Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/8uFEs8KT2lHNTf9FsmJqqvY7o28.roa
File: 8uFEs8KT2lHNTf9FsmJqqvY7o28.roa (raw, json)
Hash identifier: vboc19xwSNPRyM8I2dQ1/VWhvxJAqCUk+Ws21D+P2qM=
Subject key identifier: F2:E1:44:B3:C2:93:DA:51:CD:4D:FF:45:B2:62:6A:AA:F6:3B:A3:6F
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 019424B3B35E97FE6AA55AC62B4AB9E3A0D2
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/8uFEs8KT2lHNTf9FsmJqqvY7o28.roa
Signing time: Thu 02 Jan 2025 01:49:04 +0000
ROA not before: Thu 02 Jan 2025 01:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208985
IP address blocks: 193.46.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b3:5e:97:fe:6a:a5:5a:c6:2b:4a:b9:e3:a0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2e144b3c293da51cd4dff45b2626aaaf63ba36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:c7:8d:0a:e4:6b:cd:69:95:a1:bb:38:d1:
c1:c5:4a:0e:62:be:18:63:46:30:37:d5:44:c1:b7:
ed:43:1a:e2:84:2f:e0:a8:64:b2:04:57:e0:5d:72:
20:61:d9:08:9f:4e:ab:5a:6f:ee:0f:61:7e:3a:dd:
4c:ff:31:df:4d:3a:03:14:e1:6f:d5:c9:d3:5f:2a:
7c:25:cf:b0:0e:17:fe:44:ef:11:a8:b2:0f:42:09:
a2:59:5e:9c:75:39:93:07:54:4f:4f:12:db:ba:11:
19:e9:0e:16:fb:69:8f:75:92:e6:69:9c:7a:8d:ee:
82:38:0e:02:c6:0e:5f:65:f2:63:2c:26:3b:16:48:
d9:a6:2d:e5:8c:b5:39:0f:ce:d3:83:99:e3:2b:f6:
c2:03:b5:50:c8:78:3b:4e:da:77:0a:4e:e4:0e:19:
27:64:46:fa:f6:38:b8:38:c2:63:dc:70:4f:18:70:
3c:ec:e2:26:23:1b:1a:e3:c1:6a:9c:f4:79:81:a5:
96:18:3f:ef:67:68:89:44:7a:cc:90:bd:28:27:84:
ad:ed:bb:4e:b4:63:9a:77:7c:73:ee:ea:2c:b1:3b:
02:00:e6:82:cf:4c:bd:07:69:4f:7c:75:f1:d1:43:
60:79:fd:a7:16:de:8d:66:97:3d:c6:2e:42:bc:62:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E1:44:B3:C2:93:DA:51:CD:4D:FF:45:B2:62:6A:AA:F6:3B:A3:6F
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/8uFEs8KT2lHNTf9FsmJqqvY7o28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.36.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:1c:cd:f0:cf:b0:c7:e1:39:c9:94:81:0c:c5:1a:05:d0:84:
19:d2:9b:5b:19:4a:c0:45:f8:e2:e1:0d:71:80:be:40:b9:b1:
69:2c:22:c1:84:35:7a:48:c0:64:e8:a9:d6:7f:f3:94:15:63:
69:61:99:fe:0e:e9:95:30:dd:36:e3:90:4f:d6:f3:a9:ed:6d:
60:89:fb:0f:36:fc:eb:f3:40:92:d0:42:9a:f2:af:9e:3d:c8:
f6:d6:87:6e:8d:86:ea:f1:f5:dd:9f:2b:16:c7:43:83:ea:61:
a5:ba:70:81:d8:6b:8a:77:04:63:09:44:98:30:36:6a:5c:80:
46:d9:e9:e1:9d:fb:08:b8:0c:9b:12:e2:07:c5:f2:ac:81:26:
05:e4:c6:16:4b:3d:ea:85:d8:9c:13:5f:95:19:35:a0:2b:37:
74:a9:20:7c:90:2b:fe:af:20:f7:bd:bc:f0:36:78:f2:3b:28:
ab:0c:02:c6:4f:41:38:79:cf:c5:ef:87:9c:b4:39:eb:a4:13:
d7:69:e8:a3:88:58:01:90:5c:a2:4e:db:5e:02:8e:55:e4:fb:
78:b7:2d:2c:72:37:e4:43:e9:1d:86:82:20:ec:63:51:b5:ec:
49:e9:de:d0:aa:1f:97:36:02:5e:b0:ca:cd:12:11:ac:9d:f1:
ce:21:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:27 2025 by rpki-client