Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8f-sJlnQBg4w706PN6KpVDxhNpk.roa
File: 8f-sJlnQBg4w706PN6KpVDxhNpk.roa (raw, json)
Hash identifier: 10AYxkm352+/wNlPlPAmkvUDkBhT5UmtMnKhfEq09vQ=
Subject key identifier: F1:FF:AC:26:59:D0:06:0E:30:EF:4E:8F:37:A2:A9:54:3C:61:36:99
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427485C8823C2781EFF488C73CCE8E9F4
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8f-sJlnQBg4w706PN6KpVDxhNpk.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49769
IP address blocks: 192.165.156.0/24 maxlen: 24
193.235.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5c:88:23:c2:78:1e:ff:48:8c:73:cc:e8:e9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1ffac2659d0060e30ef4e8f37a2a9543c613699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f3:90:82:6c:3b:6d:31:94:28:ca:db:9b:ef:
8e:7e:9c:4e:88:f2:0d:2a:74:39:05:3d:a7:90:28:
6a:e9:46:10:16:41:1c:0c:24:cd:25:d6:a4:b9:33:
67:33:f7:25:5e:3a:a2:e8:16:74:0a:0a:51:ec:81:
20:15:fe:fb:19:af:24:d6:b2:ec:0c:23:77:a5:b3:
a7:f3:18:06:12:0b:b2:ef:68:d3:21:fd:9b:76:1c:
6b:d0:61:0a:50:19:0a:c1:d4:05:45:c2:7e:79:e0:
97:10:bb:97:d2:84:2c:70:f0:da:9d:c8:fa:b5:e7:
68:25:27:11:28:a2:94:d5:06:53:4a:1e:33:20:dd:
68:74:37:71:f9:40:99:d2:2d:bb:1c:2c:c7:4d:81:
e1:ec:65:e8:64:15:dd:75:71:92:12:87:25:6a:2b:
66:41:98:12:27:25:82:e8:16:e1:69:41:b2:8d:12:
88:eb:07:4d:d8:a5:01:b3:d0:8c:1a:94:76:d6:73:
33:66:d7:f5:88:4c:44:aa:a2:2c:d2:cc:d8:6a:8a:
a7:a3:62:08:8b:0f:43:51:3a:0f:e3:01:5b:d2:17:
af:bd:f1:e8:fe:a5:55:0d:d1:be:1b:05:e5:3c:d5:
47:27:3e:86:4b:95:43:db:ef:fe:5b:a5:1e:86:5f:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FF:AC:26:59:D0:06:0E:30:EF:4E:8F:37:A2:A9:54:3C:61:36:99
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8f-sJlnQBg4w706PN6KpVDxhNpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.156.0/24
193.235.2.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:75:10:af:b4:d1:c8:59:14:b6:49:79:53:78:25:c1:ea:67:
50:38:01:57:5e:1c:2a:b8:72:fa:50:08:18:46:89:36:19:84:
c3:ba:d5:6f:de:5c:44:29:03:88:93:56:c3:ce:30:f8:6a:a6:
8a:1d:0b:70:57:92:42:c9:5e:17:90:a0:3a:7e:b7:d5:58:42:
33:f1:28:a8:18:81:33:82:ce:43:c7:41:45:52:a0:f7:77:15:
7d:f2:b3:4b:fa:d2:4e:32:27:55:9e:f9:e3:42:45:44:c8:ec:
68:a2:64:a9:89:1e:4e:ac:78:de:90:b2:c6:77:86:b7:d3:85:
45:4d:6c:b0:e2:09:d3:f6:04:f2:7b:08:51:83:bf:be:5e:fa:
8a:4d:a8:71:47:47:98:dd:b7:50:fe:20:6b:f4:ea:b8:d1:25:
e7:19:f5:3a:5c:1b:2d:b5:ba:31:b7:a2:2e:c0:44:ff:1c:4d:
76:2b:01:4f:ea:fd:fd:a0:db:1f:c2:21:8e:bc:df:7d:5e:cf:
cc:ed:ad:ec:03:fe:45:20:e3:d8:29:cb:26:44:4a:c9:23:dd:
51:24:61:2b:99:ab:5d:ae:88:99:ae:1a:1d:37:8b:b6:fe:dd:
92:43:24:2a:d7:b0:6a:c1:f1:c5:8b:82:fc:f4:cc:99:ed:6d:
00:17:d9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:20 2025 by rpki-client