Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa
File: 8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa (raw, json)
Hash identifier: dXBSN3fOQjIFRZdnOkkO5RCbLu9iQTdXwdnJOOh0Gjw=
Subject key identifier: F2:06:7C:87:AD:A1:28:34:34:44:E1:CE:A4:D9:1F:63:38:2A:6F:83
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 01946F255A7845C0A444F5112F96CED237A4
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa
Signing time: Thu 16 Jan 2025 12:45:06 +0000
ROA not before: Thu 16 Jan 2025 12:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213966
IP address blocks: 86.107.108.0/23 maxlen: 23
2a01:fcc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:25:5a:78:45:c0:a4:44:f5:11:2f:96:ce:d2:37:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Jan 16 12:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2067c87ada128343444e1cea4d91f63382a6f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:bc:83:44:47:98:76:e4:5d:69:92:c7:f7:
63:4a:01:c4:10:c2:58:70:05:28:09:66:d2:b7:9d:
d1:5c:1e:73:2c:df:23:b4:47:47:6a:26:05:7e:ff:
20:7d:b7:03:e6:be:bc:0c:0f:c0:f9:7f:dc:51:1c:
be:0c:ca:3b:15:8b:c7:c0:2f:8f:73:b4:a2:d2:4b:
dc:a6:d0:7e:25:0c:6d:93:c0:66:29:6a:ec:30:52:
9d:dc:3e:99:b0:c5:77:6b:d3:4e:85:be:d9:38:60:
ea:40:ba:4d:90:9a:3a:ae:63:61:42:af:05:e3:3c:
d9:f4:b0:61:bf:85:4e:b8:6c:7b:26:45:43:22:05:
ff:54:50:f7:9a:12:6f:71:18:a8:fe:07:91:c7:b9:
39:69:02:db:85:2e:78:63:4f:62:fe:2f:5f:a2:0a:
20:8b:b8:3a:8c:2e:d8:d5:57:f3:50:68:30:ca:ef:
19:0b:f0:9d:f3:8b:dc:e2:47:59:dd:f9:ed:61:2d:
9a:79:28:00:f9:92:b2:5c:5c:19:33:f8:a4:a5:59:
70:97:9b:a7:53:b1:39:24:8b:51:ba:0e:84:47:8e:
e2:09:05:76:5c:02:91:60:b4:3e:7f:2a:b6:a5:5b:
09:11:1a:29:a8:45:46:f3:10:04:46:3e:49:28:83:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:06:7C:87:AD:A1:28:34:34:44:E1:CE:A4:D9:1F:63:38:2A:6F:83
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.108.0/23
IPv6:
2a01:fcc0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:b2:64:c8:0f:c1:c6:c6:27:f8:f8:e4:64:c4:4c:87:75:98:
79:ba:8a:cf:fa:57:80:e3:c1:1d:8e:7e:d7:94:82:0d:dd:ab:
94:c4:22:61:09:06:fd:0b:a2:a5:75:2f:70:a5:ec:cd:00:e9:
a4:5e:fe:ec:07:63:f7:ec:48:93:4a:d5:2f:92:c9:7e:3d:d4:
62:cf:fd:31:82:a6:81:a2:26:bf:2c:19:35:c4:89:88:c2:33:
cb:87:43:31:c4:a2:4b:67:7c:06:4f:b7:b6:76:0e:1b:a0:ce:
8c:5a:56:c8:6d:10:15:9e:ec:fd:60:7b:ed:73:5c:64:d2:d0:
47:87:cc:a6:a8:90:e7:d9:7b:6e:a2:47:ea:e8:34:6c:0b:18:
27:4f:72:da:41:62:67:91:0d:60:7d:1d:6e:7d:0d:ce:20:3e:
da:b7:3b:f5:23:60:5d:7d:fe:07:dd:5c:7f:2b:bd:b9:53:92:
7b:34:89:78:0f:d1:2e:d5:eb:e9:b1:20:8a:9b:09:db:76:72:
7d:8b:a3:31:2b:2b:0f:21:12:40:2d:b7:a1:84:ab:47:2c:de:
31:03:36:15:0c:49:a6:34:eb:0a:db:41:24:7a:4c:5b:86:32:
80:cf:7b:f7:1d:f0:1b:21:c1:76:6e:6e:8c:e2:02:11:4c:50:
11:aa:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:02:04 2025 by rpki-client