Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/aBAGt66YKPdKQ8RR2EE80USkpUo.roa
File: aBAGt66YKPdKQ8RR2EE80USkpUo.roa (raw, json)
Hash identifier: iC1feUzfX4kgYVZxGnHiEz5thaZLZj/NmxSIHfu8NW0=
Subject key identifier: 68:10:06:B7:AE:98:28:F7:4A:43:C4:51:D8:41:3C:D1:44:A4:A5:4A
Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial: 019422FB038DC06343ED27F316780EF0DE03
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/aBAGt66YKPdKQ8RR2EE80USkpUo.roa
Signing time: Wed 01 Jan 2025 17:47:43 +0000
ROA not before: Wed 01 Jan 2025 17:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54238
IP address blocks: 89.255.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:03:8d:c0:63:43:ed:27:f3:16:78:0e:f0:de:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
Validity
Not Before: Jan 1 17:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681006b7ae9828f74a43c451d8413cd144a4a54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:93:e0:87:23:d5:39:de:01:11:fd:f1:51:
8c:fe:b7:74:2e:83:9b:1b:91:c4:2f:eb:42:11:9b:
3d:8d:2e:6e:37:9a:94:b5:70:0d:de:d8:50:08:2f:
77:af:d1:8d:97:4e:4b:e1:25:b7:5c:78:0b:63:e3:
3d:a8:6e:29:71:88:e9:ac:d3:cb:44:b9:c6:b4:1b:
48:a4:3b:9f:4b:67:11:b1:ec:48:f3:95:99:f8:dc:
b5:f7:55:e4:6f:65:05:24:31:15:05:0f:bb:4a:59:
47:f3:58:08:42:4b:fb:d9:90:66:17:14:f8:b1:b4:
0a:ea:e0:d1:7f:dc:27:89:ed:90:2f:b7:29:46:8b:
88:3f:ad:8c:3b:f4:1e:f7:2e:1a:ee:7d:e6:7a:7c:
0e:d8:35:1b:6f:16:0b:07:5d:6d:db:07:cc:54:b5:
b5:23:e4:b1:cd:f9:34:36:50:a7:a5:7c:23:73:ac:
2d:78:42:77:ec:ef:12:6c:b1:d9:d5:86:93:c4:b1:
e0:4e:cd:77:76:a5:b6:58:5e:0e:15:89:37:f3:30:
a2:48:b3:66:67:3f:d4:b2:70:8f:f3:ee:de:4a:63:
5a:e2:67:ba:1e:0f:21:c1:32:31:f6:f6:90:f8:d8:
7a:b2:65:5a:cf:f9:e8:40:a8:f2:f4:12:4b:db:67:
2c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:06:B7:AE:98:28:F7:4A:43:C4:51:D8:41:3C:D1:44:A4:A5:4A
X509v3 Authority Key Identifier:
keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/aBAGt66YKPdKQ8RR2EE80USkpUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.255.208.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:9c:a5:81:9b:19:52:03:74:15:56:bf:f8:55:c2:80:8d:d2:
49:a9:1d:4f:f2:62:97:d5:ba:bb:35:e0:41:0d:ad:16:b7:fb:
2f:05:79:1c:a0:52:7e:97:6c:41:bf:81:2a:c1:00:fe:39:a6:
87:ae:f8:ba:5f:d4:1b:e2:4a:82:5e:41:60:31:21:cb:43:7f:
1c:d7:77:a4:7f:b4:1c:8c:7f:2c:8e:c8:db:b3:4f:ef:28:79:
0f:84:ea:55:da:7f:b0:13:73:5e:16:3c:1a:00:39:04:e0:de:
67:ab:28:33:bb:08:dc:56:bd:a5:3d:42:1e:a6:8b:be:28:02:
82:5b:5f:5d:40:72:2c:be:ed:4d:53:0d:cd:47:55:3d:8c:a5:
89:7a:19:ff:94:1f:60:06:74:d6:34:a8:25:07:28:72:e3:b8:
71:4a:e0:0e:94:8a:cb:38:04:32:d3:06:2e:ce:79:8b:77:6d:
09:5a:f1:25:78:c9:87:d0:24:c5:38:07:8e:79:f0:14:92:62:
c3:28:99:9a:67:dc:10:51:6b:af:65:55:37:b4:45:85:ac:94:
d6:15:7a:66:f8:7b:87:65:76:cf:fb:31:51:d4:d6:80:d9:fd:
78:36:b6:72:22:66:3e:ef:6f:35:ab:d3:2f:11:7d:e0:82:01:
9f:46:46:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:13 2025 by rpki-client