Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/8IhOWpd8I4qCuNB3n2bpSQcTecg.roa
File: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (raw, json)
Hash identifier: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=
Subject key identifier: F0:88:4E:5A:97:7C:23:8A:82:B8:D0:77:9F:66:E9:49:07:13:79:C8
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 019683DF48C04BE647BE48781370246FBFCD
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/8IhOWpd8I4qCuNB3n2bpSQcTecg.roa
Signing time: Tue 29 Apr 2025 23:26:10 +0000
ROA not before: Tue 29 Apr 2025 23:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399989
IP address blocks: 195.64.120.0/24 maxlen: 24
195.64.121.0/24 maxlen: 24
195.64.122.0/24 maxlen: 24
195.64.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:df:48:c0:4b:e6:47:be:48:78:13:70:24:6f:bf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Apr 29 23:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0884e5a977c238a82b8d0779f66e949071379c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:70:ae:70:99:d2:8f:28:93:fc:2d:d5:ef:
60:07:95:ee:06:e0:31:f6:1c:d7:31:3b:66:ae:3b:
e0:54:a5:e1:80:6f:63:d8:8c:3e:45:07:f2:9f:7e:
f9:e1:e3:fe:0a:7e:5e:2a:ff:f1:3c:e6:3a:4f:64:
c5:e8:b5:24:98:6a:ff:a7:33:e2:1b:5f:56:62:05:
6c:ca:fd:d5:c7:a3:5a:e2:98:0d:75:97:d1:02:03:
56:56:1e:0e:66:ea:86:26:5c:09:68:08:b6:5c:c1:
46:a7:05:4a:4f:d2:64:80:40:a9:1a:53:cd:d1:1b:
e4:cf:ae:05:4b:3b:8f:c2:87:99:01:77:17:a0:5b:
82:ed:be:c5:2e:d2:50:bc:07:40:eb:30:5e:0b:e7:
c4:2f:b1:44:88:d5:5c:ce:d8:51:d4:35:e0:a8:b9:
2c:ab:82:60:12:82:bf:53:eb:7b:9c:34:07:43:e8:
7f:dd:d2:88:2d:78:cb:02:c8:6d:8b:1a:f3:4c:22:
dd:86:f9:92:73:5d:16:8b:62:04:aa:d9:9c:71:76:
99:28:ef:80:cd:5b:54:57:b6:95:66:8f:c9:5a:21:
4f:d3:3b:91:fb:37:dd:c9:32:a7:a2:04:f6:25:b2:
85:e0:cb:70:bb:76:ca:e7:aa:ba:6a:65:c0:dc:05:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:88:4E:5A:97:7C:23:8A:82:B8:D0:77:9F:66:E9:49:07:13:79:C8
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/8IhOWpd8I4qCuNB3n2bpSQcTecg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.120.0/22
Signature Algorithm: sha256WithRSAEncryption
27:ce:7f:41:20:36:a4:c0:75:e7:b2:5e:ac:bd:dc:04:51:37:
83:99:85:37:14:40:20:bf:75:de:e4:9b:dd:3f:ab:42:66:96:
28:e8:14:07:4c:0a:04:37:a9:03:05:3f:72:2c:63:2c:9c:e3:
f8:7c:6f:fa:e8:2b:58:b5:6c:c2:aa:65:6d:bd:a3:ed:34:71:
68:a9:05:57:c5:ab:cb:39:01:4b:fd:cc:bd:c6:44:fc:02:b7:
9b:09:81:c7:56:79:39:5c:ec:e0:84:1e:db:aa:9c:bd:67:6a:
7b:fb:39:49:44:fe:32:40:84:92:c4:01:75:a8:15:d0:1f:11:
e2:59:84:16:c6:27:be:bc:62:2d:e9:57:f8:c1:a9:ba:b2:1d:
c3:f0:1f:46:91:45:45:4c:9e:1d:bf:f1:2a:6a:30:06:56:9a:
4f:9c:19:0f:3d:f3:5e:7e:dc:17:4a:73:7e:5d:b7:4c:2e:4b:
cf:23:07:cd:2e:b5:b3:c5:0d:b9:d4:b3:21:37:76:06:2b:7d:
5e:e6:8f:fb:b4:b8:7b:f4:05:89:a5:d7:e3:b9:46:08:73:f6:
9d:99:22:08:da:eb:9b:08:f2:6a:59:f7:cc:ab:bc:37:83:c4:
39:4f:86:e8:24:f1:4f:95:f4:92:a1:a8:c9:64:2b:f8:37:15:
06:f2:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:39:22 2025 by rpki-client