Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Csnk3a3ep1Kuhq_uYIPFt9oEx54.roa
File: Csnk3a3ep1Kuhq_uYIPFt9oEx54.roa (raw, json)
Hash identifier: pQI4ia2pZhXHZ1e6yhDMKY3ec6GDJA8BN0tKEQGAjHE=
Subject key identifier: 0A:C9:E4:DD:AD:DE:A7:52:AE:86:AF:EE:60:83:C5:B7:DA:04:C7:9E
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019428267522701CA8607526CBF6381C50A6
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Csnk3a3ep1Kuhq_uYIPFt9oEx54.roa
Signing time: Thu 02 Jan 2025 17:53:16 +0000
ROA not before: Thu 02 Jan 2025 17:53:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214411
IP address blocks: 89.249.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:75:22:70:1c:a8:60:75:26:cb:f6:38:1c:50:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 2 17:53:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ac9e4ddaddea752ae86afee6083c5b7da04c79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4e:a0:8a:85:dd:0f:9a:f8:26:33:b8:14:49:
3d:cd:a6:3b:ad:b6:de:93:57:0d:d4:c4:1e:ca:e1:
3f:a8:28:db:c9:f2:63:3c:ec:b5:c8:2f:ff:8e:61:
c8:dc:c8:f4:c3:de:4c:22:76:ab:1b:22:1e:09:7d:
5e:8c:4e:d4:2f:8e:1b:a8:ee:2d:7c:d0:0c:b0:2b:
6c:96:e1:e0:23:49:f9:a3:66:65:eb:a1:e2:fb:c6:
0a:3a:19:54:cc:53:c6:a7:53:bb:0c:99:9e:3f:31:
00:23:ea:b2:ab:c5:e2:b8:7c:ab:1e:87:de:ba:00:
6f:61:57:3f:e6:7f:29:68:f3:56:84:3b:d8:43:61:
02:a6:95:14:e9:c9:fa:29:51:d4:58:08:bb:04:23:
69:7d:0f:29:92:fe:5e:91:7e:73:58:7c:f9:97:0b:
0b:6f:6a:fc:87:82:74:a9:dc:c7:e4:23:c7:61:29:
7a:df:a1:be:9b:2c:49:74:5c:96:11:b3:db:26:e2:
7e:73:fb:96:1e:51:41:28:8d:cd:2d:95:a4:f8:28:
2c:10:09:b3:85:69:8c:8e:b2:b1:86:1e:56:90:14:
6b:cc:75:1b:d7:2c:80:7b:b4:2c:6e:81:99:c5:60:
41:d8:25:c6:96:77:17:4b:69:f9:50:cc:56:88:62:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C9:E4:DD:AD:DE:A7:52:AE:86:AF:EE:60:83:C5:B7:DA:04:C7:9E
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Csnk3a3ep1Kuhq_uYIPFt9oEx54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:53:e0:a8:b9:10:60:2b:e8:60:5c:41:ef:aa:cd:65:99:3b:
5e:e0:96:12:89:d0:35:e3:a7:34:77:1d:9d:55:85:14:d5:53:
2e:e1:8d:22:2b:f8:49:3a:5c:b9:d6:9d:83:ba:09:95:89:46:
06:f2:a7:b6:df:a9:ae:30:8c:45:8d:11:45:c1:ad:b0:41:a7:
2a:16:a8:e2:ab:b5:37:f5:da:e6:9a:17:ef:b9:1b:4a:e0:c8:
78:60:83:82:ba:98:de:d9:aa:72:aa:c5:9f:3a:ce:f4:ef:3d:
2a:c1:f4:0a:07:3b:dd:89:b5:5e:dd:78:fe:c4:23:24:ed:00:
f7:52:0e:71:11:be:79:94:cf:e2:49:a1:2e:f5:5c:31:f7:5a:
dc:d4:cb:46:a6:d9:f5:71:30:0d:15:e4:61:8c:6b:3f:f7:5e:
9b:41:39:d8:6c:d9:88:b2:6e:b1:6b:2b:9e:30:11:a6:b9:66:
83:29:92:37:0b:48:1b:23:2a:9d:30:df:7b:8e:ad:aa:75:17:
82:d3:e5:38:51:93:53:6b:6f:0a:d8:78:4b:70:9d:fd:e6:68:
1e:81:18:83:39:3d:51:0c:e3:40:b4:46:d0:7a:a2:eb:80:87:
12:65:b3:1d:9a:5c:95:0e:49:f6:0e:33:26:5e:81:34:82:83:
94:aa:c4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:08:39 2025 by rpki-client