Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-c2GPlGgYlbEIZJF6cbTGByqiko.roa
File: 1-c2GPlGgYlbEIZJF6cbTGByqiko.roa (raw, json)
Hash identifier: Olvi4llScu/0a4L4oL7XrHFcqesIOSSnG3bFQCyxUcQ=
Subject key identifier: F9:CD:86:3E:51:A0:62:56:C4:21:92:45:E9:C6:D3:18:1C:AA:8A:4A
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D60BF5DB3B9C9E7791976AA107F338
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-c2GPlGgYlbEIZJF6cbTGByqiko.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 89.43.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0b:f5:db:3b:9c:9e:77:91:97:6a:a1:07:f3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9cd863e51a06256c4219245e9c6d3181caa8a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:52:a9:84:2e:cf:69:91:d6:87:48:a8:f4:25:
90:01:19:2c:87:b5:3b:3a:f4:19:d3:eb:1b:0a:a1:
1f:d1:69:ef:e9:63:84:8f:80:56:6f:da:5d:6c:81:
cd:a2:b1:2b:1f:27:23:af:a5:cb:ef:10:c1:fa:67:
28:56:49:c0:a1:59:85:db:83:17:d3:7c:39:1a:eb:
e3:3b:c0:2a:0e:28:4d:d9:03:ce:9d:b1:41:24:d3:
a9:24:55:0f:b8:04:e9:25:e5:2b:4a:f3:d6:2e:9c:
70:42:85:06:cc:ff:72:14:0e:bc:9f:7e:e3:3a:db:
99:9c:1e:ca:32:d6:80:25:46:8d:b1:c3:e8:31:9a:
5b:c9:f4:38:af:27:76:e5:db:36:41:41:25:2b:2a:
53:92:83:da:80:34:df:12:c5:f3:5b:5f:bc:48:9f:
53:3f:ec:11:51:b6:58:3b:fb:72:5b:60:d4:af:cc:
fe:f4:11:7f:30:7c:d9:67:ae:ae:5e:73:b4:a1:49:
76:5e:06:83:4c:a1:82:dc:df:1b:49:2f:dc:e5:f1:
28:d4:0c:de:6b:3c:07:85:28:12:22:17:21:4c:c5:
2e:f2:e2:4e:eb:ef:25:09:2d:2a:cc:96:33:68:75:
b1:af:13:6c:8c:4a:5e:e9:60:c1:eb:f2:72:2b:8e:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CD:86:3E:51:A0:62:56:C4:21:92:45:E9:C6:D3:18:1C:AA:8A:4A
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-c2GPlGgYlbEIZJF6cbTGByqiko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.47.0/24
Signature Algorithm: sha256WithRSAEncryption
12:fe:e6:e3:73:a0:e7:b9:fd:4d:fa:51:f1:dc:dd:5a:1b:9c:
7d:e2:35:98:7d:94:fe:2e:ae:5b:26:91:3a:dc:7d:5e:39:21:
0c:46:11:ac:39:7a:78:a5:68:05:ac:a3:70:69:92:93:04:fd:
da:44:6c:8d:1f:bc:0b:2b:12:d1:98:3e:27:6b:b5:c5:2b:a6:
ef:a4:a6:e7:ef:14:56:60:80:79:e3:00:f1:ec:1a:60:0e:98:
2e:d3:c1:dd:0e:67:cd:c6:43:59:7c:31:45:c7:50:12:ef:78:
89:d1:50:18:b1:32:1d:83:f8:5d:92:9c:86:d2:07:c2:c7:d0:
6f:e8:9c:b3:68:1b:d8:02:ff:37:b4:14:03:5f:df:64:8f:62:
3e:28:20:87:0c:b6:9b:78:75:3c:fa:f9:e5:3e:d1:b5:74:c4:
06:f2:57:76:03:fd:09:35:fc:02:17:09:86:d9:aa:0b:f2:aa:
0a:f7:4b:98:10:f9:69:d4:e8:bd:11:68:38:d4:1f:21:5e:f6:
da:3e:b7:e8:55:a7:d2:8d:32:74:b1:8d:6a:0e:ec:37:03:88:
12:a2:52:57:99:db:dd:0f:d5:21:ae:44:c5:80:4d:b1:7f:42:
33:4f:81:bc:74:49:88:7c:f6:7a:25:ee:8c:45:1b:25:84:d5:
f0:23:f3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:33:36 2025 by rpki-client