Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/t3Q23vyUdsRo6zct_9jhJ_Jzlak.roa
File: t3Q23vyUdsRo6zct_9jhJ_Jzlak.roa (raw, json)
Hash identifier: ak0F1/bwerUUr/wy5VcyV9l0Exrsc+fsCFd6F1NVmME=
Subject key identifier: B7:74:36:DE:FC:94:76:C4:68:EB:37:2D:FF:D8:E1:27:F2:73:95:A9
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01948A37E681CED5206FF074510E442B6E5F
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/t3Q23vyUdsRo6zct_9jhJ_Jzlak.roa
Signing time: Tue 21 Jan 2025 18:55:06 +0000
ROA not before: Tue 21 Jan 2025 18:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213590
IP address blocks: 89.43.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8a:37:e6:81:ce:d5:20:6f:f0:74:51:0e:44:2b:6e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 21 18:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b77436defc9476c468eb372dffd8e127f27395a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:66:00:f3:b0:76:0f:a2:6f:e9:27:35:04:
4a:63:83:51:36:aa:7e:c7:23:96:e8:53:b2:bf:6d:
5f:e9:30:4a:cb:56:72:b4:c3:65:5e:7c:b7:88:2d:
89:02:04:e0:fb:69:64:ba:3a:23:aa:70:50:25:b7:
79:26:07:13:af:b8:2a:93:87:4f:aa:e4:3b:7f:58:
cd:8a:43:b2:c6:c7:4a:96:e2:f1:5a:01:3f:8f:f8:
be:97:34:5b:53:13:6e:a1:be:19:bf:a1:da:2b:e8:
b2:98:2d:f8:cd:93:e0:d6:90:f7:ee:3c:df:7a:b2:
93:2d:75:dd:b9:71:4c:21:c9:1e:70:57:e5:c1:1c:
f2:72:f5:74:37:66:e2:a8:8d:16:89:c2:b1:a6:43:
2a:d9:e9:36:4c:08:ab:64:03:8e:09:df:84:2d:f5:
66:01:83:3d:6f:86:ec:b9:dd:c1:71:87:64:46:d2:
79:b5:f8:bd:cc:53:7b:a4:30:04:23:91:3c:38:fc:
0e:1f:4c:41:59:7e:7e:58:a5:76:f9:b0:31:ee:c2:
40:b0:de:e1:36:00:bb:82:76:3f:d6:63:1d:2b:d5:
66:a9:70:fb:38:3c:34:b6:69:bc:57:5f:6a:2c:f6:
ed:02:17:3b:ba:d2:20:a6:c2:9c:c8:30:81:ef:73:
ee:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:74:36:DE:FC:94:76:C4:68:EB:37:2D:FF:D8:E1:27:F2:73:95:A9
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/t3Q23vyUdsRo6zct_9jhJ_Jzlak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.45.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c2:3b:c4:02:13:c4:1d:5f:80:0c:f5:aa:77:62:dd:92:d6:
f8:be:6e:b9:50:8e:f7:a2:b0:21:bb:4c:a6:15:8a:a6:0c:ef:
7c:ed:4d:f0:09:59:95:71:8e:c9:bc:29:bb:73:fd:79:91:64:
cf:a1:f4:3c:60:c3:c5:ec:6f:d1:04:27:0b:be:d5:2e:58:3d:
01:c4:01:0c:a7:81:c5:42:b3:13:dd:18:76:03:f8:74:37:0f:
6f:73:f6:63:bd:de:2c:09:fd:08:e7:63:80:d4:a9:00:fe:7b:
3e:45:f3:ab:56:71:6a:7f:c2:9f:07:bc:3a:a0:2b:3d:15:96:
ad:a1:c6:e1:2b:a9:1f:50:df:39:c3:73:1a:03:8a:4a:c0:c1:
77:6d:d2:0a:1a:91:72:03:60:1f:e6:e9:3c:b9:79:cd:8f:e9:
98:55:e4:e0:dc:47:bd:e1:06:b1:9d:5d:89:58:a3:02:29:bd:
7e:ec:f1:00:de:2d:32:4c:17:40:bc:c9:c1:18:d9:3f:f0:dc:
4a:66:3f:ad:e5:3f:ce:da:97:38:b9:ad:36:9a:4c:cc:ad:b4:
a2:14:71:25:7b:6a:55:fc:7f:ec:7a:9f:ff:b1:f9:49:b5:14:
ac:47:79:1b:a8:81:b5:25:6d:1c:6b:f2:7f:0b:ea:f6:20:24:
d9:0c:1e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:57:59 2025 by rpki-client