Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Am3EHuazR5NKapUc7shNSbJ3YpE.roa
File: Am3EHuazR5NKapUc7shNSbJ3YpE.roa (raw, json)
Hash identifier: WkPWDqODhGSWdXqV4LXZ2J8aMXMEbvI2EsaFMtrCqo0=
Subject key identifier: 02:6D:C4:1E:E6:B3:47:93:4A:6A:95:1C:EE:C8:4D:49:B2:77:62:91
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019565B7C0B7F8E42172743E0E87E5FE54D4
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Am3EHuazR5NKapUc7shNSbJ3YpE.roa
Signing time: Wed 05 Mar 2025 09:51:36 +0000
ROA not before: Wed 05 Mar 2025 09:51:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 89.42.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:b7:c0:b7:f8:e4:21:72:74:3e:0e:87:e5:fe:54:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Mar 5 09:51:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=026dc41ee6b347934a6a951ceec84d49b2776291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:6f:53:a5:4f:ca:2e:ab:bf:28:06:ad:8c:
d8:2b:c7:44:84:d5:8e:58:c7:c1:4c:91:51:78:b0:
e6:9b:cf:b9:30:b6:25:eb:5d:4f:ac:21:a6:0c:7d:
91:a9:1f:1c:94:2f:e0:df:df:af:f0:a0:31:2f:be:
af:27:3e:fd:8d:f4:98:70:f9:35:b0:af:53:1d:0f:
e2:1a:b6:c4:a7:65:d1:9c:e8:c9:b9:c1:ac:d7:ad:
84:bd:1a:27:a4:56:28:b5:4c:ee:e8:e4:bc:85:b9:
6f:41:b1:2c:58:65:2e:2a:6f:82:56:a7:3c:40:7a:
fa:51:33:33:38:22:41:50:80:c4:1b:bb:f0:ee:08:
22:7d:7e:23:ec:21:6a:12:e4:ba:2c:df:48:ca:59:
1a:50:1b:c2:1d:70:43:ce:4e:aa:c8:62:0d:6c:b7:
29:4e:cc:22:a3:2c:3a:9d:be:26:71:98:51:35:a8:
67:9f:90:7b:5d:4b:67:d1:16:3b:fd:c6:19:40:25:
99:1c:00:ee:77:31:22:12:e9:5f:44:4e:0b:96:81:
bf:ff:17:dc:54:18:eb:4f:7a:69:69:d3:de:6b:52:
20:5e:7e:40:28:4f:30:2c:71:04:6d:89:1d:a6:9a:
b1:bf:8d:b6:b9:f0:cf:80:bd:58:b7:d2:47:60:66:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:C4:1E:E6:B3:47:93:4A:6A:95:1C:EE:C8:4D:49:B2:77:62:91
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Am3EHuazR5NKapUc7shNSbJ3YpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.29.0/24
Signature Algorithm: sha256WithRSAEncryption
86:69:6e:ca:f0:d9:c1:7f:c1:05:cd:a6:c8:8a:12:6d:dd:4f:
4d:d7:23:3c:6f:dc:1f:84:85:7b:7d:45:3a:2e:3f:12:ce:dc:
d9:2a:32:75:ff:61:f8:18:0f:a4:cc:ad:ae:20:91:8a:ac:c5:
56:19:33:4a:e3:76:ef:a4:9a:29:ce:75:b8:22:b4:cd:b9:6a:
d3:e7:13:d7:95:3a:0d:70:7a:0a:37:44:71:17:d4:87:53:c3:
4e:d5:b2:dd:7e:04:5c:3f:ab:dc:64:94:2e:7d:df:3c:3f:6d:
35:d9:9c:af:d7:44:cd:7c:df:ff:97:8a:78:8a:8b:c9:ce:d9:
c1:39:f1:26:a9:d2:54:2f:b7:28:8e:ea:f5:fb:5c:3c:d6:f0:
a0:d9:8d:53:f1:4a:29:44:f1:35:2d:9b:41:b0:78:69:06:52:
41:28:a0:97:0c:e2:4e:6a:b7:b0:2f:0b:3b:dd:98:ce:90:f8:
52:57:aa:ea:81:3d:9a:8a:4f:6f:bf:4e:f2:40:3d:ce:44:97:
4f:b4:57:90:89:73:2b:ba:d5:63:d9:0b:46:63:77:88:e4:3f:
ae:c2:85:9e:e3:da:67:f3:cb:e0:43:b2:87:a5:b9:97:89:1b:
ee:0b:c4:cf:7e:20:65:79:1e:8f:a3:8f:76:ba:e8:ab:44:19:
b9:c7:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:13 2025 by rpki-client