Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/8tB6p8pD3Es3mcW7_h_tKKFo3gs.roa
File: 8tB6p8pD3Es3mcW7_h_tKKFo3gs.roa (raw, json)
Hash identifier: /upIizdLvhAVo+dTJgi7w1RXZAYuejov/d8qUeJyxe0=
Subject key identifier: F2:D0:7A:A7:CA:43:DC:4B:37:99:C5:BB:FE:1F:ED:28:A1:68:DE:0B
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019424B404618265294578760B4187E7BCD2
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/8tB6p8pD3Es3mcW7_h_tKKFo3gs.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19740
IP address blocks: 147.189.129.0/24 maxlen: 24
176.111.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:04:61:82:65:29:45:78:76:0b:41:87:e7:bc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2d07aa7ca43dc4b3799c5bbfe1fed28a168de0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9e:09:ad:7c:96:d2:79:87:5a:b1:4d:ef:2e:
79:7d:1c:48:32:ce:df:6c:27:3a:0a:d6:78:bc:38:
d4:11:bc:7b:23:14:81:da:72:da:b3:f9:10:c9:dc:
61:54:b7:25:05:3d:73:ae:7b:88:7f:71:cc:83:dd:
f6:49:d5:c7:f0:67:9a:43:d7:ea:64:46:70:e8:d8:
56:e6:45:2d:52:70:77:9a:94:aa:d5:13:70:6e:e3:
32:ce:33:60:3b:a0:37:af:16:5c:84:6c:17:96:01:
87:c8:03:86:f9:f8:86:1d:01:c3:2f:6f:d9:0c:59:
e7:04:f6:57:b1:c9:4f:1f:a5:ee:b4:09:8e:78:1b:
fe:4e:d6:54:4b:aa:7f:0d:29:f1:aa:75:ae:5d:e9:
66:fc:d0:80:30:69:cb:86:fb:bb:4f:01:fa:08:38:
3f:d2:3a:62:53:f4:c3:88:76:d6:d4:c9:4e:a4:69:
07:e5:a8:2f:a7:9e:5d:16:98:b0:e8:4c:3b:6c:3d:
d3:d1:fd:e1:eb:42:fd:ab:c1:59:cf:c2:71:3d:c9:
f8:2c:ce:5a:3c:22:71:ee:d1:8a:63:51:78:d4:af:
59:74:d4:d2:94:c1:9d:8f:04:d5:69:b0:ba:4f:ee:
ee:3b:7e:d7:03:ac:45:cf:89:2a:44:92:84:91:7e:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D0:7A:A7:CA:43:DC:4B:37:99:C5:BB:FE:1F:ED:28:A1:68:DE:0B
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/8tB6p8pD3Es3mcW7_h_tKKFo3gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.129.0/24
176.111.218.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ae:ab:4b:29:85:29:86:ae:f3:5a:fe:48:7b:71:34:73:6f:
8e:74:94:c2:e7:82:7c:39:c0:e8:80:66:93:10:f1:37:90:b3:
57:dc:50:eb:98:33:77:55:4e:6a:e6:50:c8:78:67:29:00:74:
2f:06:f3:9b:d4:e5:af:7e:c1:06:82:2a:4f:0a:ec:3e:04:74:
85:80:74:92:5f:2e:bc:31:04:9f:96:ab:06:b6:f8:d9:2e:9f:
6b:9b:9d:4f:b2:0f:22:51:92:39:d3:2b:29:8a:67:fb:1c:d8:
c2:35:fa:2e:e6:da:df:1e:86:7d:89:4a:03:e3:2d:f7:f4:4c:
11:8c:bf:ce:74:37:71:4c:d3:48:ce:a0:d1:b3:e6:fd:0e:08:
90:cb:3a:9b:84:a6:af:58:28:75:a2:7b:e1:b2:b0:cc:88:80:
02:6d:64:38:01:27:32:00:58:51:d7:e5:ca:6a:37:67:cd:d4:
10:2d:cc:df:ea:a8:1b:59:52:7d:75:da:f0:df:42:92:59:d0:
29:b2:53:f4:fd:08:1e:ba:5d:56:28:b8:cc:3e:5d:fa:18:25:
4d:cd:e3:1a:f4:02:7e:45:b7:5f:e8:c1:73:a6:ec:f3:45:9a:
f6:ee:c0:d5:6d:bf:fa:36:03:47:60:45:90:a1:0f:0f:43:b9:
0e:7f:26:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:49:55 2025 by rpki-client