Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa
File: 8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa (raw, json)
Hash identifier: mtFporZGWALvI1bFzQb9Xpsj858BjBk/glbS/pmBQi4=
Subject key identifier: F0:80:FC:92:0B:F5:49:ED:6B:83:61:46:24:22:AE:5D:E0:D3:65:DC
Certificate issuer: /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial: 0194228D9880EB71303C776ACDCF9DCCF8B5
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa
Signing time: Wed 01 Jan 2025 15:48:12 +0000
ROA not before: Wed 01 Jan 2025 15:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39736
IP address blocks: 185.228.164.0/22 maxlen: 23
2a0d:2600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:98:80:eb:71:30:3c:77:6a:cd:cf:9d:cc:f8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Validity
Not Before: Jan 1 15:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f080fc920bf549ed6b8361462422ae5de0d365dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:8f:9d:51:bd:e0:29:f2:a7:96:67:53:29:
47:64:70:eb:de:23:8e:b7:93:3e:49:f0:4d:e2:b5:
84:04:b3:12:ee:17:f8:16:e8:44:35:65:99:60:c0:
6a:7c:a2:c0:ad:72:5a:06:d9:08:47:12:10:77:4d:
80:76:d2:c8:75:31:12:64:2f:b2:7b:fa:96:87:a3:
8a:b6:62:e6:5f:a3:75:6d:2c:a1:8b:9b:61:fd:cd:
63:c7:74:9d:c8:bc:9b:03:47:24:fd:67:7c:ef:95:
fe:e6:bb:f2:47:15:a7:ac:0a:2a:d0:25:a3:f1:85:
83:db:13:b3:93:f8:57:4a:8e:ea:3e:05:3f:79:c2:
0e:66:25:71:19:94:6e:db:64:c8:9d:8c:f0:e6:57:
e2:46:90:7f:bc:e8:69:9d:3d:b4:47:ec:54:83:56:
5d:40:0b:db:eb:73:69:49:4b:f3:41:32:f2:23:48:
a9:31:67:8e:48:ab:e5:af:b7:e9:a9:b7:22:5a:6f:
8e:b6:8c:1a:a1:70:81:43:49:79:37:f5:86:e2:c0:
72:8e:57:10:76:33:98:78:26:a4:b8:0f:3c:fc:22:
4c:67:92:e3:c1:b7:c1:08:9e:be:2c:81:e7:77:ab:
25:01:61:63:ef:ee:36:18:2c:b2:1d:f8:37:b5:51:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:80:FC:92:0B:F5:49:ED:6B:83:61:46:24:22:AE:5D:E0:D3:65:DC
X509v3 Authority Key Identifier:
keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.164.0/22
IPv6:
2a0d:2600::/29
Signature Algorithm: sha256WithRSAEncryption
9f:74:52:13:19:d3:c0:98:15:46:5e:9d:0c:85:38:86:33:11:
e2:3f:c4:47:97:4a:9d:57:5f:d9:9d:bd:68:fa:7f:c3:fb:2f:
f4:c6:d3:76:bb:31:75:ac:31:28:aa:5f:00:ec:cb:e4:90:0e:
d4:57:23:2e:40:c9:7d:76:79:df:e3:85:dd:42:1d:65:dd:76:
d6:58:a1:38:c3:98:48:72:d4:6d:c4:df:bd:34:15:3e:03:f7:
77:78:a8:9d:22:f1:bf:df:e0:74:52:1f:67:5b:82:c7:39:df:
d6:3b:ca:96:1c:5e:68:42:5a:79:bc:79:ba:c8:e4:2f:79:46:
d5:1d:b8:a7:0b:e3:27:76:e6:96:f4:60:1e:7e:12:21:5a:86:
6d:b4:55:a8:b7:86:02:8a:2d:81:5b:74:5a:31:da:85:d8:19:
3d:c5:8a:9e:7c:cd:ba:27:9f:59:8a:96:85:79:d5:ee:26:51:
db:25:8d:30:4b:29:d6:2b:07:8a:a5:89:f4:94:0e:c6:55:26:
2c:27:a1:45:22:12:a7:40:a7:2d:8c:b3:a8:27:98:e1:16:b2:
88:98:ef:16:03:37:39:b3:93:e5:8d:9e:44:d8:54:37:95:4c:
76:a7:e5:08:f6:e1:6d:33:ca:90:a2:14:c2:a5:a1:3b:80:43:
5e:72:44:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:56 2025 by rpki-client