Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/S8o_O7bWlN_dw6Lg8CuwZ8LoUHc.roa
File: S8o_O7bWlN_dw6Lg8CuwZ8LoUHc.roa (raw, json)
Hash identifier: jCRliwE7M56nachVgLavJu6eAn/WCFjPFVilXX1EXTs=
Subject key identifier: 4B:CA:3F:3B:B6:D6:94:DF:DD:C3:A2:E0:F0:2B:B0:67:C2:E8:50:77
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 0194258F3861B759BC2E118638B8E4B33D5F
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/S8o_O7bWlN_dw6Lg8CuwZ8LoUHc.roa
Signing time: Thu 02 Jan 2025 05:48:50 +0000
ROA not before: Thu 02 Jan 2025 05:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200020
IP address blocks: 185.102.24.0/23 maxlen: 23
185.102.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:38:61:b7:59:bc:2e:11:86:38:b8:e4:b3:3d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Jan 2 05:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bca3f3bb6d694dfddc3a2e0f02bb067c2e85077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:a0:f1:b7:d6:79:ae:fe:09:03:07:2f:cf:
f8:3f:b3:46:37:b4:ef:71:03:f7:67:10:5b:5b:71:
ce:22:46:13:e6:97:a8:98:b4:08:2d:22:34:aa:a7:
40:9e:e3:a8:81:69:f7:66:b3:b2:60:47:86:f0:38:
47:26:68:45:39:a3:82:c8:48:50:84:8b:f6:c9:7f:
fd:88:c0:b3:ef:ff:2b:ee:d6:ee:14:e5:a4:d2:98:
de:2b:a0:08:67:d7:ae:16:56:f4:67:ef:0a:4d:a7:
26:95:40:97:34:a2:b3:f8:9f:4e:21:dc:15:96:c1:
e1:a8:94:d7:2a:fe:2a:b3:93:bc:1e:2e:49:47:c9:
0a:a4:b7:91:d9:53:ba:79:b6:c8:46:b0:90:69:81:
51:0e:40:33:09:71:bd:05:d1:5b:c8:d4:00:3f:a5:
9f:a7:76:7f:ff:82:ce:f1:c0:e8:df:29:d7:5d:56:
b0:d3:05:ee:20:5f:83:55:f9:06:64:a9:7c:7b:52:
1e:30:68:c9:b6:9e:74:57:61:24:75:8e:53:ef:44:
e0:8e:20:3c:22:64:8e:f2:e7:75:2d:51:aa:8b:fa:
37:88:29:ee:6b:13:3c:d4:b7:02:5d:26:d6:20:0d:
85:26:6f:6f:34:46:ee:7e:59:2c:78:33:9c:f6:fe:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CA:3F:3B:B6:D6:94:DF:DD:C3:A2:E0:F0:2B:B0:67:C2:E8:50:77
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/S8o_O7bWlN_dw6Lg8CuwZ8LoUHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.24.0-185.102.26.255
Signature Algorithm: sha256WithRSAEncryption
b9:b8:a6:41:b7:16:94:3a:77:f3:e1:c4:43:c9:e7:1b:5f:5b:
80:6f:5d:83:96:7d:42:01:45:47:4b:e8:60:d6:ba:ab:26:14:
24:4f:51:42:27:43:fa:fe:c2:8d:da:48:81:1f:02:01:d9:80:
72:f2:a4:c5:4d:f6:5c:ab:a1:ff:de:cf:df:88:76:b1:ce:73:
97:0b:ec:5c:fc:86:37:db:08:f5:f9:eb:58:21:4a:01:e6:fd:
79:d0:08:f1:2f:c3:8e:ba:1a:40:7a:30:31:42:dc:f5:46:f7:
ca:67:57:47:94:ce:66:73:c4:15:64:e3:b0:35:1c:ef:0c:e4:
0a:02:2a:e9:7b:04:1f:28:1a:2a:c6:85:25:01:a3:47:67:1b:
22:78:05:8e:d4:46:6f:86:f7:98:e6:3f:c4:ba:fa:9a:44:7c:
07:3d:79:3e:77:f8:a2:40:32:c0:97:27:40:01:f5:04:d0:b5:
d3:b3:77:83:01:75:dc:1a:37:b3:b0:cc:df:e5:55:88:4f:1b:
9e:98:31:a9:a2:c6:da:3d:26:16:d5:13:52:6e:2f:6a:fb:a1:
26:44:7c:1e:d3:a9:88:17:a7:ea:70:4f:6d:c0:40:55:bd:9d:
7d:d1:67:06:2c:d3:e7:82:0e:ae:f6:97:d0:94:4d:39:db:44:
26:14:c3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:44 2025 by rpki-client