Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/dYTB5uFARs2s4EvY2l6JyFsQr8s.roa
File: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (raw, json)
Hash identifier: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=
Subject key identifier: 75:84:C1:E6:E1:40:46:CD:AC:E0:4B:D8:DA:5E:89:C8:5B:10:AF:CB
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0194282673BAAB249284D0F28FA2FE42A732
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/dYTB5uFARs2s4EvY2l6JyFsQr8s.roa
Signing time: Thu 02 Jan 2025 17:53:15 +0000
ROA not before: Thu 02 Jan 2025 17:53:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211373
IP address blocks: 89.249.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:73:ba:ab:24:92:84:d0:f2:8f:a2:fe:42:a7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 2 17:53:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7584c1e6e14046cdace04bd8da5e89c85b10afcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:d8:1f:7f:46:96:07:c8:a1:d2:2a:95:9c:
3f:c5:70:82:22:3b:bd:35:70:a9:9f:25:dc:8a:e6:
09:56:81:15:fb:52:90:c6:21:f6:d9:be:db:41:ee:
f6:e9:74:d1:62:b7:3b:b4:c5:66:38:6b:a1:37:0f:
2f:96:00:04:5a:bb:24:11:b9:01:37:72:ad:15:cc:
b6:54:4c:50:f1:9e:3f:0d:d4:ef:21:8e:64:0d:9b:
6a:8f:9d:ad:d6:20:c0:9d:69:84:be:fe:8d:52:ca:
b3:c4:46:1c:cf:5d:22:14:a2:70:27:28:31:ac:23:
c4:a7:9c:65:f0:70:0f:e2:6e:01:87:36:55:0a:d2:
7f:6d:c2:92:f4:62:67:76:09:85:23:19:68:33:34:
aa:45:33:ab:ae:14:83:0b:3a:10:87:47:68:11:c8:
9f:ae:f6:f8:6c:59:21:76:af:fe:85:d5:d4:08:92:
4b:9e:99:2c:02:4f:9e:f3:38:23:81:85:67:21:05:
37:f1:95:32:85:5e:00:4c:d2:43:14:f5:11:50:f8:
78:2c:b2:e3:a7:95:c1:a5:4f:f4:6f:b1:87:58:cc:
6b:2c:d0:18:9b:71:36:61:39:fc:a2:d6:86:e4:17:
bf:fa:43:f0:96:2a:a6:78:c9:fb:95:af:b4:c8:6a:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:84:C1:E6:E1:40:46:CD:AC:E0:4B:D8:DA:5E:89:C8:5B:10:AF:CB
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/dYTB5uFARs2s4EvY2l6JyFsQr8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.204.0/24
Signature Algorithm: sha256WithRSAEncryption
68:88:0e:49:0c:70:1f:75:f2:69:cd:e1:b5:2e:a5:47:f4:18:
12:4a:74:74:7b:ce:ad:08:d8:57:ce:3e:db:d5:98:f5:5f:51:
89:c0:ce:ee:58:10:35:de:04:e9:95:43:7e:54:d4:8f:09:ca:
64:94:84:53:6c:75:08:ae:36:08:2b:0a:6e:69:28:21:1a:38:
a5:32:d3:99:3e:a9:d3:31:f4:06:74:b1:be:42:21:a6:81:1d:
30:65:cb:b6:7f:27:5f:fd:cf:1b:15:21:b3:73:81:3c:3b:d7:
3f:0d:98:25:7c:d3:22:03:4c:8e:29:9f:72:93:25:45:98:32:
ff:89:c9:02:3b:fe:1a:c0:09:4c:31:cc:73:d6:81:1f:d7:65:
d7:1a:06:ae:46:e1:f2:c4:3b:c7:36:f6:a6:1c:05:eb:60:31:
29:f3:81:de:0f:b5:d1:62:2b:73:ad:34:f1:07:ba:e9:7a:14:
43:9f:bc:74:80:36:49:8d:ee:1d:1a:51:9c:40:ef:e7:18:bb:
69:b7:6d:3a:ca:4f:45:58:7b:28:28:97:a5:bd:2a:ef:e7:0b:
9d:f8:e7:31:d0:2d:79:bf:8c:08:4c:69:0b:c1:a3:b5:a7:ce:
7d:a7:9c:a8:c3:07:32:c5:47:16:2c:6c:f0:a4:0f:5e:98:8d:
7a:f8:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 18:50:38 2025 by rpki-client