Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/yA8PAjI9ucZPl6gGi8mMeEVflp0.roa
File: yA8PAjI9ucZPl6gGi8mMeEVflp0.roa (raw, json)
Hash identifier: PYdCih3PZqBlyQGGa4OY8MxdNWJfhJ0B6C8JG/xq17Q=
Subject key identifier: C8:0F:0F:02:32:3D:B9:C6:4F:97:A8:06:8B:C9:8C:78:45:5F:96:9D
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01957508B5BB32FB71A31EDB5650129955FF
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/yA8PAjI9ucZPl6gGi8mMeEVflp0.roa
Signing time: Sat 08 Mar 2025 09:14:19 +0000
ROA not before: Sat 08 Mar 2025 09:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.206.0/23 maxlen: 24
212.42.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:75:08:b5:bb:32:fb:71:a3:1e:db:56:50:12:99:55:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Mar 8 09:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c80f0f02323db9c64f97a8068bc98c78455f969d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:3f:ed:9e:6b:bc:2b:ce:e2:d3:51:4e:04:
5a:96:66:cd:8f:17:e9:2c:16:ef:01:2d:4b:bd:7f:
12:4b:74:76:06:17:9b:0a:42:4f:85:44:18:09:82:
51:fc:59:ca:41:94:ac:1d:a0:53:84:1e:d6:f0:4e:
40:49:90:03:1a:d1:c6:b5:25:32:86:33:6c:20:5a:
5d:8c:56:b4:19:25:50:68:5c:29:cb:1f:a1:64:8c:
a9:6b:82:48:9b:e0:4c:47:92:b7:17:37:07:d8:96:
b9:e5:f1:64:20:58:8b:05:c3:a1:70:6f:29:1b:9a:
ca:b7:19:13:9b:72:76:10:de:a0:3a:fa:33:ee:b5:
ae:a2:4b:c7:ea:8f:83:7f:cb:72:0c:b6:fb:a2:8a:
fd:83:67:33:d8:3f:00:42:dd:17:87:bc:0c:aa:d1:
d6:80:b2:85:67:88:3b:bd:fe:f7:d1:e3:00:a5:0d:
18:47:63:12:f8:a5:dd:51:b2:44:97:45:37:f6:3e:
3c:4f:f7:25:a5:6c:cb:94:ed:97:81:70:03:41:a7:
a8:c7:9b:6e:da:8e:bb:f1:2f:be:ce:28:fb:0e:38:
8f:7b:0e:b3:06:1a:7e:32:7b:35:81:b8:cf:f4:e2:
cd:e5:c7:12:9d:38:d4:dd:1c:e4:99:8f:bf:45:ae:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0F:0F:02:32:3D:B9:C6:4F:97:A8:06:8B:C9:8C:78:45:5F:96:9D
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/yA8PAjI9ucZPl6gGi8mMeEVflp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0/21
89.249.206.0/23
212.42.192.0/20
Signature Algorithm: sha256WithRSAEncryption
36:34:31:35:db:3f:bd:ab:b2:c2:12:39:7e:3b:1f:7a:bd:2f:
e7:32:42:cb:73:65:96:66:a8:f2:d5:65:ee:00:ba:df:77:41:
b3:78:98:60:e8:0d:dc:6e:a1:b3:39:d2:62:8f:8e:70:3d:24:
1f:e5:62:79:19:03:73:ef:e1:96:f8:6e:08:d0:0f:1a:63:5d:
15:1f:8a:62:fe:67:b0:a4:16:25:17:54:82:dd:fe:2e:2a:d3:
c3:0f:18:c3:ec:59:b2:86:b5:5a:d9:a7:1a:d3:0a:de:3e:c0:
fe:ad:7a:fa:3c:47:7b:2c:eb:b4:29:dd:d2:4c:cf:78:ba:d2:
0d:e2:84:01:07:42:3e:9d:38:23:91:8e:99:fa:f8:34:b1:5b:
e3:0a:9c:38:00:17:f8:ce:23:1a:bd:cb:b7:ad:27:37:9f:cb:
b6:a5:53:4f:b6:43:ea:13:26:43:31:5b:53:be:e0:1e:df:1c:
3c:f5:af:ad:8d:e9:be:5a:dd:17:be:e9:29:6d:a0:c5:ab:62:
ae:ff:54:06:b3:3f:d1:e8:b0:55:83:f3:df:b2:ec:19:51:22:
8a:fe:f2:9a:86:bd:91:a2:bb:2d:05:87:37:12:bf:91:7c:81:
4f:45:5d:4e:aa:48:0a:1e:e7:ea:d1:06:65:d2:48:20:5a:cd:
dd:a5:47:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:14 2025 by rpki-client