Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa
File: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (raw, json)
Hash identifier: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=
Subject key identifier: B7:C6:D0:C8:26:86:E4:13:7E:37:81:77:37:1D:F4:28:7E:60:16:A5
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0194282674485C6DFF4D7540EB602A337B34
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa
Signing time: Thu 02 Jan 2025 17:53:16 +0000
ROA not before: Thu 02 Jan 2025 17:53:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 89.249.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:74:48:5c:6d:ff:4d:75:40:eb:60:2a:33:7b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 2 17:53:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7c6d0c82686e4137e378177371df4287e6016a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:e1:11:f0:ec:25:3f:e1:d6:12:80:dd:60:
31:04:42:6a:15:76:da:3b:d1:3a:70:66:60:91:46:
72:82:ee:3d:6d:2e:08:a6:e8:1f:81:ba:0c:7d:54:
9a:07:c6:75:a9:44:6c:08:e0:8b:81:b9:49:b4:3b:
57:3e:a5:a1:63:27:ac:5b:90:42:d0:3e:f4:c5:44:
71:e3:f5:45:46:ca:4e:4f:46:e3:5c:94:35:26:40:
00:7a:cd:3f:7b:4d:b5:c6:d1:19:b8:2c:d5:88:2a:
53:8c:07:5b:5a:df:81:7b:5b:7e:61:2f:ef:28:73:
f1:ea:7c:00:5d:b0:de:b9:f9:0c:5a:09:b2:4c:e5:
dc:31:03:54:65:c5:85:ee:35:d9:13:31:52:6b:f7:
82:18:f2:14:93:e0:3f:b1:61:ac:0c:61:7e:c0:49:
a7:6d:bd:0e:8b:b0:1e:ff:97:57:4a:0f:ba:63:63:
d9:57:20:07:b0:6c:f7:ac:56:82:57:0b:38:09:a8:
18:0a:86:8c:56:09:82:60:25:24:74:8f:79:9e:52:
4d:38:e6:62:06:10:76:89:57:4b:6c:06:89:5a:96:
08:2b:ae:4a:7c:37:92:2a:72:06:d9:ef:a0:52:57:
fb:33:7d:72:d1:98:a6:e6:75:fa:e3:47:92:ce:38:
74:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:D0:C8:26:86:E4:13:7E:37:81:77:37:1D:F4:28:7E:60:16:A5
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.204.0/24
Signature Algorithm: sha256WithRSAEncryption
71:dd:c8:d8:0c:3f:d3:42:8e:1f:11:8c:29:d8:96:f6:58:e8:
a7:7e:1f:53:f3:1c:66:c1:7e:02:d6:09:85:a8:a9:9d:af:d4:
3e:72:c8:dd:3c:5d:93:6f:95:a5:86:93:1d:0e:0e:b7:34:41:
4b:fb:28:c7:c0:18:3d:20:31:53:2b:de:cc:d6:ea:96:0a:5e:
60:47:e9:ad:df:b3:58:08:1a:87:1c:7c:e9:2e:ff:d8:80:ea:
38:57:4e:f3:f5:92:aa:10:ff:e6:3a:a1:e5:9d:5d:cc:0f:a1:
da:fd:ec:bb:ea:2f:a7:a1:f5:ee:80:99:d9:29:56:e0:fa:65:
92:15:82:5e:83:f6:4c:c7:25:37:80:f2:6e:66:10:a4:94:e4:
97:f0:bf:c4:a5:16:07:de:80:3e:5e:db:6b:e8:13:43:e7:03:
30:5a:03:1b:19:b0:c8:48:c0:51:cc:77:5d:62:f6:be:7f:93:
50:0c:a2:5d:87:f8:c3:30:09:d4:68:9a:cb:86:0f:c6:da:45:
e6:10:2f:47:06:c8:de:82:1c:9f:4d:31:ba:d6:05:00:4c:6c:
ef:16:83:e7:ca:ce:03:db:0b:c9:a4:8f:09:91:ae:32:2a:78:
09:ab:f7:47:c6:d7:f4:e8:5a:6e:04:01:39:a1:f0:27:6a:69:
f1:52:c3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:08:34 2025 by rpki-client