f4:00:47:
0e:60:a0:b1:98:ed:be:9d:73:5d:95:c0:78:91:fc:84:f1:d4:
ac:b8:1b:2d:78:94:17:5b:67:1a:a1:dd:f5:96:17:84:42:79:
33:d2:cf:b9:68:d5:69:38:3f:b4:66:c9:30:94:80:4f:f1:2a:
bd:0a:73:65:50:49:c4:98:45:cd:7a:1c:92:27:83:ed:5f:59:
0b:44:1b:d0:eb:7c:e1:2f:7f:a6:7e:bd:56:6a:01:05:9d:9f:
82:06:c0:34:b5:1f:73:30:4f:36:eb:7c:eb:5f:3e:61:3d:b9:
74:aa:e1:35:bf:7b:7c:f8:49:f7:f2:fa:15:14:59:06:95:25:
4e:af:08:72:70:9c:3f:a5:9a:87:24:4e:fe:51:1e:87:a1:2e:
7a:ce:73:67:ce:7d:35:d4:16:0e:65:b8:a7:ec:1d:47:a9:11:
ed:ff:13:71:e0:e8:fd:67:be:86:2f:79:23:4f:d1:6f:66:f1:
bb:61:ed:e0:64:1d:4e:80:9b:85:54:2d:fc:c2:16:4b:c1:c8:
26:50:ac:88:ba:18:0e:a9:e1:9d:c7:28:dc:16:25:70:83:87:
b3:07:8e:c9:a7:71:ab:f6:ac:4a:96:71:b7:b5:85:cf:10:6b:
5b:89:10:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:20 2025 by rpki-client