Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa
File: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (raw, json)
Hash identifier: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=
Subject key identifier: F0:14:8D:39:8C:95:0C:56:71:74:AE:93:73:1B:F0:DB:68:8A:E2:6F
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B625827A474F93561D1243119132A
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa
Signing time: Thu 02 Jan 2025 09:49:19 +0000
ROA not before: Thu 02 Jan 2025 09:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200024
IP address blocks: 87.246.25.0/24 maxlen: 24
87.246.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:62:58:27:a4:74:f9:35:61:d1:24:31:19:13:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0148d398c950c567174ae93731bf0db688ae26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:e5:33:cc:db:fa:0b:96:e8:4a:43:21:a9:
a8:ad:79:9a:87:56:0b:56:22:75:f3:0b:f2:ca:06:
88:b4:56:7f:20:84:69:9f:c6:24:ce:2c:43:15:ee:
73:a7:62:79:20:61:63:d2:89:21:6a:11:70:fd:8f:
d8:bb:02:98:84:79:d7:06:b2:67:bf:53:8c:f7:8d:
65:5d:0f:f8:bf:96:3c:9d:cf:a4:b0:be:79:18:22:
51:d2:2d:e3:32:45:62:9a:23:e5:82:85:33:08:ed:
00:24:97:c5:43:b0:a4:44:32:a3:b2:7a:74:13:b9:
87:61:7d:81:d0:48:4c:e0:78:a4:73:45:90:80:c3:
24:a4:58:ab:f6:ba:76:56:fd:08:77:f7:10:5c:2b:
65:93:cd:77:fc:b6:fd:71:58:77:00:9f:c4:c6:9c:
7d:4d:d3:de:d7:6b:cc:a9:d7:9b:c8:ba:dd:66:14:
68:e5:3a:31:64:01:41:16:f3:16:39:50:5b:b3:c9:
f3:90:d3:95:91:f6:c9:e1:b1:e1:8c:a5:0c:7d:e2:
8a:0f:64:35:e6:8f:d6:db:0d:ea:99:2a:cc:5c:a2:
69:66:a2:b2:0c:d3:11:30:f3:20:72:a9:27:31:ef:
88:af:5b:13:a6:dd:ba:17:c6:7f:c0:70:33:18:33:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:14:8D:39:8C:95:0C:56:71:74:AE:93:73:1B:F0:DB:68:8A:E2:6F
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.25.0-87.246.26.255
Signature Algorithm: sha256WithRSAEncryption
6a:2d:d5:00:0c:96:ae:f6:b3:7e:0f:1f:b7:89:52:73:32:80:
9d:5e:1d:eb:fc:ef:c8:06:8b:ec:ab:3a:94:0a:de:2d:2c:65:
eb:87:ea:ed:60:e9:de:9e:10:6c:eb:3c:13:6c:dd:b4:a2:0d:
d7:40:aa:b1:82:a2:24:7d:48:80:47:c0:43:85:60:65:5a:3b:
08:90:a4:9a:4e:5a:f6:e2:12:0e:a4:2d:d6:96:34:4e:9b:54:
c4:ea:f0:3c:37:93:3a:fa:a1:a1:12:7d:28:2a:40:42:f9:d6:
63:b8:c8:03:58:0a:6b:12:f3:56:38:b9:e2:5b:9c:d4:02:89:
b7:85:59:fe:be:6c:f5:67:62:16:b0:33:2a:e2:bd:9f:45:18:
50:57:fd:53:3b:1b:92:4a:9f:f3:88:63:d2:30:80:78:97:dc:
ed:6c:47:11:35:7b:e2:82:a9:a1:4d:b3:a8:40:4d:8a:26:65:
34:ce:12:b3:cd:08:80:1d:5c:06:f3:9d:e9:91:1d:8d:31:5b:
93:19:fc:3c:62:a3:14:a5:83:19:5e:bb:2f:16:53:08:0b:20:
a5:f9:0c:7d:db:24:a7:ef:8a:48:93:56:69:63:00:6b:c3:c6:
46:5e:f1:bd:bc:e5:0c:ec:11:a4:6d:46:35:3e:c7:97:28:f8:
fa:21:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:37 2025 by rpki-client