Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/57uU1mBBwf2NTWvRUYQ88syCG_0.roa
File: 57uU1mBBwf2NTWvRUYQ88syCG_0.roa (raw, json)
Hash identifier: 29c5vB9J3vlsLvhEYhn9hPcXbpkgWlHiPuRjoYcpg3A=
Subject key identifier: E7:BB:94:D6:60:41:C1:FD:8D:4D:6B:D1:51:84:3C:F2:CC:82:1B:FD
Certificate issuer: /CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Certificate serial: 019421B1F471155FE650FECE7C24C8BF8A6E
Authority key identifier: 2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/57uU1mBBwf2NTWvRUYQ88syCG_0.roa
Signing time: Wed 01 Jan 2025 11:48:18 +0000
ROA not before: Wed 01 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209626
IP address blocks: 89.106.200.0/24 maxlen: 24
2a12:5240::/47 maxlen: 47
2a12:5240::/48 maxlen: 48
2a12:5240:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f4:71:15:5f:e6:50:fe:ce:7c:24:c8:bf:8a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7bb94d66041c1fd8d4d6bd151843cf2cc821bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0f:c0:b4:af:f4:a9:e1:5e:da:5f:7e:eb:1e:
ac:d3:b6:b7:9e:f9:2b:be:1b:1c:d3:25:8c:42:c0:
4e:a7:66:74:10:b9:3d:fd:2b:b4:ab:61:68:7e:d0:
c2:be:6f:bd:58:bf:1f:90:f6:bf:c6:12:4c:ff:70:
74:38:19:3f:4f:e5:7c:df:c6:97:4b:f8:aa:0d:c2:
af:10:5f:97:f3:c0:3f:6a:c2:b6:0d:bf:41:b5:c9:
f0:11:b0:30:9a:76:b1:b8:a5:b0:de:31:94:a3:bf:
89:91:d9:26:cc:0c:e1:d5:58:be:90:aa:f7:18:db:
d2:78:d1:67:f9:9e:a6:be:b9:c9:42:e3:05:0f:5f:
07:a9:6e:9e:3b:72:90:f5:af:7e:e2:d4:e5:af:42:
ec:f9:f8:61:36:81:21:71:5e:81:4b:8b:8d:90:25:
0b:fd:a5:98:b6:2e:47:1a:f6:04:0e:fb:d4:aa:b2:
80:a8:db:14:6d:19:75:05:fd:18:48:0f:ab:e9:d9:
99:06:0f:50:79:e3:2a:08:ae:e8:0f:b0:34:1b:1c:
0b:ed:73:f3:3d:4c:8a:fc:14:d8:2a:fd:69:ea:74:
8a:12:19:8e:51:7b:0a:52:0d:11:62:c9:20:c9:6b:
6d:fd:7f:c7:da:8c:50:13:78:09:fd:2d:c7:82:99:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BB:94:D6:60:41:C1:FD:8D:4D:6B:D1:51:84:3C:F2:CC:82:1B:FD
X509v3 Authority Key Identifier:
keyid:2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/57uU1mBBwf2NTWvRUYQ88syCG_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.200.0/24
IPv6:
2a12:5240::/47
Signature Algorithm: sha256WithRSAEncryption
c8:48:40:10:b2:81:13:5f:dd:4a:0c:ac:49:84:66:d3:e3:1d:
4a:47:89:0b:2f:3a:0d:8c:4e:c2:b2:1a:0c:e8:c4:6f:37:9c:
19:59:e6:3a:e8:ae:ab:23:96:67:32:9a:d1:10:14:6f:03:e4:
52:5b:f6:a0:e5:d3:25:13:dc:f9:87:62:4c:27:44:d6:bc:b5:
b4:88:d2:20:6e:63:22:4d:1b:0c:0c:e0:2f:d8:85:01:39:f1:
05:fa:2c:6f:a4:c1:95:3c:a4:4b:41:62:89:76:fe:ca:46:a1:
9f:11:38:6f:21:b4:b5:a9:ae:12:d8:df:b3:9b:44:31:6e:59:
1a:02:98:41:11:3e:14:32:55:0a:da:9a:ed:15:f3:2f:0e:b8:
f0:ce:17:85:64:54:63:b1:2a:eb:c5:a6:09:7c:ae:42:6f:58:
cf:72:b2:25:4d:94:22:e9:17:df:5e:d2:56:94:4e:b0:cd:31:
d4:c9:ba:e8:cc:33:db:e3:22:55:fc:cd:88:0a:d0:ac:0a:31:
79:97:e7:f7:84:1c:8b:39:1c:fc:3d:ae:df:f3:61:06:01:ea:
02:15:53:6f:2b:99:52:3f:0b:2f:a5:dc:cc:c6:fd:68:f4:d9:
88:c1:a9:b2:72:af:a4:63:0d:66:cc:7a:86:b2:3d:af:00:aa:
c2:aa:2e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:53:42 2025 by rpki-client