Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8Da44eK0K1wZ0nOgg2xpcf3qLTY.roa
File: 8Da44eK0K1wZ0nOgg2xpcf3qLTY.roa (raw, json)
Hash identifier: 8ZIp0yXG1qs8mqOR3LAU/vVPWpWFpGxXWI7W7SeVxTs=
Subject key identifier: F0:36:B8:E1:E2:B4:2B:5C:19:D2:73:A0:83:6C:69:71:FD:EA:2D:36
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019681A5D35A39B314ACA536432E3679A653
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8Da44eK0K1wZ0nOgg2xpcf3qLTY.roa
Signing time: Tue 29 Apr 2025 13:04:10 +0000
ROA not before: Tue 29 Apr 2025 13:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 188.64.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a5:d3:5a:39:b3:14:ac:a5:36:43:2e:36:79:a6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Apr 29 13:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f036b8e1e2b42b5c19d273a0836c6971fdea2d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:35:c8:94:e6:47:6d:0f:94:e4:c0:61:d0:36:
19:37:e8:4a:34:91:ab:96:1e:da:b3:d5:7e:a1:17:
12:84:c4:d1:fb:ab:9c:cd:6d:2a:57:57:01:08:60:
5a:c9:92:89:3f:f3:8e:0f:07:71:34:6b:42:74:e7:
1a:31:40:c6:d4:02:5e:1e:c2:40:50:43:b2:af:a5:
26:8b:3a:9e:40:15:65:37:61:67:c9:11:e4:26:1b:
1c:18:bb:d8:0c:09:b4:80:ca:e4:bf:26:e8:11:2c:
d6:c1:8c:04:83:44:6a:da:7b:76:25:a3:b2:16:24:
d7:1d:ab:11:da:b6:c6:ae:ea:3c:76:b6:8f:35:00:
d8:ef:e4:c3:9f:50:f8:ff:b9:17:b1:7c:cd:66:b6:
7c:47:26:2c:38:80:0b:70:b9:ad:bb:4a:12:5e:c2:
5b:97:85:5b:2d:6e:f2:19:66:9d:6e:58:af:35:04:
bc:72:c2:c6:4e:21:85:7f:29:0f:f5:ba:fd:f1:17:
4d:38:2f:5d:e4:42:d2:d1:dd:f3:ff:e9:79:a1:77:
c9:f5:61:df:5a:d0:18:3a:d2:94:d0:2f:e3:b5:c1:
69:77:f5:82:89:bc:cf:51:bc:30:38:e6:f3:a3:90:
2d:b7:45:4b:11:8e:2c:b2:c4:53:1e:f2:4b:92:47:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:36:B8:E1:E2:B4:2B:5C:19:D2:73:A0:83:6C:69:71:FD:EA:2D:36
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8Da44eK0K1wZ0nOgg2xpcf3qLTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.176.0/22
Signature Algorithm: sha256WithRSAEncryption
11:e1:eb:70:94:ed:2d:8a:19:45:7a:63:33:18:06:23:e7:0d:
05:61:42:6d:62:fd:98:6f:0d:03:8a:7b:38:97:b9:af:97:5b:
8e:56:7e:51:0d:4f:05:22:8a:c4:3f:62:31:66:bf:de:68:0d:
59:ce:e1:cf:60:59:88:45:04:6b:97:53:58:ca:c4:4a:df:1f:
2d:4d:77:55:3f:c7:31:fc:75:9a:09:ff:07:91:3f:3a:29:f8:
15:d7:69:e1:6e:3e:86:9a:4b:28:13:44:e8:64:df:06:a9:99:
3c:b6:fe:e2:10:aa:17:8c:ca:cf:8b:8b:3f:26:bb:02:76:7f:
da:b9:01:ca:44:74:1b:9c:78:b6:40:20:9e:8d:60:e3:92:8c:
41:ca:09:bd:c2:63:80:9f:ec:ee:c8:86:a8:99:ac:4f:a2:66:
d6:e1:ff:7d:7f:19:7b:90:36:5f:bf:75:28:20:96:1b:31:9a:
ca:00:2b:53:9c:b7:7e:c0:c0:fb:ad:1e:cb:fd:df:19:b7:1e:
3e:d3:a1:dc:8d:c4:09:65:1b:6f:77:b8:79:9f:0d:b0:17:02:
7b:11:d0:42:66:ed:45:1e:26:8f:4a:43:78:8d:f0:d5:e5:cd:
08:60:2a:f8:dc:55:71:af:78:52:2f:ca:62:68:f4:2a:01:bf:
2b:18:c8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:53:02 2025 by rpki-client