Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa
File: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (raw, json)
Hash identifier: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=
Subject key identifier: B5:1C:FC:B5:85:29:C7:07:FC:C0:DE:06:79:39:C7:E5:FD:10:40:D5
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 019425FD765D73C35D0128CE84DA76353607
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa
Signing time: Thu 02 Jan 2025 07:49:15 +0000
ROA not before: Thu 02 Jan 2025 07:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 89.37.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:76:5d:73:c3:5d:01:28:ce:84:da:76:35:36:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Jan 2 07:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b51cfcb58529c707fcc0de067939c7e5fd1040d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:71:de:5a:80:55:b4:c7:a8:31:d1:f8:1d:
a7:e7:93:70:d6:d8:5f:7a:8b:12:b8:62:1a:37:a8:
c8:d2:02:d3:31:87:0f:90:ec:d9:59:2c:b6:fc:50:
58:c0:e9:b5:94:21:26:ce:57:49:ab:aa:a3:d7:e5:
32:bc:31:b5:11:59:5d:e4:6b:75:eb:59:9f:af:f8:
d4:8d:79:d9:ea:0b:33:ab:7e:a7:45:35:47:b7:8a:
d3:79:07:c6:cf:8c:d2:c3:1f:ce:27:3b:e2:20:e3:
4d:f4:05:0d:e0:6c:4d:17:4f:22:4d:2c:9d:a2:20:
77:4c:35:82:c1:28:dd:c0:a2:de:e0:46:99:9f:e4:
92:1f:3b:b7:1b:52:f3:3d:0a:b0:bb:9a:4f:df:11:
33:fc:cd:fe:38:78:d6:5e:e8:3d:c9:16:db:15:1c:
1e:ff:31:cf:70:d2:39:fa:5b:d3:b5:b9:f5:97:49:
1f:ab:b5:14:44:55:ee:cf:60:b9:ed:e4:24:c6:a3:
a8:8c:0e:9b:68:64:a9:e6:5a:7a:ae:5c:f2:93:12:
a5:09:ca:8e:1f:67:69:5b:51:43:3b:b2:1a:16:0c:
fc:61:fb:60:99:44:f8:0b:92:d3:54:c9:2a:6a:d4:
e8:d6:05:5a:74:b4:75:db:5b:cd:05:d8:ca:aa:3d:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1C:FC:B5:85:29:C7:07:FC:C0:DE:06:79:39:C7:E5:FD:10:40:D5
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f2:aa:07:2c:2b:89:74:e4:e4:ac:e4:c6:7f:51:67:37:d6:
d7:c9:46:df:0d:05:06:ca:f0:a9:31:05:da:02:30:23:59:27:
dd:59:34:c2:4d:6f:9c:ce:60:18:c6:eb:ba:30:2d:df:3f:76:
a3:6b:46:36:d9:4c:56:f4:01:a9:e3:e0:4a:82:87:eb:b3:3a:
1d:df:d1:c6:79:98:63:e4:5d:a9:0a:c5:56:58:c5:0b:05:31:
ee:c7:25:e2:ce:e1:36:fc:02:f6:9c:e4:56:0a:7a:c5:0a:6c:
08:bc:ad:ac:2c:1b:3a:3e:ca:62:2e:52:9d:bf:30:a0:d8:d9:
f0:87:19:dc:ee:e6:f6:e8:4b:d2:8e:f2:2a:3f:3d:7f:95:b8:
70:4c:cd:f9:3c:75:8f:56:3e:d5:b3:53:85:93:21:aa:17:3b:
72:f6:90:fc:a1:56:2d:d4:c0:ed:76:04:87:67:c2:84:c3:dd:
36:64:69:b7:8d:3b:ce:73:fb:c7:7d:79:04:80:29:94:3a:09:
4a:29:f1:39:f8:ba:e3:46:9d:5b:ed:2c:f5:c2:88:0a:5c:3e:
b4:ce:ad:58:4e:30:ea:a2:cc:cc:de:32:69:c9:d0:a5:00:16:
b9:59:d5:1f:fd:86:8d:2b:ab:35:7d:86:c0:fb:86:8e:bc:db:
1f:4d:63:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:08:56 2025 by rpki-client