Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa
File: 1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa (raw, json)
Hash identifier: 4UrgxrRXQe+UtWoEsv9eaDsHmSudcco9i9klqNnetCQ=
Subject key identifier: FB:03:12:F6:F6:6F:04:0B:82:28:3C:F4:DC:F4:4A:FE:04:A7:51:F2
Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial: 0194B0E552EFF2AAA729BF2215AB30ABE134
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa
Signing time: Wed 29 Jan 2025 07:10:06 +0000
ROA not before: Wed 29 Jan 2025 07:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 89.19.220.0/24 maxlen: 24
89.19.221.0/24 maxlen: 24
89.19.222.0/24 maxlen: 24
89.19.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:e5:52:ef:f2:aa:a7:29:bf:22:15:ab:30:ab:e1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Validity
Not Before: Jan 29 07:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb0312f6f66f040b82283cf4dcf44afe04a751f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:69:ca:dd:0a:dc:f5:c5:88:2b:3b:ef:96:
bf:33:f9:24:e9:71:df:c5:eb:36:72:be:36:3a:a6:
05:d3:97:0c:c9:8b:2d:48:5d:db:98:a6:37:ba:4a:
92:bc:71:d7:96:50:29:9a:82:ce:1e:45:c7:9c:ad:
10:90:a1:cd:ab:2c:db:bf:30:0c:3b:5c:a2:c8:a5:
1e:93:62:39:9e:10:f9:a4:68:4b:3c:b9:17:bc:3f:
60:6c:03:0f:ca:c4:8d:e7:e2:74:4d:a2:a0:c3:4b:
e7:88:60:c7:89:bf:93:a9:8b:a1:30:94:93:4d:e1:
bd:43:da:9a:73:05:6f:a0:79:22:71:f6:72:2b:d5:
17:02:38:16:fe:08:50:85:bd:86:b0:01:de:63:b9:
a5:7c:8d:bd:61:80:55:a5:30:28:70:ef:5c:49:11:
f8:3f:2a:a1:53:78:94:ad:7b:a7:12:5b:2d:cb:63:
ac:4a:83:6e:09:56:7e:c5:60:8c:95:26:83:82:59:
09:f5:95:94:98:c9:7a:c9:a2:15:1e:9a:0b:84:88:
4f:fe:e8:6f:c0:48:5d:6e:e7:11:13:81:50:de:94:
3c:a6:21:15:ca:f5:dd:31:c7:60:a0:8b:b3:ad:06:
d3:fe:82:f3:83:d3:7d:1c:9d:f7:cf:ee:55:6b:14:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:03:12:F6:F6:6F:04:0B:82:28:3C:F4:DC:F4:4A:FE:04:A7:51:F2
X509v3 Authority Key Identifier:
keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.220.0/22
Signature Algorithm: sha256WithRSAEncryption
55:f5:09:f3:bf:32:49:18:2d:1d:60:13:6a:69:02:52:5b:19:
b5:b5:3e:87:f0:03:60:77:b4:6e:e8:d6:11:54:f8:e0:52:c9:
6f:3b:fb:70:48:b9:58:79:08:0f:bf:39:30:c3:9b:03:22:51:
34:92:10:a8:6b:a1:cf:b1:97:22:17:56:16:51:45:0c:d6:af:
19:b4:88:eb:82:29:fd:2f:47:2b:42:09:2f:a7:b6:e4:2f:f6:
95:bc:b1:77:a4:80:ef:ff:a8:cc:be:42:98:33:8a:81:f4:07:
a6:1b:9b:39:2e:9c:a9:61:42:ad:4e:f7:ee:de:6d:ba:19:3d:
91:4c:3f:e7:48:da:c0:1f:1c:81:f6:5c:67:52:ae:52:69:6e:
ce:91:f7:f9:e9:59:3d:2e:5a:cc:56:3b:a7:0e:b9:0c:35:83:
6f:cb:bf:f5:ab:e3:69:0c:b1:36:4c:1d:b4:8b:d2:f2:98:8b:
55:45:49:90:b7:dc:16:8d:68:e4:58:7f:4b:3a:98:83:4d:54:
49:43:3a:be:8e:3f:4f:85:01:e8:fa:1a:4a:63:43:d4:78:9c:
d5:ab:20:2a:b6:46:90:36:03:ca:3f:b7:4c:43:48:11:65:08:
b5:f3:f3:b2:29:7e:14:d2:77:0e:14:18:d6:58:06:f8:01:43:
84:5d:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:46 2025 by rpki-client