Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/8FMLT1AmbwVl9zcvS32Q9od9DEQ.roa
File: 8FMLT1AmbwVl9zcvS32Q9od9DEQ.roa (raw, json)
Hash identifier: yisuPZkgdD2MViPM9oU55ZAf5YPozXvdCbB7qiW4Gcw=
Subject key identifier: F0:53:0B:4F:50:26:6F:05:65:F7:37:2F:4B:7D:90:F6:87:7D:0C:44
Certificate issuer: /CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Certificate serial: 01942143CB529EE8405C35613D85C548752D
Authority key identifier: 83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/8FMLT1AmbwVl9zcvS32Q9od9DEQ.roa
Signing time: Wed 01 Jan 2025 09:47:58 +0000
ROA not before: Wed 01 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 193.161.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:cb:52:9e:e8:40:5c:35:61:3d:85:c5:48:75:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0530b4f50266f0565f7372f4b7d90f6877d0c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8d:97:83:18:50:51:fe:95:bb:bd:d8:a6:fe:
93:60:70:1d:4c:c4:5c:84:0a:2a:17:e2:9c:5f:eb:
45:35:37:7a:3c:39:6b:48:27:dc:05:87:c6:8a:a0:
11:01:75:a4:fc:ff:68:24:9b:a2:66:02:5e:67:da:
17:d9:96:1e:bc:d3:a8:71:8e:c9:fa:09:d9:18:a1:
4a:a8:c8:95:64:d6:85:86:3a:fc:20:8d:07:7e:cf:
61:05:98:3b:af:ed:39:42:f9:31:83:c4:44:fd:cc:
34:b9:aa:a1:b3:1c:4a:f3:41:48:59:1e:55:5f:45:
4b:71:c8:55:00:e6:e3:50:35:a6:2f:59:01:98:88:
a4:7d:7c:58:6f:76:79:36:ed:e3:16:ae:51:d9:83:
ca:ea:a7:9a:61:28:eb:78:ef:24:22:5b:c5:47:f6:
58:93:83:e5:eb:a3:1e:38:64:7b:db:08:e3:7b:33:
14:13:5a:df:53:eb:a6:39:ea:bb:07:46:13:7b:be:
ab:c7:3c:84:2d:0a:50:1b:68:23:8c:21:64:b5:ce:
6c:20:3a:29:44:0b:2a:d3:9d:05:fe:60:05:a7:48:
8e:54:53:32:a6:da:bb:22:08:5f:02:de:20:de:59:
5b:4e:ab:7e:27:5d:ac:30:f7:1c:0e:ad:15:5c:8c:
95:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:53:0B:4F:50:26:6F:05:65:F7:37:2F:4B:7D:90:F6:87:7D:0C:44
X509v3 Authority Key Identifier:
keyid:83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/8FMLT1AmbwVl9zcvS32Q9od9DEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0f:e5:e2:0e:b0:9b:f3:93:d5:0c:3d:8a:5b:c4:93:3d:4c:ee:
5b:bf:c8:76:c0:5f:d7:02:09:ab:b5:4b:02:6e:39:00:9c:56:
4a:b0:a9:f3:38:04:02:2c:ef:0e:84:92:e2:0b:6e:b4:51:f4:
46:3d:3c:a7:19:fd:b5:6e:e1:c8:5e:b5:9d:6a:43:c5:27:18:
d6:4b:1f:c1:43:9b:f7:42:71:12:bd:38:db:5a:65:ed:f6:58:
61:12:32:e6:99:b7:f8:03:03:65:1a:d4:7e:af:f0:b4:a7:29:
01:1d:69:8d:e0:5a:10:0b:da:53:c8:3a:00:9f:16:57:41:2c:
14:3c:a6:d9:1f:5b:a9:3f:1d:ef:b1:1a:64:fb:b1:30:31:b9:
d3:06:21:d4:c7:56:3b:6f:af:23:39:ab:0b:a8:3c:2a:31:25:
cc:69:15:d3:39:3d:30:76:02:1a:a3:8f:9f:e2:37:e5:a7:df:
05:df:38:4e:ad:0d:8c:85:f2:3a:9f:b0:5e:ee:fb:0f:c4:a5:
94:da:0f:79:d8:d1:cd:42:1b:3d:ff:26:a8:e5:33:18:de:48:
af:4a:37:f7:f0:bf:2d:c9:ff:50:a8:5f:0f:9c:21:54:25:43:
b3:75:d1:ba:ff:85:dd:a9:0a:6d:dd:ef:fa:b2:68:84:99:e4:
25:54:26:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:58:45 2025 by rpki-client