Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/zDYhvUbelcRpqpslUbRSgUjh_fg.roa
File: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (raw, json)
Hash identifier: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=
Subject key identifier: CC:36:21:BD:46:DE:95:C4:69:AA:9B:25:51:B4:52:81:48:E1:FD:F8
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 0194221FC27D385A2A65353162395DE4904D
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/zDYhvUbelcRpqpslUbRSgUjh_fg.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213122
IP address blocks: 89.35.48.0/24 maxlen: 24
89.37.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c2:7d:38:5a:2a:65:35:31:62:39:5d:e4:90:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc3621bd46de95c469aa9b2551b4528148e1fdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:1d:8d:fe:d3:81:d7:8e:64:c5:d1:a3:cf:
41:3f:fe:eb:54:0b:97:27:9c:b8:da:7b:e7:eb:1c:
48:8c:df:70:50:8e:9d:92:72:e5:71:31:d6:2a:48:
3f:9a:3d:4f:fd:f9:20:1c:45:4a:37:cb:b2:2c:35:
74:e6:5d:8a:99:58:cf:b4:6b:5f:3d:47:7c:09:9f:
a4:9f:80:05:c5:db:cd:69:3a:55:78:d2:d5:e4:3a:
5a:fb:96:8f:78:74:4f:26:99:09:c0:92:46:a6:b3:
b6:29:6c:a4:ce:9e:01:b6:71:b8:18:2f:f3:a6:f3:
80:16:d1:c6:03:f2:e9:1e:ac:e6:7c:ff:73:28:a1:
ea:58:bf:54:89:33:64:90:34:ee:7a:44:4f:9c:b1:
99:d0:6f:95:1e:2c:54:07:1e:4a:8b:b9:ea:6e:3a:
9a:1c:80:5c:5e:3d:0b:08:c4:89:f1:9e:89:f1:6e:
87:a4:a6:cc:5c:d7:df:0a:fd:80:ee:71:12:f5:15:
37:b1:a0:04:fa:86:62:3e:c8:be:78:bc:12:f7:e2:
d8:4d:f8:5e:99:8f:73:c1:8c:83:72:69:32:9f:2f:
6c:7d:55:a6:a2:45:9f:a9:ef:e1:67:be:86:e7:6c:
2c:eb:74:f7:a8:ef:58:d4:e5:81:2a:f0:95:2b:fa:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:36:21:BD:46:DE:95:C4:69:AA:9B:25:51:B4:52:81:48:E1:FD:F8
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/zDYhvUbelcRpqpslUbRSgUjh_fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.48.0/24
89.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:db:c5:b1:5a:89:91:6f:2b:2f:b2:93:b6:4a:5b:2e:16:a6:
b5:5b:1e:38:b5:b5:21:dd:d5:05:13:af:08:f3:06:a9:d4:5f:
6d:a4:f4:ad:5e:38:b1:ca:86:59:09:d8:1f:91:d0:4d:fd:7e:
8c:52:9f:65:93:d9:22:c1:bc:f1:4f:07:be:78:45:5b:9d:e8:
b7:47:ec:a6:96:8e:75:50:70:6b:1f:f4:df:3a:50:28:4c:73:
80:d8:b4:3a:8d:82:62:01:53:d9:10:88:64:8d:21:68:44:2b:
5c:93:7a:1c:82:1d:8c:8c:9d:8c:7b:52:84:f5:7c:26:5c:e1:
12:d5:54:7b:4a:45:40:be:73:af:03:ac:68:37:dd:06:8f:47:
62:f7:3f:f7:c1:e6:7c:48:dc:46:e0:8b:bd:b8:82:61:28:d4:
ba:21:84:56:c0:3e:4a:e2:5c:f0:22:5c:96:2b:b0:27:53:26:
67:d4:9f:82:2f:3a:5a:51:a2:fb:d7:0c:96:5c:e5:d7:10:40:
22:50:24:4d:c1:c6:bf:89:3e:dc:43:74:73:59:02:86:20:70:
f9:a2:55:aa:2d:f1:13:07:af:b3:47:a7:f4:7e:f5:a4:6f:31:
6e:9f:fb:5b:90:46:c2:ae:2c:8b:cf:c4:5c:c5:b3:fb:d6:bd:
37:21:7d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:35:58 2025 by rpki-client