Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/8S9ibO6esCTeLY2sD14WhmMZOvI.roa
File: 8S9ibO6esCTeLY2sD14WhmMZOvI.roa (raw, json)
Hash identifier: bmTNDF41Sq+c7Se/EWf8YA8iGIHNg20TI2zfC/lGrO0=
Subject key identifier: F1:2F:62:6C:EE:9E:B0:24:DE:2D:8D:AC:0F:5E:16:86:63:19:3A:F2
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 0194228E14040BC5D626245633B2C834861A
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/8S9ibO6esCTeLY2sD14WhmMZOvI.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53667
IP address blocks: 194.50.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:14:04:0b:c5:d6:26:24:56:33:b2:c8:34:86:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f12f626cee9eb024de2d8dac0f5e168663193af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:d1:85:e7:b6:46:cc:f4:8c:e8:83:60:4c:
f7:b5:2c:61:0b:a7:1b:f2:b3:f6:25:17:d6:46:ce:
50:08:b6:9e:0a:22:6b:82:da:1d:b8:0c:f5:dd:bc:
e9:d2:3a:f5:a4:b3:15:8e:12:4b:9d:19:f6:6e:4c:
4d:9a:29:9e:59:89:a8:e9:19:78:8a:da:e0:1c:c1:
67:04:b3:83:47:a0:21:d0:b8:b0:23:d2:b0:c9:fb:
3f:aa:1e:71:3b:bd:3b:c0:bd:dd:b1:ef:89:05:d4:
e2:06:88:3d:dc:25:84:59:63:2e:ed:05:cb:46:2a:
a1:69:29:cd:75:aa:40:a0:d5:0e:52:42:56:29:03:
bd:5c:3b:e4:61:15:81:4f:1c:c3:94:7d:18:f3:8c:
76:16:c2:f7:c7:26:15:dc:00:2d:6d:4b:10:01:3d:
80:80:50:8c:b3:08:a5:ca:f9:58:3c:32:0a:a6:9b:
a5:ff:93:13:3f:a0:b9:2c:6f:1c:38:08:5e:ff:5a:
1f:d9:df:91:60:f7:1f:f3:6c:dc:09:be:e1:87:7c:
81:97:e6:fb:93:d2:74:c4:c2:18:dd:89:b4:f9:e1:
62:a5:62:be:d5:97:f5:1a:6c:21:c6:9f:33:c5:23:
18:36:3c:33:14:b3:86:dc:2c:c4:29:f3:45:78:0a:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2F:62:6C:EE:9E:B0:24:DE:2D:8D:AC:0F:5E:16:86:63:19:3A:F2
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/8S9ibO6esCTeLY2sD14WhmMZOvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.197.0/24
Signature Algorithm: sha256WithRSAEncryption
44:6a:42:ed:94:a9:39:e5:fa:8f:e3:83:94:42:ae:ab:1d:34:
13:0d:b8:97:3b:13:ed:41:e4:f4:2e:64:1c:00:44:18:01:b7:
d8:82:a4:96:b5:b2:08:b8:63:23:be:dc:3b:07:ea:31:96:96:
c3:aa:e2:05:1e:7f:27:c0:3b:4a:fe:ad:65:a1:0b:0f:01:d3:
8a:ab:49:d7:5d:b1:2e:be:d0:3f:10:37:43:70:32:fa:f9:14:
b0:15:d5:a2:e7:70:ee:37:56:88:a0:3f:86:ac:60:38:6e:e1:
44:46:bf:51:d4:b2:1d:21:0f:88:b5:fe:f4:32:83:df:30:6e:
c6:b6:a8:88:b5:ee:a1:53:f5:ea:bb:0d:af:73:55:21:cf:4e:
9c:a7:c2:96:83:47:5e:79:cc:fd:95:d0:49:01:78:8e:2d:2f:
2b:c8:a0:b6:ae:b4:d2:05:af:46:24:3a:ec:86:f0:ed:0d:53:
95:53:36:d6:f1:21:a7:46:29:ee:2b:b9:c8:c6:89:29:3d:a2:
79:73:e8:3b:c4:51:74:1a:be:0b:a9:f3:37:f4:75:72:d0:d3:
72:dd:14:5b:0b:65:d7:1e:03:0d:f3:91:d3:0d:5d:1c:49:9e:
af:a0:84:b8:d8:35:b0:22:55:38:9c:83:3c:ab:c3:40:01:de:
9a:eb:6d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:21 2025 by rpki-client