Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/l_d8GmTWs7fC-DqkKIN-YYLDZHQ.roa
File: l_d8GmTWs7fC-DqkKIN-YYLDZHQ.roa (raw, json)
Hash identifier: bn8+7DUFYeBX/KvUpOKKsXGjyr0Z1jGCfiXQ85NTHVY=
Subject key identifier: 97:F7:7C:1A:64:D6:B3:B7:C2:F8:3A:A4:28:83:7E:61:82:C3:64:74
Certificate issuer: /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial: 01943B782CC5CB6C99936695D1669AC95220
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/l_d8GmTWs7fC-DqkKIN-YYLDZHQ.roa
Signing time: Mon 06 Jan 2025 11:55:18 +0000
ROA not before: Mon 06 Jan 2025 11:55:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.157.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:78:2c:c5:cb:6c:99:93:66:95:d1:66:9a:c9:52:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
Validity
Not Before: Jan 6 11:55:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97f77c1a64d6b3b7c2f83aa428837e6182c36474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:43:11:89:09:81:5a:61:30:cd:95:e0:4e:
f2:b9:cd:e5:eb:e3:7f:a4:8b:db:60:4e:54:19:50:
bf:7e:fd:14:a7:40:d1:95:88:33:c1:aa:cf:a8:2e:
63:9b:72:98:ed:07:81:ab:c6:e9:61:05:67:f5:bb:
2f:b1:67:85:a5:8c:26:7b:87:62:9d:62:6f:77:13:
e5:c7:4f:41:a6:1e:2e:06:25:00:c1:7b:cf:cf:84:
ae:38:1f:6d:ad:8b:7a:a4:9f:04:73:72:05:f5:4d:
ec:62:69:81:d8:74:da:e2:82:ba:eb:ed:a2:55:04:
88:4a:e1:f1:c9:ab:85:d9:b1:9d:1a:ee:dd:00:a5:
00:b3:c0:7c:6a:48:7f:c6:5a:90:96:c5:12:59:72:
7b:2f:4e:8a:d0:9d:77:c6:1e:d6:3a:4d:4a:65:f5:
9e:58:74:49:c1:1c:69:51:7c:ab:81:4e:39:e7:03:
21:7a:7e:af:bc:8e:b4:c0:c1:46:34:3b:6b:be:51:
4e:df:73:ca:6a:f4:87:9d:de:c2:30:b9:50:29:6e:
5d:f2:78:15:a1:76:38:e8:f5:95:38:97:96:0d:6c:
52:f0:b2:23:57:22:b7:f9:6f:5c:36:e2:89:f7:b3:
b1:aa:5e:24:56:76:1a:c3:fa:86:07:bc:2c:c5:5e:
72:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F7:7C:1A:64:D6:B3:B7:C2:F8:3A:A4:28:83:7E:61:82:C3:64:74
X509v3 Authority Key Identifier:
keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/l_d8GmTWs7fC-DqkKIN-YYLDZHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:70:d1:54:0c:f2:d3:4d:45:bb:75:90:75:ff:bb:92:2e:06:
a3:c5:23:65:f0:2f:e5:5d:1f:a5:25:bd:09:29:8c:0b:99:1f:
57:11:17:e5:ad:7f:6f:10:f4:6c:be:79:5e:f2:04:8b:eb:0f:
fb:23:d3:0e:f7:b4:1d:c5:17:77:f9:d0:57:69:9f:7e:94:19:
be:5d:9e:3c:98:93:1e:82:50:8d:fa:b3:54:b0:7b:c0:b9:cd:
a0:8f:04:15:6d:6b:e6:12:e0:55:30:1d:89:3e:2a:bf:a8:c0:
e5:dd:dc:d9:42:96:33:14:a6:5d:96:03:7f:98:7a:af:d4:e0:
36:fa:20:ff:a8:25:04:df:99:12:ba:e7:2f:90:74:2e:1a:51:
10:ba:32:54:ba:8e:7b:67:ec:24:b6:8d:53:b6:19:1f:f7:50:
55:53:0d:b2:99:0d:ce:db:5b:cf:dc:ed:a9:36:b2:23:b9:93:
52:5a:e4:11:51:0a:de:fb:e0:9a:8d:74:e6:dd:5d:57:3b:30:
b9:98:93:8e:a0:22:78:b3:e2:39:1c:83:a6:a8:c4:38:26:bc:
ba:0a:1c:16:9e:1f:13:1f:d4:04:b8:06:26:f0:aa:3a:90:35:
22:8c:aa:ac:27:72:25:94:5f:11:16:4b:e6:08:3e:a9:8b:e1:
07:4f:9f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:47:08 2025 by rpki-client