Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa
File: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (raw, json)
Hash identifier: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=
Subject key identifier: F1:5C:3E:1E:0A:1B:DA:02:49:CC:5C:70:E0:DF:FB:92:7E:54:BF:65
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 0194221F9C38B3EB419A23044479C2AA0602
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197540
IP address blocks: 94.154.148.0/22 maxlen: 24
185.158.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9c:38:b3:eb:41:9a:23:04:44:79:c2:aa:06:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f15c3e1e0a1bda0249cc5c70e0dffb927e54bf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:ef:39:49:b6:88:f6:e8:0d:7c:3f:96:1b:
91:7b:5d:6e:58:9b:5f:e6:66:19:89:d0:bb:ec:47:
61:fd:9a:48:bb:8e:b6:c5:1a:1b:9e:bb:bd:02:a8:
bc:28:75:42:9d:27:c9:8b:7d:1b:f7:b7:54:d6:94:
4a:3e:c5:34:f0:74:ee:28:b5:2f:0f:ba:41:dc:46:
82:b3:2a:b3:be:c1:41:ad:6f:b4:68:c5:ae:36:5a:
ee:7f:a4:ac:93:36:4e:75:1a:2c:d8:54:7e:ad:19:
3d:e4:98:14:99:60:7c:7c:13:09:45:24:32:30:c8:
c2:e7:85:83:12:fd:98:14:3f:e1:61:37:83:ed:77:
f7:65:1c:84:27:db:43:2b:a2:64:27:dd:5a:fc:69:
62:a5:1c:37:44:ee:33:d5:21:a8:87:4f:76:e8:2b:
dc:20:80:e6:6c:84:01:33:e7:fc:27:4d:47:b3:59:
91:a9:24:f4:26:7c:12:c6:ac:a4:cf:63:65:a7:79:
05:63:51:b3:8b:4f:00:ab:44:8e:20:6e:2c:84:99:
1e:90:95:9f:c7:a4:d9:f7:38:26:2e:8a:ae:58:16:
e4:90:c8:a6:13:e4:e5:3a:f5:80:f3:59:be:55:13:
33:27:37:91:40:89:79:34:88:e9:78:05:50:01:1b:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5C:3E:1E:0A:1B:DA:02:49:CC:5C:70:E0:DF:FB:92:7E:54:BF:65
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.148.0/22
185.158.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:b9:62:e7:f9:10:1a:8f:7d:17:fa:15:fc:66:b7:e5:ef:df:
48:9e:5e:88:db:e7:45:09:f0:bd:fc:3f:fa:c0:62:52:21:2e:
a8:30:5c:59:73:34:6e:c6:3f:17:1c:2b:c2:99:c6:45:81:38:
bc:74:a9:67:f1:27:67:38:2c:f2:97:58:ea:3f:75:5d:9a:53:
3e:c8:ad:09:60:fc:9d:58:e4:d9:b6:cc:b6:01:31:4c:2a:c9:
37:cc:c6:cd:d5:d0:94:82:15:32:85:67:6e:c3:e2:58:b9:d1:
24:e8:86:97:42:72:1a:95:8d:c8:84:52:de:76:5c:50:8c:74:
12:c5:1c:a8:d1:d5:b0:e5:2f:96:78:6d:be:a4:6b:9a:ff:cc:
9f:f7:fd:2a:e9:1d:82:13:fc:ed:0e:94:f7:a6:ae:8b:af:30:
71:6e:68:e6:98:53:cf:cb:97:22:95:31:32:1b:40:e4:62:2b:
f3:04:1d:6c:cc:49:9d:a8:64:57:20:16:d3:20:d2:68:a4:7c:
e0:d8:4d:03:e3:6b:3b:8d:2a:24:a8:76:23:03:5d:6f:32:22:
c7:13:f2:67:41:08:db:96:2e:52:f2:e5:a8:7b:16:87:22:8c:
ee:a5:48:b2:8c:42:37:72:a3:dd:4f:1e:da:e9:06:4c:dc:54:
7b:68:a2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:44:19 2025 by rpki-client