Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/8vBjC53BVW8zj4fBkE3UHTZwiNk.roa
File: 8vBjC53BVW8zj4fBkE3UHTZwiNk.roa (raw, json)
Hash identifier: 1PeNucpAjZUP2ujHYN11UYlssoeYcm9jeCslEET3UiI=
Subject key identifier: F2:F0:63:0B:9D:C1:55:6F:33:8F:87:C1:90:4D:D4:1D:36:70:88:D9
Certificate issuer: /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial: 01942521961655487C2465218AFB1A5C83B0
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/8vBjC53BVW8zj4fBkE3UHTZwiNk.roa
Signing time: Thu 02 Jan 2025 03:49:05 +0000
ROA not before: Thu 02 Jan 2025 03:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394354
IP address blocks: 185.159.196.0/24 maxlen: 24
185.159.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:96:16:55:48:7c:24:65:21:8a:fb:1a:5c:83:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Validity
Not Before: Jan 2 03:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2f0630b9dc1556f338f87c1904dd41d367088d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:34:e0:c0:c5:de:c4:44:a0:02:19:ab:7b:
fc:f7:ba:9a:38:f6:db:dd:a7:8c:60:2a:64:56:01:
c0:d1:a2:2d:5f:47:4e:e9:76:ef:88:d3:83:17:fa:
9d:b7:ba:04:cd:09:17:7c:93:12:b1:98:9e:5f:b1:
69:05:3f:66:88:13:7d:d7:ee:86:d7:6b:3c:5a:be:
64:29:0f:b5:78:a2:48:97:86:ce:b7:ed:97:a1:d9:
5a:56:41:54:5a:0e:48:27:d8:a0:f5:f8:e4:ed:a8:
1c:a6:f3:94:98:15:8c:7d:be:65:6e:79:78:d3:07:
5b:c4:f3:70:26:58:f2:ed:1a:3c:ab:a3:18:9f:75:
ba:91:a0:e1:3b:8a:8d:7c:f5:d9:78:bc:04:44:ff:
4b:66:49:08:d5:3d:25:14:aa:33:8c:b8:52:61:f0:
0b:f9:8b:09:9f:ff:8e:95:76:46:f5:d7:6e:de:7e:
1d:a6:7a:1f:75:2e:44:ef:01:e8:83:a1:4f:b2:9b:
66:5a:cc:c0:5d:cf:71:dc:a4:63:53:73:fc:d7:b6:
77:09:0c:52:d1:cf:31:c7:4b:81:54:82:dd:c4:84:
9a:cc:b0:98:13:76:c2:72:ee:68:01:27:38:5c:39:
af:e4:86:45:0a:ed:05:01:12:90:a9:c6:9c:06:8b:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F0:63:0B:9D:C1:55:6F:33:8F:87:C1:90:4D:D4:1D:36:70:88:D9
X509v3 Authority Key Identifier:
keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/8vBjC53BVW8zj4fBkE3UHTZwiNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.196.0/24
185.159.198.0/24
Signature Algorithm: sha256WithRSAEncryption
20:1d:88:99:6b:75:0a:95:cf:e9:e5:1f:3d:77:fe:b9:4c:a2:
0a:9b:3d:4d:ff:0e:17:e3:0d:f2:19:72:16:4d:b4:52:45:63:
ef:09:89:40:e9:f8:f3:21:2e:10:84:bd:8f:51:3c:dd:fd:2f:
20:e2:2e:20:77:53:78:1a:3b:74:e9:db:ab:40:8e:ad:cd:fe:
43:f9:89:9d:58:e0:98:7e:d5:56:37:db:27:45:82:90:03:b2:
bf:36:68:05:c1:f0:b0:4a:8b:b6:61:3a:fc:dc:97:08:ed:80:
7b:ce:16:d5:4a:2c:9d:1b:28:0e:e6:a6:15:4a:5a:d8:b4:55:
01:42:97:15:1a:b8:c2:dd:17:77:3b:9c:c7:dc:65:71:01:76:
ff:fc:93:3a:75:f7:44:a3:4a:c8:e9:7a:64:46:a4:f8:c5:9e:
a3:0c:7b:5c:3d:29:3e:9d:b1:6c:69:3e:a1:8a:7a:e0:f5:0a:
de:20:4e:68:5e:01:f1:3f:59:eb:aa:29:7e:b9:26:78:36:31:
26:80:b3:23:98:32:ef:c3:f2:48:6a:ac:eb:40:42:df:9b:c4:
f4:66:04:8d:4b:63:ad:43:9c:ff:e4:75:af:25:68:63:70:16:
19:73:b8:a7:f2:2e:b0:9f:2e:32:f0:30:fc:e4:17:32:ef:91:
61:3e:14:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:21:37 2025 by rpki-client