Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa
File: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (raw, json)
Hash identifier: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=
Subject key identifier: F2:CD:A5:75:7F:68:1C:7C:32:97:C7:D4:11:52:EA:84:3B:10:AA:EE
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 01941FFA2BD02D240F5F7E4B896C2AF516DA
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196932
IP address blocks: 178.255.136.0/21 maxlen: 24
185.192.200.0/22 maxlen: 24
2a03:40e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2b:d0:2d:24:0f:5f:7e:4b:89:6c:2a:f5:16:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2cda5757f681c7c3297c7d41152ea843b10aaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:51:1d:b7:85:88:2e:08:13:ad:52:23:af:
73:18:a3:98:57:94:b5:95:0d:28:8e:c3:9f:17:83:
fc:2c:19:f4:33:fb:23:3f:e0:a7:63:3f:fe:6c:d9:
c3:6f:b5:e5:90:36:60:c7:26:81:7c:d0:47:eb:7c:
06:34:f7:63:cb:e3:a4:5a:f1:e5:fa:4d:57:82:80:
78:9e:60:ef:19:94:d3:2f:07:ae:ce:e2:aa:db:30:
96:59:c4:ff:2d:40:cd:d2:23:f8:68:a6:59:4f:d2:
bd:95:aa:4d:f9:14:51:fe:4b:0a:2a:d6:46:9e:a8:
cf:2e:f9:bd:e5:7d:48:16:b6:4f:a3:ec:00:47:85:
45:18:80:5e:7e:cd:e7:e2:f2:9c:68:b1:e3:f7:ca:
54:31:bc:0c:43:7f:21:20:3d:5b:2c:d6:2d:5c:4d:
39:66:ae:56:ff:1d:f2:2c:a3:15:38:1d:49:86:06:
f5:f2:df:00:ce:e4:f5:92:51:5e:e3:b9:ad:12:c3:
e6:0b:82:5e:46:40:fc:4f:f1:c2:10:03:73:d5:74:
d9:e9:9c:d8:e8:f0:aa:ce:96:41:a3:b5:61:9f:4d:
21:c3:f3:39:0d:14:13:c5:47:eb:35:d2:b9:ae:63:
3e:51:b0:03:53:ae:04:6c:5a:a8:0b:89:df:ed:c0:
89:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CD:A5:75:7F:68:1C:7C:32:97:C7:D4:11:52:EA:84:3B:10:AA:EE
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.136.0/21
185.192.200.0/22
IPv6:
2a03:40e0::/32
Signature Algorithm: sha256WithRSAEncryption
03:31:a3:94:15:4a:8e:dd:66:5e:b8:a6:15:79:b9:45:f6:f1:
ad:51:b5:96:29:8b:3c:ab:c5:08:e2:34:2c:05:97:1b:e3:03:
78:0d:d6:17:55:7c:f2:ca:6c:2b:8c:a1:1d:02:49:0b:af:4b:
b7:d3:9a:09:d0:d6:72:65:f3:81:33:a7:d9:58:9e:32:be:12:
f8:e0:22:03:69:c2:d4:07:a2:26:4b:7f:e9:a9:c0:18:2f:28:
4d:9c:49:50:58:0e:f1:18:21:ac:1e:2f:75:62:7d:e4:a4:14:
02:a2:52:cd:10:38:63:05:ba:46:52:52:7a:ab:23:05:48:9c:
c2:cb:de:b1:84:b8:c5:2c:e0:de:b0:20:d6:95:c2:a9:cd:89:
4d:c5:76:7f:33:d5:49:62:b8:23:5b:3c:2d:c0:18:a2:bf:54:
31:f0:9a:a7:c9:16:65:36:6a:13:8a:1f:3d:00:a0:19:79:39:
bc:f1:e8:f4:0b:9f:5b:3f:46:0e:2b:0d:63:04:81:c6:d1:4e:
1f:38:4e:c5:c9:96:f0:f8:65:07:df:a2:22:18:15:54:e8:47:
3c:b9:06:93:48:d6:8c:d1:de:49:69:a1:6d:64:c9:04:03:2f:
74:9d:1c:db:de:17:53:dc:5e:6b:e9:31:26:49:c8:bc:a9:ae:
f3:85:1b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:51 2025 by rpki-client