Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/8rC8qdt5a2u-NnBIW_WkKPveb4s.roa
File: 8rC8qdt5a2u-NnBIW_WkKPveb4s.roa (raw, json)
Hash identifier: nr8axlZxRzfVtcHW0piztPPriufN5wxeVAb83AKIYoE=
Subject key identifier: F2:B0:BC:A9:DB:79:6B:6B:BE:36:70:48:5B:F5:A4:28:FB:DE:6F:8B
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 0196906AF3C3031D3E4DE79FBADEC2C2CD87
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/8rC8qdt5a2u-NnBIW_WkKPveb4s.roa
Signing time: Fri 02 May 2025 09:54:10 +0000
ROA not before: Fri 02 May 2025 09:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42724
IP address blocks: 45.155.127.0/24 maxlen: 24
193.3.167.0/24 maxlen: 24
194.36.84.0/24 maxlen: 24
194.36.86.0/24 maxlen: 24
194.36.87.0/24 maxlen: 24
194.62.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:6a:f3:c3:03:1d:3e:4d:e7:9f:ba:de:c2:c2:cd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: May 2 09:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2b0bca9db796b6bbe3670485bf5a428fbde6f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:b2:f6:73:e6:17:a3:3c:ef:b3:74:9b:f9:
9a:28:c4:40:40:30:eb:c4:16:37:57:f7:3e:b9:ab:
68:52:e5:b3:59:a2:27:ad:07:55:80:71:6e:31:63:
bb:9c:2d:cd:e1:49:f9:3e:df:90:21:1c:e3:e7:a5:
31:42:a2:7e:7b:27:99:e5:b1:f4:bb:0b:a5:01:52:
34:cd:51:03:d9:02:63:3d:ab:45:2b:c9:05:d6:4e:
a4:79:8b:c9:79:d5:ee:44:33:45:d0:8c:68:7f:d7:
6f:91:58:99:9b:d6:41:f0:8b:ed:ba:86:39:6a:31:
a7:b5:3c:1e:8b:9f:7d:86:23:ff:d6:28:f9:f0:20:
1f:49:81:7e:12:d6:bf:45:f3:7f:2c:90:a3:3e:cd:
f0:4b:13:fe:e0:30:8b:36:a6:cb:da:35:76:1f:cc:
8a:12:23:31:9c:b8:45:3a:58:83:2b:84:e4:f7:25:
69:e6:22:a0:72:58:77:fc:58:f2:b1:3c:fc:0b:e2:
d1:f0:38:78:b3:6a:1b:ae:92:73:07:58:30:c5:da:
fd:82:ca:d4:8e:b9:34:db:bf:58:1f:53:fe:a6:37:
83:f0:f2:e8:c7:2e:6e:6f:67:66:23:79:d6:a0:5e:
d8:45:a1:6c:4e:ac:33:bf:d7:b6:1d:06:b1:9e:33:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B0:BC:A9:DB:79:6B:6B:BE:36:70:48:5B:F5:A4:28:FB:DE:6F:8B
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/8rC8qdt5a2u-NnBIW_WkKPveb4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.127.0/24
193.3.167.0/24
194.36.84.0/24
194.36.86.0/23
194.62.40.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a1:0f:15:d4:05:5f:67:b5:fc:c2:dd:5f:23:a4:73:37:b8:
1c:b2:46:94:73:8a:1e:be:34:de:e1:b4:1d:d1:12:30:a5:69:
00:08:fa:75:9a:69:05:8b:5c:fe:d0:e9:70:8f:fe:68:52:e0:
0f:02:72:ca:64:3a:79:8b:76:a0:88:7b:3f:d1:1a:c5:4f:13:
24:9b:95:bc:8e:65:0e:75:4a:c2:3c:13:f4:34:5a:36:f6:d8:
27:59:8c:62:6c:3b:94:64:75:47:58:35:48:35:15:20:e7:c9:
ad:e1:4c:74:40:6c:a0:2a:3e:01:4b:ba:72:f3:dc:fb:8a:e0:
73:58:58:5a:dd:0b:a3:0f:3f:ef:a1:dd:4b:1a:00:b2:20:83:
17:10:26:5d:46:6a:3f:06:70:91:4a:bc:37:01:e2:d7:f2:2d:
98:19:0d:dd:08:df:ca:51:b0:74:a6:4b:e5:6b:b6:65:6b:b4:
02:f9:36:3e:ea:41:95:f9:62:66:e6:f2:ba:9b:8d:45:9d:ec:
6a:55:34:97:dd:c6:91:75:e4:5d:3d:2f:03:00:11:55:be:79:
81:11:83:95:20:2f:f4:ef:06:a2:29:8f:9d:d2:51:1a:6d:3d:
0b:a5:e2:8e:05:91:3a:8b:bf:c4:32:61:f3:83:a4:37:4e:59:
fb:09:02:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:18:51 2025 by rpki-client