Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/8KsjpNRaIZUXOi8DwLVHVI28dt8.roa
File: 8KsjpNRaIZUXOi8DwLVHVI28dt8.roa (raw, json)
Hash identifier: SXYejuZAdmSHLj52AFM2feQKm4GSepnKMI2O57vhHV0=
Subject key identifier: F0:AB:23:A4:D4:5A:21:95:17:3A:2F:03:C0:B5:47:54:8D:BC:76:DF
Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial: 019421B1E6ACDC1197339486975014533D98
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/8KsjpNRaIZUXOi8DwLVHVI28dt8.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47705
IP address blocks: 91.208.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e6:ac:dc:11:97:33:94:86:97:50:14:53:3d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0ab23a4d45a2195173a2f03c0b547548dbc76df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:41:1a:73:21:b7:e7:19:f8:03:63:e8:3d:
f9:0c:c4:d2:10:81:f6:7f:a1:1d:16:f5:0e:e8:4f:
c8:17:b0:ae:ca:f6:be:e4:f3:56:bb:30:bb:12:36:
4c:b5:f1:29:c8:c1:5c:c0:61:35:4b:3f:61:78:57:
ec:1d:2c:e4:4d:6e:00:5f:de:32:db:bc:18:eb:87:
04:bc:b3:f9:52:f5:6c:5b:5f:3e:97:de:5c:7b:5e:
a5:77:a6:b4:12:68:fb:a0:cc:3b:aa:24:b3:ce:d0:
aa:2c:26:6e:77:b1:45:9c:6c:c3:04:85:3a:c4:75:
d1:e7:03:cc:30:6d:87:15:b3:e6:75:e4:cc:f0:80:
03:db:8c:b2:9a:f0:95:d0:65:dd:e4:42:92:95:5d:
bc:7b:0b:5e:c7:c1:79:1a:80:61:49:85:4b:1f:8d:
e8:90:ba:66:98:10:60:da:fa:17:fb:73:45:20:77:
05:27:5a:92:d6:57:00:e8:40:fd:4c:4a:95:2d:3b:
d9:af:20:ca:35:e7:fb:3f:5b:41:24:ca:05:ec:f1:
be:34:16:00:2a:63:51:86:c4:f7:a4:45:3e:b6:70:
6c:7d:df:96:9a:bb:09:3b:d8:7e:8e:a9:f3:14:e6:
c8:16:9d:52:9a:25:a1:b7:56:88:81:87:d4:50:58:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AB:23:A4:D4:5A:21:95:17:3A:2F:03:C0:B5:47:54:8D:BC:76:DF
X509v3 Authority Key Identifier:
keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/8KsjpNRaIZUXOi8DwLVHVI28dt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:4b:28:c7:fb:ea:f0:bf:e4:22:f8:7a:08:c7:8d:d6:7e:5a:
e2:03:25:cb:fe:f0:ca:12:f2:5f:0d:6f:24:88:75:7c:4f:b2:
e8:90:24:cc:4e:ef:54:46:cd:ac:30:16:37:2d:68:28:82:0a:
b4:81:7c:88:e1:ff:8c:c7:04:bb:5a:35:a6:fe:d4:a5:a1:93:
1e:87:16:b4:12:ae:3d:dc:a8:ca:5b:d1:d2:f8:54:8c:3c:f0:
04:94:05:6f:4a:ef:f3:28:75:9d:8c:99:31:df:d2:05:ed:43:
e0:25:76:29:f0:5e:90:87:3b:59:8e:db:c8:16:c6:90:ff:64:
d5:75:bc:f8:44:e4:56:c4:58:17:c4:95:24:b2:30:f0:97:37:
ff:ad:d6:c0:58:e3:63:c6:f2:32:db:17:3e:08:44:7d:28:0b:
cf:c1:fb:34:c3:2f:90:a6:06:ff:93:f5:4b:09:23:60:9a:6e:
40:2b:33:e2:8b:7c:c3:55:16:c4:e3:7c:26:e3:6a:73:65:35:
3d:aa:54:ed:21:32:c6:94:1f:c4:3e:61:42:dd:a7:1f:e9:1b:
35:0e:ae:df:4a:eb:bf:c4:91:c0:4b:b4:b8:47:0e:5b:34:ae:
84:c0:cf:18:e9:9a:09:31:41:47:0b:81:3b:9d:f6:f8:4b:58:
f0:44:2d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:08 2025 by rpki-client