Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/8eCmueBEOSsAwO1CHji1gE-_3LI.roa
File: 8eCmueBEOSsAwO1CHji1gE-_3LI.roa (raw, json)
Hash identifier: l5xAz+doohGBqrtfOFmej8JqC0mnQVYKQDeIBm1ToAM=
Subject key identifier: F1:E0:A6:B9:E0:44:39:2B:00:C0:ED:42:1E:38:B5:80:4F:BF:DC:B2
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 019423690209DB8B8A6EFE8AC8FA4DA878BD
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/8eCmueBEOSsAwO1CHji1gE-_3LI.roa
Signing time: Wed 01 Jan 2025 19:47:51 +0000
ROA not before: Wed 01 Jan 2025 19:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19551
IP address blocks: 91.109.248.0/24 maxlen: 24
91.109.249.0/24 maxlen: 24
91.109.250.0/24 maxlen: 24
91.109.251.0/24 maxlen: 24
91.109.252.0/24 maxlen: 24
91.109.253.0/24 maxlen: 24
91.109.254.0/24 maxlen: 24
217.147.124.0/22 maxlen: 22
217.147.124.0/24 maxlen: 24
217.147.125.0/24 maxlen: 24
217.147.126.0/24 maxlen: 24
217.147.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:02:09:db:8b:8a:6e:fe:8a:c8:fa:4d:a8:78:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Jan 1 19:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1e0a6b9e044392b00c0ed421e38b5804fbfdcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:d2:23:28:ae:35:09:f9:9c:83:c9:6e:4e:
b3:ae:0d:1a:c7:6f:87:55:92:88:94:33:36:f6:0c:
87:f2:ea:d8:d0:2c:1c:f0:25:75:4b:1a:d2:c8:8d:
c9:a5:5c:7c:c8:e1:0f:78:8e:cc:be:b9:1a:b5:7d:
fb:2f:32:0a:74:bf:c3:a1:a8:e4:6d:e6:c2:b1:a8:
c3:ea:f6:21:65:79:d8:4b:fb:f1:e8:3e:ed:c8:35:
44:7f:37:ec:20:ac:cf:a1:3e:0c:57:67:dd:60:c3:
75:50:8b:a1:91:54:c8:6f:fa:01:bb:1d:b8:fb:85:
31:14:20:89:e4:ab:d4:98:e9:3c:54:89:b5:0e:36:
f5:5e:45:83:fb:34:0f:c5:a3:97:40:f6:47:7c:b9:
ea:d6:77:a4:14:7d:6f:cc:7b:f7:78:4d:da:64:52:
73:e1:e7:03:3a:94:29:06:d6:4b:d3:6b:72:19:30:
34:9f:09:21:e2:b2:f5:10:56:96:b4:48:87:e7:f7:
40:50:b4:2f:31:a1:ab:d3:d1:a8:0e:23:98:5b:90:
c5:d9:30:85:75:4c:09:a1:0f:c1:8f:e6:fb:7e:4c:
46:2e:5b:95:88:04:f9:92:48:fc:0f:90:13:80:3e:
ca:cf:9f:99:2c:39:04:fb:95:b6:51:51:6e:e1:6c:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E0:A6:B9:E0:44:39:2B:00:C0:ED:42:1E:38:B5:80:4F:BF:DC:B2
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/8eCmueBEOSsAwO1CHji1gE-_3LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.248.0-91.109.254.255
217.147.124.0/22
Signature Algorithm: sha256WithRSAEncryption
22:83:c6:e0:3e:36:a0:01:44:a0:e3:dc:ac:d0:d2:58:dc:0f:
b7:5d:20:52:08:0c:81:15:f2:a0:03:9a:0b:1c:dc:02:b5:b3:
64:36:f8:28:26:e4:d4:65:f4:62:c5:d7:0a:48:e4:a0:55:7d:
07:95:67:f9:1a:6f:d8:eb:56:6c:d9:57:f0:ff:5f:12:d9:32:
8d:0e:ca:c9:7c:81:37:55:d9:ca:9c:40:f1:86:34:15:c0:fc:
c2:ba:38:59:35:3b:bb:3b:d2:e7:ed:98:b7:a1:bc:9f:34:df:
8b:71:5f:f3:0a:20:20:5d:be:58:87:fb:ea:be:04:bb:ce:0c:
42:af:0c:5c:c5:4b:9c:3b:f9:ce:b6:5f:47:e6:c2:96:75:65:
18:b5:7b:06:52:cf:82:60:30:f0:8c:27:5b:81:0c:a8:87:4a:
39:bf:56:d6:27:40:2a:2c:c1:21:81:26:0c:0b:03:e4:fc:94:
79:72:ef:ba:24:e3:29:26:02:b9:c4:d3:a3:79:22:7c:04:29:
7d:d4:51:0d:58:7f:9f:b0:d5:53:b0:d3:b6:de:23:77:8b:13:
54:16:f1:19:96:56:11:06:d8:5e:f9:68:4e:8a:5f:3a:d1:ac:
95:c1:cf:a4:7d:1a:66:32:45:d2:86:e1:80:16:6a:c8:dc:2f:
7f:e5:cc:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:38 2025 by rpki-client