Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/M8YwlBl4UsZFSGK22ajYHB1I9kk.roa
File: M8YwlBl4UsZFSGK22ajYHB1I9kk.roa (raw, json)
Hash identifier: NMhetTmMl7auiquiJXvinAOe9UpVWlWTrYgSxnLH8n8=
Subject key identifier: 33:C6:30:94:19:78:52:C6:45:48:62:B6:D9:A8:D8:1C:1D:48:F6:49
Certificate issuer: /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial: 019422FB5906E8942C93FC4FF47AC2DADDD4
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/M8YwlBl4UsZFSGK22ajYHB1I9kk.roa
Signing time: Wed 01 Jan 2025 17:48:05 +0000
ROA not before: Wed 01 Jan 2025 17:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201887
IP address blocks: 5.255.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:59:06:e8:94:2c:93:fc:4f:f4:7a:c2:da:dd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
Validity
Not Before: Jan 1 17:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33c63094197852c6454862b6d9a8d81c1d48f649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:70:1c:04:81:b8:9c:9b:23:82:49:81:a6:
74:c7:19:21:01:64:91:79:ec:c6:94:01:8a:9d:b5:
6c:92:b1:b2:ca:81:78:d2:f5:6e:c8:ef:21:28:77:
24:8d:fa:07:a1:46:7d:97:ef:ff:4d:f3:b0:2e:76:
0b:28:33:b7:2b:78:e5:c5:5e:6d:e4:0c:93:a4:6d:
cc:5e:e6:15:fd:ca:2f:6c:94:fc:e2:8d:8a:6b:36:
a5:22:72:04:5d:0f:a4:64:51:dc:9b:17:9f:03:c2:
a6:2d:17:ce:ec:ee:89:60:aa:be:4f:2f:d7:47:5f:
87:be:e5:44:0a:6d:43:0d:48:81:32:82:e5:6b:75:
c6:c2:ab:10:90:ab:32:3f:05:0a:c5:1c:79:e4:82:
cf:4c:e1:c4:d7:8d:28:b8:a2:85:2b:0e:0a:1a:a7:
4b:0d:16:4e:ee:17:54:a8:28:10:0e:e7:25:38:46:
3c:eb:c1:91:41:e4:7b:67:0c:10:9d:fb:77:47:f2:
b5:96:76:ae:08:5c:a4:1d:b8:72:cb:22:10:fb:c0:
10:1c:57:26:64:67:38:89:7e:e6:91:57:b1:95:44:
e1:13:f1:c6:12:18:b5:43:2c:13:03:64:7a:e7:8f:
30:1f:66:19:93:32:19:27:d6:e7:7a:05:fc:81:65:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C6:30:94:19:78:52:C6:45:48:62:B6:D9:A8:D8:1C:1D:48:F6:49
X509v3 Authority Key Identifier:
keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/M8YwlBl4UsZFSGK22ajYHB1I9kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.128.0/21
Signature Algorithm: sha256WithRSAEncryption
14:b2:7c:f6:0c:26:b0:01:7c:41:f0:62:5b:e1:bf:35:00:0c:
d9:95:28:a0:ac:c9:67:2a:88:04:8f:84:da:4e:de:f8:2f:92:
4d:24:1e:1b:ea:fc:eb:48:08:98:79:f3:e6:ac:db:9b:b0:15:
4b:3d:a8:22:53:1c:b3:c5:a4:41:d2:a4:0e:2a:fa:13:b8:e9:
45:7c:71:cf:e9:f9:fe:6c:e3:45:de:c4:90:b2:de:4c:05:02:
f7:ca:bc:ba:0d:92:bf:d7:08:16:fd:5e:30:2d:8b:06:01:6a:
df:d8:6d:5f:3a:52:9c:76:32:a9:eb:f9:21:43:f6:1a:0d:1e:
29:f3:d7:58:12:58:2b:87:5b:d6:4e:60:7a:51:f3:ff:7d:ea:
1f:4d:53:5e:65:fa:0a:6b:fd:81:16:9a:13:6b:ec:64:8f:53:
a1:50:a5:72:fd:42:8c:e2:0d:c8:c2:cc:04:28:18:ec:28:92:
e1:c7:72:5a:53:cb:e9:ab:65:e8:c1:e6:10:35:d9:52:1d:ad:
bf:98:cd:0a:fc:7c:df:0d:e7:ac:29:c5:f3:17:59:eb:eb:19:
53:d2:11:4f:f5:54:c6:73:bc:b1:10:c5:59:f7:21:b2:10:45:
ce:14:a4:ed:25:e3:46:0d:b7:9f:64:b3:f2:2c:67:2e:43:2a:
b2:1f:7b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:54 2025 by rpki-client