Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/v8DtO9sFqeKg9oTGngfTpCtjaII.roa
File: v8DtO9sFqeKg9oTGngfTpCtjaII.roa (raw, json)
Hash identifier: JeKCa5d4cZjxM+nA63f6nRxZSxhVJ6hVpgcdWItAlHo=
Subject key identifier: BF:C0:ED:3B:DB:05:A9:E2:A0:F6:84:C6:9E:07:D3:A4:2B:63:68:82
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D661699C3D0CF13D2C4CF42E11749C
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/v8DtO9sFqeKg9oTGngfTpCtjaII.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211936
IP address blocks: 95.178.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:61:69:9c:3d:0c:f1:3d:2c:4c:f4:2e:11:74:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfc0ed3bdb05a9e2a0f684c69e07d3a42b636882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:72:44:6c:83:bf:6e:c1:eb:f0:e5:10:db:
35:0d:c9:c4:65:de:87:64:08:e4:62:4c:46:d4:38:
d0:88:fc:55:6f:21:18:5d:b3:57:75:10:c7:d3:fc:
c9:57:1e:d0:51:9f:74:8c:13:78:40:bf:b2:c1:78:
5c:a7:53:67:07:d6:6f:5b:3b:4e:85:66:a3:16:93:
bc:4a:e7:0c:d1:32:6f:72:35:84:04:23:e6:4b:cb:
3a:5f:6a:7f:ea:e4:bf:8e:df:8c:3d:ab:ea:3a:0b:
8b:3f:32:9e:97:2e:88:21:cf:9c:4f:cd:cc:b1:b2:
3a:94:82:b8:c7:e7:ad:e6:a4:46:4d:57:1a:a6:de:
5d:68:96:39:fb:6f:af:86:fc:20:f9:f7:0b:19:dc:
2e:b4:22:80:1a:4c:3a:0b:03:9a:9e:2f:d3:64:b9:
4a:1c:0f:f2:3a:6c:7c:fc:6a:bf:1f:9c:d5:16:8b:
37:58:45:e0:fd:d5:2d:16:1c:98:27:57:c5:a1:68:
36:30:eb:b7:54:6c:7e:a2:4a:5f:54:68:d1:e1:44:
e0:96:48:b8:26:a8:a6:aa:86:0b:e3:a6:18:32:8b:
64:ab:61:54:f1:79:1b:a9:01:cd:89:ce:3e:68:d3:
a4:40:8e:31:4f:0a:e8:07:4a:51:f4:9b:f8:e5:8f:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C0:ED:3B:DB:05:A9:E2:A0:F6:84:C6:9E:07:D3:A4:2B:63:68:82
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/v8DtO9sFqeKg9oTGngfTpCtjaII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.178.8.0/21
Signature Algorithm: sha256WithRSAEncryption
48:25:3d:14:46:66:1b:74:3a:51:f8:d5:49:0e:c3:57:16:28:
b6:29:4b:60:7e:5d:9a:5c:cb:fa:b7:52:b7:28:ac:d7:78:84:
e8:8e:0d:2a:61:d9:77:d1:53:a4:62:99:ac:ae:89:78:3e:8f:
ce:de:86:32:fc:79:56:55:da:11:86:31:43:cc:4d:56:b2:4c:
c5:dd:ee:a0:da:b2:6e:28:49:bc:f4:5e:35:b4:ca:0b:e8:07:
27:42:76:a9:2f:33:6c:f8:f1:70:81:5d:5b:dc:18:d8:0d:23:
00:85:5d:8c:a9:a4:ff:6e:c7:c5:01:62:66:de:a3:75:a3:e0:
0e:91:0b:db:cd:02:47:ac:84:81:fd:69:18:9f:b0:5c:2d:de:
52:6a:fd:49:60:d4:5f:84:65:d0:78:f1:17:37:ac:96:93:00:
28:f6:db:99:4d:ef:45:36:cd:d3:47:b2:16:9e:6c:7f:fd:67:
6c:ec:b6:af:f0:19:e5:a4:43:5e:d4:2b:e8:9b:81:02:32:4b:
4c:12:de:e6:90:f1:66:43:22:00:50:9c:f0:5c:f1:24:85:72:
2d:5f:c1:cc:21:92:9d:1e:dd:ca:fe:97:ea:08:6d:31:e2:b4:
f0:09:11:b0:24:e4:d5:a7:44:8b:5c:87:6d:34:ce:0a:38:ad:
e8:07:d5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:58:32 2025 by rpki-client