Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/I25027nvCvvxspQIMA-_-29u_c8.roa
File: I25027nvCvvxspQIMA-_-29u_c8.roa (raw, json)
Hash identifier: c8OueX1EGFj7ydd80sYSa+JEqyDmMH4B/vwcOtonhuw=
Subject key identifier: 23:6E:74:DB:B9:EF:0A:FB:F1:B2:94:08:30:0F:BF:FB:6F:6E:FD:CF
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 019426D9C0B427F7C1113D296BB08973A0DF
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/I25027nvCvvxspQIMA-_-29u_c8.roa
Signing time: Thu 02 Jan 2025 11:49:52 +0000
ROA not before: Thu 02 Jan 2025 11:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136744
IP address blocks: 45.151.96.0/24 maxlen: 24
94.137.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c0:b4:27:f7:c1:11:3d:29:6b:b0:89:73:a0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 2 11:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=236e74dbb9ef0afbf1b29408300fbffb6f6efdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:3f:ce:03:27:99:52:a9:de:1f:c3:32:5d:
73:59:a5:ab:65:ee:e4:0b:1f:49:10:ef:ad:9b:7c:
26:68:c7:05:8b:8e:2c:da:d9:29:78:d4:98:a5:cf:
f7:cd:2e:66:8d:41:91:c3:3c:60:9a:91:38:d2:6d:
0a:8b:4c:1d:c7:2f:5c:0b:49:19:6c:83:2d:1b:24:
ed:a5:6d:1d:a8:e3:fd:a6:28:e5:26:ba:d4:45:64:
74:18:dc:06:59:7c:d4:06:b3:aa:f0:cf:52:23:e4:
5a:52:68:15:3b:53:4c:38:db:72:d0:62:cf:79:6c:
bb:fe:c8:05:fb:0f:84:59:7f:4f:0b:f4:e7:38:ef:
a9:18:e0:39:6f:6b:b8:03:c9:cd:a2:6a:60:f8:d4:
7b:f0:e3:c1:59:de:09:19:2d:f9:b4:66:1a:d2:97:
d6:23:22:60:83:0e:06:46:3e:c1:0d:f3:8f:35:14:
8f:7f:88:63:c6:78:05:5a:bc:a0:f9:b5:3a:ae:59:
a5:76:69:72:3a:79:af:bd:e2:4b:1f:b5:19:95:85:
53:9a:6b:c7:28:1a:a8:89:33:87:d2:67:1d:e7:1a:
69:79:c0:54:86:c4:0a:51:6d:a2:04:75:b2:5b:75:
65:05:0b:ff:8e:81:e3:d2:31:cb:52:79:fc:ea:ca:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6E:74:DB:B9:EF:0A:FB:F1:B2:94:08:30:0F:BF:FB:6F:6E:FD:CF
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/I25027nvCvvxspQIMA-_-29u_c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.96.0/24
94.137.73.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c1:f4:ad:23:96:b2:d1:76:e9:50:a3:83:57:d4:40:18:9d:
cb:22:81:1a:4d:04:ff:65:68:9d:f0:e2:86:7c:aa:7e:40:4d:
b9:34:d6:47:ad:e3:e9:e7:d3:6f:de:3b:b7:9e:b6:e4:2b:a4:
00:63:16:e5:ba:3a:ad:23:1d:7f:d7:3f:04:fc:49:2f:d9:b1:
86:8f:ea:28:8c:45:cd:3d:10:26:9f:cf:2b:e9:28:16:6a:07:
ec:7f:d2:c1:bf:85:7f:ee:77:6d:ab:cd:47:04:77:de:25:d6:
09:5a:e4:bf:53:79:76:1b:c7:3a:e2:ec:6f:17:57:71:f9:12:
05:63:20:56:d1:a4:a6:88:ae:53:50:40:57:b1:61:2a:c8:0d:
3e:5e:bc:b5:37:2e:5a:ae:03:6e:b7:cb:ca:2f:05:4f:f2:46:
cf:e0:4c:c8:3f:77:3c:53:4e:41:88:d9:bf:65:10:18:b7:68:
de:42:cb:49:1c:d6:d4:e8:b4:6f:83:d7:03:ee:66:84:6f:5c:
0a:eb:2c:2b:b6:63:99:af:dd:b6:67:9c:25:64:d7:39:32:7c:
53:bd:56:40:f1:ef:eb:da:ef:8c:66:09:b0:17:b6:0a:fd:4d:
07:0f:8c:8d:6e:5b:ba:35:36:66:3a:19:b0:65:ce:6e:4d:bb:
b8:c7:b7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:00 2025 by rpki-client