Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0XL8hzFQZ7kx9h0513gitUONy7w.roa
File: 0XL8hzFQZ7kx9h0513gitUONy7w.roa (raw, json)
Hash identifier: jNTaa618jAEAhoM0c1I85gWLR8Qe9RJCn9tuco9rEM8=
Subject key identifier: D1:72:FC:87:31:50:67:B9:31:F6:1D:39:D7:78:22:B5:43:8D:CB:BC
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CAC5B22B5AD520078CC8AB286A5EA
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0XL8hzFQZ7kx9h0513gitUONy7w.roa
Signing time: Wed 01 Jan 2025 01:48:20 +0000
ROA not before: Wed 01 Jan 2025 01:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48990
IP address blocks: 185.210.88.0/22 maxlen: 24
185.235.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:ac:5b:22:b5:ad:52:00:78:cc:8a:b2:86:a5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d172fc87315067b931f61d39d77822b5438dcbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:78:13:bd:e6:4b:54:9a:36:4f:55:47:ba:71:
12:eb:29:75:4c:a5:58:90:ed:f0:d1:c3:07:23:65:
f6:83:21:76:91:be:ad:af:1c:2a:9f:69:59:fb:22:
74:83:ce:19:df:f3:97:af:b1:7f:90:45:db:e1:ff:
64:ba:53:54:03:30:7e:3d:ae:a2:81:fc:34:06:86:
8f:6f:46:7e:f0:99:00:fb:83:f8:05:6b:24:e7:33:
31:d6:5b:b8:5a:b4:db:f9:32:bf:02:64:fc:53:e0:
15:2f:65:5d:bd:d2:02:75:fb:24:5e:59:2f:b3:e3:
a6:31:35:f3:f6:fc:db:3d:fc:1b:c4:e6:7d:4c:09:
84:08:b9:8d:9b:8d:be:5a:01:6e:8e:b0:fa:72:44:
79:37:80:66:ca:00:c3:aa:0b:7f:c3:71:47:33:e0:
64:3c:0d:ee:8e:2b:a5:0f:6b:dc:db:91:b5:b8:01:
41:b2:04:28:ca:e8:a2:9f:94:26:ee:37:30:f5:ff:
06:da:d5:2f:9e:71:7a:84:af:41:da:02:a1:ae:ea:
fe:92:2a:19:93:68:6f:f5:a6:a3:bc:48:65:51:97:
32:0c:fc:07:ee:1f:ff:56:74:5e:3f:8c:44:5e:89:
3c:b3:5a:9d:46:84:90:d8:41:21:63:a8:3b:bc:5b:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:72:FC:87:31:50:67:B9:31:F6:1D:39:D7:78:22:B5:43:8D:CB:BC
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0XL8hzFQZ7kx9h0513gitUONy7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.88.0/22
185.235.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:36:0f:92:69:80:42:95:9a:c4:3c:cb:0b:11:c8:cf:79:fc:
5f:f5:4b:55:9c:ce:c7:c9:d1:de:2a:ed:bd:5c:78:09:42:87:
47:88:53:03:91:fa:0c:0b:dd:97:13:8a:93:4e:c4:96:0f:41:
24:0e:6c:0b:c1:9b:6d:f2:7d:7a:c0:70:80:53:25:82:9d:92:
a9:d3:79:f1:de:1a:77:87:3b:b4:32:14:73:77:56:1a:87:bb:
0b:16:3c:6f:a2:eb:8f:7a:fe:fc:e2:fc:54:b9:80:8f:50:58:
af:4c:73:bd:c0:f3:e8:c0:9c:a6:df:26:35:86:1f:cb:9f:63:
55:ac:93:0b:96:6c:9f:6b:86:c3:cd:03:4b:57:d7:13:ef:db:
a2:39:f8:3a:ba:dd:9c:33:e0:61:a2:8b:2f:41:07:49:2a:e2:
62:a8:f0:14:37:72:e0:20:0d:80:c5:9b:d5:62:f4:4b:e8:91:
73:9a:33:18:b1:ec:ad:d5:12:d1:4e:6e:06:94:12:39:e5:05:
84:3b:5f:f5:33:82:be:97:91:18:3a:92:e5:c7:b8:ac:9e:74:
66:12:74:17:ee:85:94:b1:b0:d6:1c:e2:8a:37:fd:4e:3e:f1:
c7:eb:41:53:76:f7:fa:08:35:f9:a8:32:d9:c0:55:f2:c7:a8:
bb:62:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:41:35 2025 by rpki-client