Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/36nSo4IIIhWGblHml9ipRZ22_wQ.roa
File: 36nSo4IIIhWGblHml9ipRZ22_wQ.roa (raw, json)
Hash identifier: GNtMzAbDBSLg8JfQ+kSp8JSTe4JbTsAOb7fb1iMmRSU=
Subject key identifier: DF:A9:D2:A3:82:08:22:15:86:6E:51:E6:97:D8:A9:45:9D:B6:FF:04
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D61A09FA391688F7D10558C926A96A
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/36nSo4IIIhWGblHml9ipRZ22_wQ.roa
Signing time: Wed 01 Jan 2025 07:48:09 +0000
ROA not before: Wed 01 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61330
IP address blocks: 89.39.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1a:09:fa:39:16:88:f7:d1:05:58:c9:26:a9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfa9d2a382082215866e51e697d8a9459db6ff04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:b5:c4:3c:44:0e:0f:04:a1:92:38:e5:a6:
2d:72:24:1e:9b:c6:66:e7:16:07:02:28:46:e6:d1:
95:5b:4f:ed:d8:28:9c:a8:d7:7b:be:42:ad:30:5f:
8d:fc:c2:b2:87:5c:3b:06:5b:ef:21:2c:3c:be:96:
eb:48:e6:03:e4:48:8c:f8:aa:b6:44:7c:27:96:be:
8b:0d:90:8c:30:30:ab:2d:5d:8b:90:2c:1c:a0:30:
be:53:84:b7:45:1d:9b:cd:5d:0e:9b:ff:81:e1:86:
9b:1f:b4:b8:c6:08:9d:dc:a0:d4:e8:25:90:8b:77:
b3:3b:7c:9a:a0:ea:58:cc:cd:ab:41:70:78:26:7c:
92:f9:2f:9d:06:0f:e6:83:5c:02:8b:53:3f:6c:ac:
fc:dd:d1:1c:d5:9c:19:33:dd:f4:25:e2:fd:68:dc:
80:f2:61:d4:f0:9a:81:66:ef:5f:02:df:a2:d9:a6:
20:27:11:74:90:1b:0e:45:fd:91:3d:e1:69:4e:5e:
ae:c6:c2:26:1b:ab:ca:d0:58:45:a5:17:5c:c7:6b:
00:7d:f9:24:24:90:43:8f:11:4b:f3:a1:80:1f:54:
db:50:50:f0:21:bd:7e:b2:4e:f7:3b:a3:0d:24:34:
ec:94:e2:f6:24:1a:e5:0b:42:7b:8b:90:08:1c:96:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A9:D2:A3:82:08:22:15:86:6E:51:E6:97:D8:A9:45:9D:B6:FF:04
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/36nSo4IIIhWGblHml9ipRZ22_wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.252.0/24
Signature Algorithm: sha256WithRSAEncryption
58:06:69:0e:46:aa:99:cc:0c:a5:65:d2:f1:c5:56:4d:46:45:
de:82:15:e0:af:0a:e4:3e:51:1f:7b:a7:bc:53:38:07:03:eb:
59:9d:a6:30:31:24:57:bc:c4:81:a3:59:e5:4a:cc:a4:3e:b3:
4c:bf:7b:3f:be:17:16:9d:f3:44:72:52:d3:07:1d:5f:a2:35:
16:47:eb:3f:a3:db:83:a6:41:92:6b:88:30:41:8f:3b:bf:b9:
55:44:9d:52:a0:e5:ec:b2:da:05:ab:45:7c:2e:57:64:e6:08:
38:4a:36:1f:bb:83:d1:cb:4e:c0:02:ff:d0:ac:a2:57:49:d9:
fc:59:ea:7c:e8:e8:9a:5d:f0:a6:1e:75:d7:2d:46:99:d8:6d:
b6:df:b5:94:4f:62:f2:61:db:51:b9:fa:dd:bd:5c:8a:7e:d0:
49:b5:13:01:b1:f4:df:d6:14:03:85:28:d4:33:75:79:ff:0a:
66:38:74:ac:5f:68:67:0f:9d:a6:0b:9b:3e:84:0f:e3:8e:ac:
83:39:5d:fa:a8:17:c5:bc:23:45:6f:12:b2:84:17:de:a7:5a:
1d:e9:ef:a8:7a:8f:37:94:4a:42:ff:d2:10:e0:9d:28:c5:5d:
54:bf:41:08:94:74:9a:10:8c:07:47:3a:e1:8a:0c:c9:2c:5e:
93:c8:24:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:53 2025 by rpki-client