Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/m8_r0VZgeMf9CD7ftR8A5KG9850.roa
File: m8_r0VZgeMf9CD7ftR8A5KG9850.roa (raw, json)
Hash identifier: rBBdrLVM7ya1VIISU7w74srUfPPOKneCLGZB6/hqiV0=
Subject key identifier: 9B:CF:EB:D1:56:60:78:C7:FD:08:3E:DF:B5:1F:00:E4:A1:BD:F3:9D
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 0194282740030FD47452228A06C320C58643
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/m8_r0VZgeMf9CD7ftR8A5KG9850.roa
Signing time: Thu 02 Jan 2025 17:54:08 +0000
ROA not before: Thu 02 Jan 2025 17:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 176.113.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:40:03:0f:d4:74:52:22:8a:06:c3:20:c5:86:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 2 17:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bcfebd1566078c7fd083edfb51f00e4a1bdf39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:75:70:67:b5:3a:72:c7:a4:37:5c:87:0b:
aa:f4:18:b8:84:bc:cd:43:95:91:4a:4c:b8:7d:65:
c1:fd:61:8c:83:6d:47:3d:05:8c:12:bb:78:55:ce:
76:ab:aa:19:33:c6:4c:87:bc:b8:6c:52:05:6f:06:
3b:6b:2c:e4:19:ab:10:fc:94:89:63:e9:c1:ab:a4:
73:7a:bc:10:94:c6:07:86:33:9b:8d:6d:28:96:29:
48:58:ef:3b:b7:55:57:0f:ec:fd:e1:89:0c:d3:22:
68:03:d1:a0:88:aa:6a:01:3f:b7:61:05:ae:1d:fa:
6f:d8:eb:c3:54:a9:c2:0f:13:6e:24:b8:e7:05:fc:
64:17:37:4e:93:30:1c:77:8a:a6:75:d1:6d:c9:d8:
be:d6:c8:d1:8e:9e:c7:7b:06:0b:4a:42:c7:be:00:
e4:80:84:02:31:04:15:b1:54:69:54:b7:7a:5f:98:
70:8f:a0:12:d3:1f:c0:52:b6:72:5a:d0:64:5f:0c:
5e:36:d0:24:73:15:02:5b:f9:8d:dc:9c:84:aa:82:
9d:43:e0:9e:90:94:2f:54:b1:73:80:57:dd:72:d6:
35:80:b0:a3:2f:3c:10:4d:45:6e:fc:68:13:6f:e5:
21:db:96:eb:a5:50:45:8c:fe:18:95:f0:1a:2e:b6:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CF:EB:D1:56:60:78:C7:FD:08:3E:DF:B5:1F:00:E4:A1:BD:F3:9D
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/m8_r0VZgeMf9CD7ftR8A5KG9850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:ad:e1:90:38:bd:53:9b:6f:ad:03:a9:41:b5:ec:5a:59:da:
10:e7:28:8d:69:a9:1e:0f:57:97:77:fb:9c:df:76:9f:99:d3:
41:2f:cc:3f:15:ab:84:e6:b4:15:4b:ae:cb:b1:0f:b8:0f:19:
d8:b9:e2:4b:7e:2b:86:b3:f5:a8:79:89:39:1a:86:0d:56:0a:
b4:74:1b:1e:c6:0d:be:cc:4e:59:8f:f2:b8:7d:02:8a:61:f3:
f6:30:b7:10:f5:d0:bd:c6:c0:31:a8:8f:44:db:0e:b2:fc:72:
ee:aa:d0:bc:2f:5c:23:4d:df:10:03:c7:2c:0c:b9:0c:ea:b4:
89:e9:65:68:1c:86:f3:64:79:68:62:68:f5:dc:d0:42:7a:ef:
37:4d:dc:01:00:f9:19:b3:6d:a4:b2:19:d3:5e:31:01:47:8f:
64:f8:5f:06:f5:09:26:bc:77:96:dd:fe:d3:4d:f5:b5:41:97:
4b:6d:12:be:8f:66:75:e2:65:e2:96:f2:cd:41:c9:42:5b:71:
7b:b3:a0:39:b6:f3:c4:7f:56:91:57:88:ee:da:f8:a2:16:22:
a7:e1:83:b7:c0:bf:88:c9:35:af:ed:31:a0:13:84:4c:d4:e5:
9e:52:f8:11:56:27:80:c9:3d:22:24:13:17:55:44:73:d9:34:
0a:94:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:56 2025 by rpki-client