Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa
File: 8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa (raw, json)
Hash identifier: QWa/HtnKYiYQsWevU25s3knaSRBSQ+SLuyEHZRqaj0Q=
Subject key identifier: F1:9B:70:AB:C1:5F:FA:32:5D:FE:C0:5F:DB:CB:3C:96:F4:3D:4A:A5
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 019426D9F2272B8F37000050F351D1A173A6
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9150
IP address blocks: 185.65.124.0/24 maxlen: 24
2a04:f840::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f2:27:2b:8f:37:00:00:50:f3:51:d1:a1:73:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f19b70abc15ffa325dfec05fdbcb3c96f43d4aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:ba:61:40:97:84:18:94:3c:5b:21:c4:31:
11:2d:2f:90:89:58:e8:8f:9f:81:d4:21:78:22:37:
87:7c:42:f1:76:4f:0e:2b:7e:cc:7d:a1:35:e0:24:
8d:c5:b1:e4:1a:a7:93:d4:c4:7d:16:dd:44:86:29:
1f:6b:b3:4e:e5:ee:33:dd:cb:66:05:5c:19:f5:72:
77:01:72:4d:29:16:7d:87:81:80:30:c4:6e:f3:90:
e0:3c:c1:22:06:fe:85:17:c1:0e:e9:02:68:ad:6f:
ca:bf:00:80:87:64:02:1d:ca:2a:83:45:81:d3:dc:
3d:ac:72:a6:85:6d:a9:07:45:ba:36:11:f4:87:4c:
ee:b8:9e:a5:33:82:36:de:5f:a3:65:09:62:59:77:
be:f4:c7:5d:b6:8f:00:10:58:71:2b:68:d8:e8:0e:
ed:d1:43:b4:98:a5:4a:11:29:36:5f:32:e7:fd:bb:
9b:ac:85:b5:5e:4c:b6:d5:de:83:4d:65:05:74:64:
98:b9:6f:ad:50:69:6b:b1:1c:20:e2:75:db:02:21:
e7:c2:6d:c6:ee:07:a6:f7:44:fc:13:f1:49:82:6a:
50:9c:19:42:db:d0:0f:aa:82:c8:f3:9b:7c:9f:e4:
c4:37:82:8b:59:07:a5:bd:cc:62:fa:a2:aa:e9:ef:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9B:70:AB:C1:5F:FA:32:5D:FE:C0:5F:DB:CB:3C:96:F4:3D:4A:A5
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.124.0/24
IPv6:
2a04:f840::/40
Signature Algorithm: sha256WithRSAEncryption
34:07:dd:66:79:28:b4:09:b5:4e:12:1a:38:d8:ba:e8:8b:bd:
eb:41:ff:9b:ca:32:bc:c8:a7:c7:52:b3:e5:17:39:7d:60:a9:
f8:52:f0:c1:14:25:47:f4:19:64:51:02:de:88:a4:8d:35:f8:
26:50:9a:54:fb:08:73:1e:0a:ed:10:7b:0a:55:02:73:e4:88:
ed:16:57:bc:9a:4c:fc:f5:49:7b:b9:dc:f7:2c:c1:c6:18:8e:
97:81:a9:33:1f:92:37:02:28:7e:25:8c:c0:0c:b7:91:83:20:
b9:36:4a:01:19:63:a2:86:69:2b:f3:0b:9f:48:60:e9:43:7c:
24:c3:5d:bd:3c:4b:9e:4c:5c:67:4f:01:14:89:e0:06:ef:80:
02:1c:a4:81:64:fc:27:8d:01:c4:e3:fc:ef:99:ba:c7:7e:dc:
a7:c4:ba:a0:ff:35:f6:7d:aa:17:c4:96:fe:5a:2b:6b:ba:6e:
ed:0f:6a:13:36:c2:ea:16:d5:0c:07:64:77:c5:b3:e1:31:09:
c7:12:64:c8:51:d1:c5:ec:2d:61:d9:24:bd:d3:6c:97:8c:a7:
f8:d1:0c:81:2c:dc:ab:e4:02:9a:80:93:14:a7:92:31:d2:15:
50:4e:4a:e9:36:c2:8f:44:b8:ff:53:98:35:bc:4d:30:05:6d:
b8:1e:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:23:46 2025 by rpki-client