Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RwlcFaivcswbriULc3xh0KXVI30.roa
File: RwlcFaivcswbriULc3xh0KXVI30.roa (raw, json)
Hash identifier: 8SnxicG8AZ2Wle7JdRrFV6og+RNBSeSzvrRBmEEdB0E=
Subject key identifier: 47:09:5C:15:A8:AF:72:CC:1B:AE:25:0B:73:7C:61:D0:A5:D5:23:7D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195427510E23FCC1A04A23A66005BAAEB29
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RwlcFaivcswbriULc3xh0KXVI30.roa
Signing time: Wed 26 Feb 2025 13:32:03 +0000
ROA not before: Wed 26 Feb 2025 13:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152368
IP address blocks: 89.213.45.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:75:10:e2:3f:cc:1a:04:a2:3a:66:00:5b:aa:eb:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 26 13:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47095c15a8af72cc1bae250b737c61d0a5d5237d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:53:38:73:d0:18:29:b1:1e:71:72:d5:a6:
61:a3:b5:79:db:44:64:9a:47:f1:30:0c:c5:6b:ee:
a4:75:e3:9d:fc:f3:27:1c:c6:7a:56:b8:44:c2:3c:
b1:7b:0a:cf:31:00:6b:e4:2d:9e:b6:97:fc:9f:d3:
64:5f:00:9c:7e:1b:a1:66:c5:d5:74:ac:1d:44:ef:
a4:48:c8:c4:ad:6c:73:c1:b2:5f:7d:4d:fd:6a:34:
ca:51:97:09:c4:5c:73:dc:5c:fa:ac:11:b7:a8:d4:
9c:e4:fd:31:9c:64:f0:da:f0:43:12:77:25:9b:1b:
d8:50:68:c5:86:2e:9f:1c:0e:d4:bc:3a:40:94:b9:
68:0a:45:df:38:6e:3c:5c:75:c8:3d:e9:03:27:99:
94:12:55:c0:63:22:3f:5e:67:12:7d:a2:1d:f1:8b:
fd:68:86:1b:3d:68:6a:e9:f6:15:bb:41:f2:8b:7f:
8a:68:6c:13:c7:a0:b1:6d:19:27:17:26:2d:75:ad:
63:05:da:d0:07:9c:23:2b:c0:c4:ca:be:1e:eb:9f:
93:0d:42:63:52:ab:66:bf:8a:18:42:6b:a2:9a:ff:
c8:d4:28:4b:d5:da:50:b2:65:e3:6d:d5:55:de:2c:
4f:2f:e9:19:d8:e2:d7:25:90:2f:86:c5:f1:ad:cc:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:09:5C:15:A8:AF:72:CC:1B:AE:25:0B:73:7C:61:D0:A5:D5:23:7D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RwlcFaivcswbriULc3xh0KXVI30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.45.0/24
89.213.160.0/24
Signature Algorithm: sha256WithRSAEncryption
92:6c:66:95:5c:a8:bd:b0:b7:44:13:b9:30:d7:be:94:3d:b5:
bc:49:ae:30:19:41:b1:03:56:1a:69:36:a7:1d:98:69:81:2c:
43:82:98:76:53:78:85:0e:75:40:34:fa:ff:16:a1:bb:2d:a3:
42:c7:7d:23:e7:30:88:25:04:8a:86:fc:6f:5e:af:69:f6:54:
8e:52:89:66:5b:2e:52:10:9f:c9:e1:a7:b9:54:e0:42:12:4b:
4b:cf:1c:05:98:3c:8b:04:df:a0:37:47:34:06:5c:e6:7d:17:
0c:75:76:46:38:6c:1a:f3:b6:6e:63:c0:1f:65:08:02:cd:d0:
e8:63:61:0d:68:38:bd:85:50:ad:00:1c:c8:4e:3e:0d:a0:65:
9d:31:fa:aa:f6:42:b8:79:3b:5c:33:df:52:45:d0:11:bb:f9:
67:98:b9:6f:ec:54:9e:60:4a:86:47:39:49:6b:d9:1f:a7:57:
dd:bb:8b:c2:46:43:fe:b2:6c:73:c3:b3:07:67:fc:53:fd:c0:
bc:a2:38:4a:e1:b5:a8:f7:2b:34:90:a8:c7:94:40:51:b8:89:
2f:4e:94:50:b2:3c:a7:93:5f:db:4e:30:91:81:91:77:58:23:
a4:0f:a2:78:6f:a8:db:ad:cd:59:ce:86:00:c7:a2:a7:21:d7:
be:fa:9b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:50:57 2025 by rpki-client