Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa
File: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (raw, json)
Hash identifier: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=
Subject key identifier: F2:9E:04:09:2F:B4:3E:21:05:42:75:B4:CE:03:D3:5E:35:02:34:76
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 019424457AFC60A1C462E1007BC742BE6F78
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12874
IP address blocks: 185.139.48.0/24 maxlen: 24
185.139.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7a:fc:60:a1:c4:62:e1:00:7b:c7:42:be:6f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f29e04092fb43e21054275b4ce03d35e35023476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:34:b1:6f:af:b3:10:1a:28:a3:9e:6c:36:
2d:bf:8b:9d:ca:b0:a9:b6:a2:50:56:f5:85:cd:c5:
3b:0c:f5:55:07:a2:d7:d6:47:1c:32:e4:a3:d4:8d:
f2:3f:32:be:e9:05:29:11:32:c2:0d:a1:2f:bf:45:
9a:11:b5:8a:60:91:55:25:a7:cf:dd:00:f5:6d:6f:
1d:65:7b:4b:31:2d:07:6a:ab:b5:94:87:fd:b7:a5:
b4:61:f8:61:89:f1:96:11:f4:31:96:5a:59:57:f2:
23:c7:9b:c0:71:ee:e1:c4:4e:f1:f5:76:b7:7e:eb:
ba:a6:ac:b2:f9:28:8a:6c:f2:51:b0:de:74:93:29:
f8:31:dd:07:c4:ff:78:ec:70:6e:b1:ef:fa:68:df:
9d:81:bc:82:d6:33:2e:92:48:2c:ad:1a:2e:1d:9a:
c3:98:c9:45:bf:87:61:7f:ec:e5:dc:41:49:ce:0b:
b3:5a:9a:2a:cc:75:35:d1:1f:10:5b:0d:22:99:71:
5b:e5:3c:b8:5c:28:c3:4c:28:66:00:18:8c:a3:bf:
0c:1d:78:01:ea:c9:49:2b:78:5a:8a:8a:75:af:30:
72:7f:11:d8:d8:e1:86:d5:3a:73:8c:93:42:0a:24:
b3:47:84:75:41:de:e2:f7:75:30:a2:f6:e4:4d:5f:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9E:04:09:2F:B4:3E:21:05:42:75:B4:CE:03:D3:5E:35:02:34:76
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.48.0/23
Signature Algorithm: sha256WithRSAEncryption
62:ee:07:5d:83:aa:d4:3b:85:38:cf:90:1b:98:a8:27:1d:b4:
8a:8b:3b:3b:67:ce:65:cf:63:fd:86:e5:8c:e5:35:71:28:22:
a5:1d:da:ca:75:4a:c5:b4:5e:27:89:d1:d0:a2:f9:9e:00:03:
ee:50:de:4b:c4:c2:ed:8f:69:f2:43:d6:a1:0c:52:96:67:4f:
98:f1:32:ad:93:08:b1:cb:38:b6:32:e7:f2:01:b7:4a:76:bf:
bd:4a:71:5b:b4:db:14:f0:89:80:2f:f3:01:52:ca:c2:f5:0d:
97:c2:22:54:a6:fc:5f:3c:99:0e:95:1a:61:7b:ee:e7:19:e7:
fc:01:e0:5e:24:c2:10:e0:83:f5:69:8e:96:ac:44:d4:89:8b:
72:49:bd:01:51:46:27:8e:9c:93:1a:45:c1:3e:87:75:82:59:
11:d2:16:4e:4a:9d:8d:54:3d:71:b1:83:ed:5e:8f:0d:56:dd:
0c:11:1e:2e:78:02:e9:52:c8:e9:5d:cd:f0:2f:3d:f4:c1:ca:
e8:6e:29:f1:38:71:04:00:9b:9b:3f:82:c7:b4:62:f2:0e:25:
19:32:d7:66:24:5c:a2:e1:87:1c:cf:a7:ed:1c:7e:97:9d:5b:
e5:d9:f1:c2:02:d5:9a:fb:96:e0:08:00:11:ab:01:d2:3e:ed:
38:58:14:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:36:57 2025 by rpki-client