Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa
File: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (raw, json)
Hash identifier: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=
Subject key identifier: B0:A7:84:1F:C8:28:2B:16:A1:80:95:72:54:47:5B:86:02:7B:9F:B6
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 019426D9FB3DC2DCD65F1AFB1F25D90415FB
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa
Signing time: Thu 02 Jan 2025 11:50:07 +0000
ROA not before: Thu 02 Jan 2025 11:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201313
IP address blocks: 89.30.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:fb:3d:c2:dc:d6:5f:1a:fb:1f:25:d9:04:15:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 2 11:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0a7841fc8282b16a180957254475b86027b9fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:1a:1c:18:b4:60:95:d7:12:9c:bd:1a:0c:
60:3d:5c:ac:c3:b1:d3:12:d8:42:ec:c4:f6:ce:fa:
86:13:7a:e7:78:ff:78:09:e2:d9:c1:1a:35:34:57:
ab:9c:59:48:4f:79:29:68:f3:f1:ac:f4:8c:2f:c6:
9e:c2:80:b4:68:26:e4:80:7e:a2:ea:41:70:6c:c5:
56:f2:bf:4e:0b:19:aa:13:ac:9b:26:c8:6e:6f:0f:
47:e1:50:6f:01:9c:bf:bb:f1:78:f3:96:08:b8:03:
10:dd:fb:10:4e:eb:d7:c2:3c:e5:ba:d6:20:8d:76:
0e:c6:2e:61:4e:ef:a4:d4:d5:71:25:73:76:d6:16:
56:f2:51:e6:bf:89:ef:d2:48:c0:1d:34:91:5c:46:
67:17:f9:fb:3a:da:35:c7:ba:60:df:9c:5e:73:57:
ba:25:c0:05:53:69:50:1b:62:61:cc:18:c0:54:86:
8e:9d:b0:34:02:3f:2c:3b:0c:15:89:2b:c1:ef:e0:
cd:e2:45:7f:4d:3c:05:a5:48:bf:76:34:03:fd:e2:
69:14:46:3e:5e:bd:3e:d5:5b:fa:e4:e7:9e:ba:d0:
7a:3d:36:a2:36:23:96:7d:da:53:49:a9:c7:78:c1:
f9:00:2f:25:c6:2e:2b:fb:44:1d:67:5d:ee:16:e5:
08:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A7:84:1F:C8:28:2B:16:A1:80:95:72:54:47:5B:86:02:7B:9F:B6
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.109.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:dc:c4:21:e5:41:31:f7:85:05:08:9d:a3:1f:ee:53:06:16:
86:5d:bb:7e:74:fe:b1:7b:9b:25:2d:9a:da:ff:35:fa:04:a7:
0d:8e:03:e4:98:c3:59:83:52:bb:98:fd:f7:f9:68:15:89:36:
3b:01:57:9c:67:20:ab:89:f8:73:91:31:77:ae:ae:c5:6f:d8:
7e:fe:6b:47:2c:e3:0a:50:26:99:14:ca:7e:f4:9f:b1:ca:34:
ed:b6:06:ea:4d:77:1b:30:83:f9:e0:8d:4e:0d:87:44:c2:cd:
09:a5:58:a0:c2:ab:56:42:ca:8a:6e:a9:98:61:49:71:22:c7:
40:87:ee:bb:2e:16:18:5c:e3:6d:09:73:6b:b0:53:77:62:7a:
f2:e2:b5:af:87:2d:0d:c4:34:93:74:4d:04:6d:d2:58:05:7d:
59:57:83:95:be:89:b5:a8:a8:1e:6d:69:bb:7a:13:1b:d0:7d:
9c:14:30:e5:20:da:1d:3e:5e:d8:3a:42:5f:a6:d4:d8:d1:db:
db:8d:c5:9d:87:b7:bf:65:66:c6:0e:89:c1:99:f3:8d:ed:bf:
54:11:0e:4e:e7:3c:da:ed:2d:7e:6c:58:a3:65:2d:aa:3b:6b:
9f:5c:72:b4:b9:7d:3e:33:ae:91:77:5d:e2:3b:fd:59:4b:80:
73:0f:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:34 2025 by rpki-client