Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/6klSWkjjUTbGuPtDfN8cALab9cs.roa
File: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (raw, json)
Hash identifier: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=
Subject key identifier: EA:49:52:5A:48:E3:51:36:C6:B8:FB:43:7C:DF:1C:00:B6:9B:F5:CB
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F7C048AD6201B7C2BC2ACD2145090
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/6klSWkjjUTbGuPtDfN8cALab9cs.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56458
IP address blocks: 89.40.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7c:04:8a:d6:20:1b:7c:2b:c2:ac:d2:14:50:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea49525a48e35136c6b8fb437cdf1c00b69bf5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:2d:c2:1d:11:d6:b4:76:60:ce:e0:79:7f:
cd:ff:01:74:12:42:85:19:28:c4:52:8e:ee:d8:3e:
ce:c3:4d:b8:89:7d:9d:ab:a2:c1:dc:00:f4:ee:3b:
b0:b3:ad:c8:71:5d:2d:4d:10:5e:22:57:69:4b:c6:
96:fc:86:c9:99:dd:d9:1d:08:0a:b9:7e:de:e5:90:
2f:5c:1d:d0:15:da:b4:e6:76:8f:0e:29:35:63:85:
71:d0:aa:6f:f1:b4:42:51:3c:cf:9b:1e:f9:9f:d4:
b1:f1:48:31:c5:14:70:74:e9:e7:79:58:54:ce:4e:
05:39:5a:35:a6:56:f8:b8:9e:21:e7:6f:b5:9a:be:
ef:92:08:c9:ba:68:9e:28:59:c2:f2:b2:bd:fe:5d:
5e:5a:1f:a8:9b:6e:48:34:7a:5f:4b:2d:57:b0:df:
d7:a7:9a:5d:3e:50:b2:9e:a8:bb:e9:bf:12:71:ba:
f9:a7:e2:9d:fa:2b:5b:55:5a:55:cd:cc:ed:d5:1f:
7e:00:27:7a:f5:46:fe:1a:b8:3e:65:d6:76:a3:9c:
df:d0:71:85:30:cb:4c:35:b9:58:e2:a6:42:37:f4:
3f:98:30:c1:44:6a:3e:bd:13:23:2a:32:12:d4:05:
82:a7:d5:22:58:9d:c0:40:c4:4a:11:b5:c9:99:6f:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:49:52:5A:48:E3:51:36:C6:B8:FB:43:7C:DF:1C:00:B6:9B:F5:CB
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/6klSWkjjUTbGuPtDfN8cALab9cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:07:18:23:73:a0:9a:d6:05:08:8f:8b:62:d4:ad:65:5e:1a:
ec:f1:04:4b:1f:bc:18:29:99:96:0b:1c:6d:32:dd:91:79:a3:
46:3a:c6:1e:29:00:d3:d6:28:c9:4d:50:b6:52:fc:5e:32:27:
d4:eb:7b:4b:50:7f:81:c2:9c:bb:a3:04:b6:0a:2b:c1:89:02:
21:19:a4:57:76:10:f1:7f:fe:2d:f0:2d:1d:24:42:dd:e2:cb:
22:93:d8:06:40:c0:17:84:2d:43:af:ae:e9:0b:8b:a3:3b:34:
51:bb:e5:f8:fa:3c:5a:7e:af:f6:c6:e8:8b:98:1e:b5:3a:fc:
8e:eb:22:fc:2c:0c:fc:a8:97:3e:d1:66:ef:b7:2d:09:42:e0:
94:6e:55:3a:4f:74:80:ea:8b:2d:21:0f:98:30:e5:bd:2e:a8:
67:e6:c4:6f:a3:af:fc:5c:01:73:76:72:69:54:67:e4:d2:43:
f1:5c:d0:b6:15:2c:ba:70:ff:26:74:4c:dc:43:6e:a8:2a:57:
bc:58:d8:07:a7:30:9f:21:37:f8:3c:83:93:eb:d0:db:eb:2d:
9e:45:4d:84:88:a6:90:63:61:cc:af:21:d8:94:7b:f0:8b:42:
c4:91:c9:9a:f7:0c:48:cd:63:2b:d0:50:5e:ed:98:b1:59:49:
8e:81:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:43:09 2025 by rpki-client