Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/8aAYV7l49GD-ZGSs5sQoL9HgMkI.roa
File: 8aAYV7l49GD-ZGSs5sQoL9HgMkI.roa (raw, json)
Hash identifier: D9xl0kFJAWKH2xA+S2m21lyse1ulC1gNGZHY3WDEYOY=
Subject key identifier: F1:A0:18:57:B9:78:F4:60:FE:64:64:AC:E6:C4:28:2F:D1:E0:32:42
Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial: 019424B38AA5F6904115585D3225B46C4022
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/8aAYV7l49GD-ZGSs5sQoL9HgMkI.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203316
IP address blocks: 185.138.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8a:a5:f6:90:41:15:58:5d:32:25:b4:6c:40:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1a01857b978f460fe6464ace6c4282fd1e03242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:38:1d:c1:d3:cc:80:39:26:8a:f1:ec:3a:
ea:b5:c3:06:16:b3:93:17:8b:6a:6c:ac:d5:19:5d:
64:1a:d8:d3:99:54:55:47:63:4c:d8:74:9c:e0:55:
39:86:98:d3:e4:66:7f:af:d2:07:cc:38:e2:10:d4:
2e:68:f4:91:b1:86:f2:67:b7:14:93:c5:48:9e:00:
65:a4:a9:47:ad:19:ba:71:f3:ee:b8:bb:56:1e:50:
f8:98:88:02:a3:1a:f4:6c:d5:3d:bf:76:e5:6b:e1:
6e:13:6c:24:54:88:e4:95:8a:55:86:26:c6:63:cf:
98:e0:d3:c2:6d:75:1d:db:ef:51:8a:95:e3:62:8a:
0f:cf:e7:a6:83:78:16:c4:d2:db:49:4f:dc:31:1d:
57:19:a3:5f:60:20:cc:13:79:a3:52:4b:57:23:3d:
76:84:35:ac:04:5b:01:06:1b:9a:3e:6d:a0:49:1d:
0f:9a:53:54:a8:95:65:ed:98:27:77:17:b5:ab:80:
69:22:c5:4d:b9:3e:65:cb:cd:5f:df:44:2a:4c:c1:
2e:eb:89:b1:ec:61:27:68:53:ec:30:50:74:30:92:
c8:f6:65:71:25:f6:0f:b7:49:43:43:e4:c0:20:cb:
bd:93:2f:a4:a2:43:e8:42:8e:49:cd:e8:4c:6e:6f:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A0:18:57:B9:78:F4:60:FE:64:64:AC:E6:C4:28:2F:D1:E0:32:42
X509v3 Authority Key Identifier:
keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/8aAYV7l49GD-ZGSs5sQoL9HgMkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.212.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:59:ab:db:57:81:3c:10:46:bc:e7:a6:2a:59:3a:b1:2d:97:
68:80:a9:88:35:e6:cf:88:7a:69:ea:78:8b:88:15:ef:db:4f:
c5:90:fd:5e:07:d1:49:5b:cd:7e:51:bf:5a:fe:42:a5:45:ef:
b0:1b:83:81:cc:81:d9:2f:5e:72:ec:49:af:bc:d5:48:c1:a2:
24:54:ef:65:e8:ed:28:ba:d2:1f:86:44:80:7b:8c:0f:bf:f6:
0d:b9:bf:de:aa:f0:26:34:b2:35:4c:83:2c:d4:bb:35:be:25:
3f:59:7c:39:6b:bc:7c:5c:42:b3:b0:39:18:21:d1:62:c3:53:
6e:47:e9:df:5b:ec:24:1a:dd:a4:30:08:35:ed:5f:1d:cb:b5:
83:cd:5f:a3:23:bd:fc:75:13:e1:bd:5d:ac:95:0f:8b:d9:f6:
5b:28:06:cc:e6:34:89:0a:72:8c:16:50:61:79:94:91:48:0e:
19:b3:64:37:7a:fe:23:eb:85:1d:95:df:b8:bb:c7:9c:f2:bd:
f0:5e:36:27:66:9f:68:3d:f2:17:21:df:b0:ad:66:d8:d5:b0:
29:b3:27:ef:fc:f6:b8:59:97:f4:a3:93:21:9a:50:42:8b:de:
6e:31:8c:03:02:e0:85:62:4b:ab:0d:66:95:1d:34:e6:60:f5:
f5:4a:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:32:34 2025 by rpki-client