Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/jPYMTQLhOkUyChhuk3LT0pzGuKw.roa
File: jPYMTQLhOkUyChhuk3LT0pzGuKw.roa (raw, json)
Hash identifier: WZkVzoTHH8bTxovKv17GI4cgaifA5bg30GZLk+9UE6A=
Subject key identifier: 8C:F6:0C:4D:02:E1:3A:45:32:0A:18:6E:93:72:D3:D2:9C:C6:B8:AC
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D610E942DE29A538989E0A55A34A6B
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/jPYMTQLhOkUyChhuk3LT0pzGuKw.roa
Signing time: Wed 01 Jan 2025 07:48:07 +0000
ROA not before: Wed 01 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35161
IP address blocks: 89.47.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:10:e9:42:de:29:a5:38:98:9e:0a:55:a3:4a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cf60c4d02e13a45320a186e9372d3d29cc6b8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3e:6f:13:fe:34:e2:bd:20:08:fb:59:ab:95:
23:65:b6:c5:e9:f2:f6:82:68:8d:d8:6f:20:da:ef:
34:e1:48:b4:6f:ad:62:76:96:f2:45:3a:ab:33:c7:
84:20:18:56:3f:7d:40:5e:f6:a9:47:eb:1c:4f:f5:
fa:8b:ad:04:12:b8:99:8a:72:19:27:a3:a9:ac:5f:
3f:fb:1d:01:e7:84:09:fd:8c:17:6c:21:08:a4:0c:
c8:09:4a:94:97:22:db:35:1a:d3:b7:1b:b1:01:ce:
cb:bc:c8:66:21:a2:0f:17:f8:c7:b6:fb:5a:10:87:
fb:bc:c7:5e:a9:2a:95:27:e1:a9:d0:e6:2b:92:3e:
3d:b4:19:30:0f:02:b3:01:3c:bc:27:6b:14:5c:3b:
86:3c:79:73:9b:41:b7:3e:d4:5a:80:6a:72:18:ee:
4e:81:4f:f4:99:dd:61:b6:6c:dc:3f:ac:9d:96:51:
f4:da:60:e3:cc:67:05:4f:cf:6c:e7:fd:12:d2:2b:
a2:5b:8d:68:06:e0:d8:06:06:51:08:b7:3c:c9:ef:
23:9e:5f:24:d8:9a:ac:b8:12:5a:80:49:ad:91:bf:
37:93:2c:e9:bb:9c:38:af:33:4a:d2:d5:77:7c:ca:
9e:a8:ac:ff:74:84:86:d8:cb:7f:d1:16:3c:80:02:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F6:0C:4D:02:E1:3A:45:32:0A:18:6E:93:72:D3:D2:9C:C6:B8:AC
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/jPYMTQLhOkUyChhuk3LT0pzGuKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:82:9e:b9:d9:d5:67:94:8a:15:ae:77:9c:9e:34:0d:1f:ae:
1a:2a:3c:83:06:98:ad:15:4a:1f:af:81:0a:0a:9f:d2:64:0b:
76:64:0c:8c:29:23:ff:fe:86:3a:86:29:d8:7e:9f:b5:47:58:
a5:3f:c0:4f:83:36:8a:3f:11:88:fa:3c:ea:6f:f9:b0:a3:56:
f9:cd:16:a2:25:90:c4:73:6e:57:35:7b:17:da:19:84:f5:00:
a2:17:61:91:97:24:aa:81:ec:6e:34:ea:47:97:b8:c0:e1:5b:
a5:52:7c:cc:bd:c2:f7:2b:a0:78:3f:2d:6d:0a:1f:41:f2:72:
8f:60:7f:27:cb:91:6e:24:99:d9:23:4b:6b:3b:9e:a9:7a:ed:
f1:9e:c3:d7:a5:78:a6:2a:14:f4:cd:58:1f:bd:7b:27:76:79:
03:e3:59:b6:49:0c:3d:d8:5f:95:e5:e7:c9:85:89:e6:4f:ef:
76:64:42:e4:e3:b9:aa:23:ee:dc:c4:46:76:7a:af:e3:58:b7:
29:e5:77:9f:b1:f8:5f:cb:2c:44:6c:50:4e:96:ef:0a:1c:35:
5f:c9:80:12:ba:e7:ae:14:a1:6f:70:29:e3:91:b1:2f:50:e7:
60:30:f0:b0:75:b4:f7:2a:6d:a3:41:e6:df:21:15:16:d7:74:
cd:62:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:52 2025 by rpki-client