Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/9VwiwUj_IGIUqg4ye8UxAOO6D9Y.roa
File: 9VwiwUj_IGIUqg4ye8UxAOO6D9Y.roa (raw, json)
Hash identifier: NnxEfPp852isbiSy7sr8rgaQ1hDoY4s+bvfFdDqg9W8=
Subject key identifier: F5:5C:22:C1:48:FF:20:62:14:AA:0E:32:7B:C5:31:00:E3:BA:0F:D6
Certificate issuer: /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Certificate serial: 0194228E13254F23AD3854C0C82B86AA9B59
Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/9VwiwUj_IGIUqg4ye8UxAOO6D9Y.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 37480
IP address blocks: 80.89.176.0/24 maxlen: 24
80.89.177.0/24 maxlen: 24
80.89.178.0/24 maxlen: 24
80.89.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:13:25:4f:23:ad:38:54:c0:c8:2b:86:aa:9b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f55c22c148ff206214aa0e327bc53100e3ba0fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:e8:48:cc:58:71:99:04:ee:60:3e:61:97:
0f:01:80:12:db:7c:4c:bb:3a:2f:7d:79:6b:48:0b:
36:16:c6:c9:47:79:e2:ec:14:76:b7:22:d5:0c:97:
02:d8:96:e1:47:85:83:dc:d4:4d:f4:b9:9b:9d:c4:
6c:b0:22:b1:de:f1:6e:58:c6:31:64:94:1c:6d:c2:
ed:12:40:e1:fc:3d:66:fb:9e:93:0a:76:ac:b6:cc:
5e:ec:55:4f:17:86:5f:d0:9a:1d:29:3f:3f:c5:05:
f8:c4:81:bb:73:e3:3b:b3:f2:4d:26:67:0e:64:03:
72:c5:15:53:fc:75:48:8e:a9:f4:7f:f4:60:8a:ce:
83:86:15:a1:00:f4:a4:bd:48:6b:15:f6:d9:40:ff:
81:fd:06:96:b8:cf:2b:af:0f:1c:7f:3a:e2:2c:c2:
71:95:23:f8:41:c8:6e:2c:7c:0f:d1:b9:0d:4f:0a:
7b:b0:ff:c6:c5:3e:df:98:0c:2f:ed:15:4e:d0:5c:
ed:a4:7f:15:79:c8:b5:c2:d8:b5:31:5c:1d:52:60:
d6:35:f1:f0:f4:bf:41:cc:4f:bf:1c:d4:56:b5:cb:
de:bc:59:5d:ad:86:6e:f8:93:36:45:73:47:10:f7:
01:1d:2c:82:e6:90:7b:bc:2e:48:c3:20:0b:3d:ef:
28:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5C:22:C1:48:FF:20:62:14:AA:0E:32:7B:C5:31:00:E3:BA:0F:D6
X509v3 Authority Key Identifier:
keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/9VwiwUj_IGIUqg4ye8UxAOO6D9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.176.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:0c:01:56:81:5f:fb:f3:4e:75:2e:07:88:1a:e4:a7:8c:03:
fd:cf:f1:2b:2b:d7:4c:b9:a7:8f:e2:55:2d:4d:63:c4:ac:39:
0a:cf:75:53:ab:d4:a4:57:5f:01:c0:0c:47:2b:6d:fc:a9:5a:
48:d7:0f:47:12:91:73:3d:81:25:13:9b:4a:48:f8:78:d1:4e:
36:1d:07:6c:34:43:3f:2a:0c:75:e5:2d:70:bb:27:3b:03:ee:
01:81:5c:98:ac:a5:27:1d:65:fc:d3:57:15:33:de:fb:a0:b9:
87:23:0c:bc:64:bc:c6:22:37:70:d2:c4:35:7b:6c:08:79:b7:
2d:7f:f3:94:4c:de:10:10:ae:00:4b:d9:d3:27:4b:d2:30:a8:
05:03:64:0d:dc:3d:06:92:ad:f6:60:91:67:5a:c5:e9:2d:f7:
d1:83:43:ec:05:e6:97:5b:cb:cb:ae:91:18:f5:a3:59:9f:5e:
3d:29:69:06:02:a7:b0:3a:37:f4:98:90:ad:a3:f4:5e:ae:d5:
cd:34:6e:55:97:03:e2:dc:ee:15:6b:a3:fa:8d:35:5d:45:40:
aa:59:53:5a:cf:6d:56:1c:14:73:c6:73:a5:1a:42:92:95:e7:
06:97:80:10:67:46:bf:ed:d6:fe:a7:dc:01:59:bd:f0:d2:ad:
26:d6:b3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:08 2025 by rpki-client