Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/f82dH9Kef_yM_0mhvpdo79LuFPM.roa
File: f82dH9Kef_yM_0mhvpdo79LuFPM.roa (raw, json)
Hash identifier: +W/2nGkWoU7YuVbPeC0tSGAk4v4cWDOxdCNdfqSglWs=
Subject key identifier: 7F:CD:9D:1F:D2:9E:7F:FC:8C:FF:49:A1:BE:97:68:EF:D2:EE:14:F3
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC82A728AD6BA5888E88AB5657F297
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/f82dH9Kef_yM_0mhvpdo79LuFPM.roa
Signing time: Thu 02 Jan 2025 07:48:12 +0000
ROA not before: Thu 02 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209642
IP address blocks: 45.146.242.0/23 maxlen: 24
89.251.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:82:a7:28:ad:6b:a5:88:8e:88:ab:56:57:f2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fcd9d1fd29e7ffc8cff49a1be9768efd2ee14f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:7e:2a:e8:3a:3e:b3:c2:30:8c:ce:ed:cf:
53:8e:0f:de:75:e6:e6:55:f2:da:dc:42:32:0f:c2:
79:eb:92:9f:4f:1d:09:0c:63:06:41:23:db:bd:87:
b8:88:aa:1c:13:31:0c:9b:3c:63:38:ac:5a:9d:4c:
95:93:fd:c7:8c:32:52:2a:0f:7f:71:33:aa:09:95:
92:34:e1:22:9c:93:12:62:9b:d1:7d:61:9e:39:ca:
3d:97:5b:32:16:f6:3f:29:4c:65:c7:db:3e:02:e6:
56:9a:8b:8c:67:65:f3:fe:17:dd:f4:3e:65:6e:e6:
97:e4:c8:ca:80:40:39:a2:b3:d4:42:c9:3b:eb:cc:
3d:23:d7:9d:cc:d2:ba:8b:4f:d2:4b:2f:4b:8c:d2:
8c:eb:4f:97:06:88:03:a2:9d:1b:1c:6e:d9:b9:64:
aa:3e:b3:3f:5f:14:4c:a6:1c:32:2f:77:88:c1:c7:
f1:be:bb:b8:96:65:b0:74:14:14:12:6d:fa:f5:58:
53:3a:20:ec:ad:29:88:35:54:92:63:4f:e5:d7:38:
c8:fa:ce:dc:2a:9c:e4:26:f0:ce:5a:5c:cb:11:45:
09:0b:aa:d2:e6:40:ea:b4:7e:0b:e4:04:86:4f:1f:
4e:63:56:01:e5:2c:dd:63:58:c0:9d:ab:a1:ea:0e:
16:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CD:9D:1F:D2:9E:7F:FC:8C:FF:49:A1:BE:97:68:EF:D2:EE:14:F3
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/f82dH9Kef_yM_0mhvpdo79LuFPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.242.0/23
89.251.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8c:ed:e2:9d:44:28:9f:35:c4:17:0d:ad:6e:f5:da:7c:42:
85:c4:81:1f:6c:19:76:49:76:e3:5a:c6:3f:cf:ad:1f:be:bd:
4a:91:18:ae:f6:43:5a:2e:f8:37:e5:7e:45:6e:22:53:49:6b:
6f:65:83:5d:96:cd:1a:49:9d:3d:8b:c7:8f:c9:f6:53:e7:0a:
4c:65:af:92:52:a3:fc:89:46:60:ad:ee:57:4b:c5:ed:c5:aa:
e4:71:09:87:c6:86:8d:67:99:af:14:31:40:f2:c2:6f:a2:4f:
3e:46:13:69:33:ec:25:e8:4f:04:76:82:66:f1:47:fa:5c:db:
e3:a2:e8:74:a6:34:8d:9d:ea:d6:e5:14:40:20:15:39:0d:24:
74:a3:2f:9b:2f:46:6f:c4:65:f6:d4:80:94:7c:4b:7a:74:57:
2c:c6:e9:a7:f4:aa:d3:fb:f0:f1:e3:e9:b6:4f:fd:2a:e9:24:
5e:8d:9c:92:4b:0e:b4:8c:89:ff:11:c8:22:d1:84:72:74:84:
7c:3c:c1:9c:fb:64:a2:56:44:af:8a:88:fc:94:d6:a6:19:0b:
83:d1:bb:b8:2e:1c:66:8e:6f:4a:09:e0:56:e7:62:f6:94:c7:
f2:66:c4:54:9b:5a:e5:fb:86:5e:ff:78:1a:0c:66:d8:67:b4:
10:61:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:39:18 2025 by rpki-client