Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa
File: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (raw, json)
Hash identifier: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=
Subject key identifier: 69:65:80:DF:E1:EC:EE:78:3F:18:24:C7:20:39:B0:43:94:63:6D:D8
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 01942067E2ACD4CCE37474D0BDEBC7FAF755
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa
Signing time: Wed 01 Jan 2025 05:47:46 +0000
ROA not before: Wed 01 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49434
IP address blocks: 89.234.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e2:ac:d4:cc:e3:74:74:d0:bd:eb:c7:fa:f7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696580dfe1ecee783f1824c72039b04394636dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c9:50:b8:35:bb:16:ff:52:15:20:c3:0a:22:
74:aa:f7:18:1e:3b:25:06:47:75:30:a4:8f:db:b6:
f7:87:e7:cd:82:c7:bb:59:f6:0f:b8:ef:7c:e6:eb:
f9:54:a2:b2:ce:b2:d5:f2:a7:99:cf:0a:f5:88:ba:
4a:f9:d1:b6:d1:b3:2b:34:91:f5:e1:86:a8:75:88:
7d:22:e5:13:5b:74:9e:5f:2f:ff:7b:3f:6b:1c:a2:
8c:d8:e0:9b:09:6d:28:fb:b7:bc:66:8a:cf:49:49:
cd:1c:3d:e0:f4:93:9e:a5:6f:7c:44:ec:80:38:67:
d6:05:4f:e1:0d:63:d8:14:0f:c9:a6:9d:43:9f:98:
3a:a7:bc:91:24:24:22:b6:2a:c6:b0:f0:d6:2d:80:
23:fe:69:59:61:cb:79:69:d4:5a:7e:88:d5:31:d0:
25:e8:86:b5:b4:cf:12:85:b7:ed:ec:c4:b1:80:c7:
72:6d:c0:4a:0f:43:40:c3:96:4c:5c:0d:37:ef:ec:
cf:eb:56:5d:e4:a8:bc:3c:0e:89:7d:c5:9e:51:32:
53:02:a8:52:e9:b7:97:27:c0:0a:d3:3c:e0:af:70:
ae:bf:a0:38:46:c4:c3:82:8f:75:ec:f4:ae:4b:a0:
f3:a6:3b:33:cc:71:2e:31:c7:7e:d9:29:ae:c5:b9:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:65:80:DF:E1:EC:EE:78:3F:18:24:C7:20:39:B0:43:94:63:6D:D8
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.190.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:17:f2:99:c0:43:e8:ea:84:cd:a6:bf:14:b3:c2:2d:c1:9a:
a9:40:4e:28:2f:93:06:b7:ad:9d:39:7b:11:ea:d8:97:bb:e9:
93:2b:23:ae:3d:7a:a6:d4:aa:33:74:6a:97:de:dd:fe:95:0a:
7a:26:a0:d7:30:dc:96:e1:5c:53:74:38:54:63:b3:92:ba:aa:
41:ff:bf:32:58:6c:71:55:83:e7:cd:aa:3e:b7:39:8e:c6:ba:
bd:ae:50:a0:1c:cb:b6:59:cc:3d:8b:d6:f7:2a:44:ac:72:d4:
40:f7:e9:4c:d7:0f:37:4d:fa:09:a1:88:bc:38:7e:ff:85:3a:
c0:3b:53:f5:25:12:b5:ed:6b:52:be:b0:0e:25:5f:cc:57:d9:
5f:8a:7e:3f:4c:9f:08:96:e4:ba:ef:2e:89:b6:04:bb:8e:9d:
6a:2a:a3:38:d9:0d:b7:00:e6:5e:ec:6a:6e:0d:20:66:72:98:
3c:6c:aa:f6:8e:2e:2d:84:a8:7a:f8:d4:f5:37:fc:93:53:f8:
99:08:69:5e:18:b8:76:21:0e:e3:5c:13:d3:4f:a6:f8:a9:9c:
a5:2c:8d:80:5a:19:d7:4b:17:d0:8a:e4:66:59:88:57:0a:2d:
94:57:bc:cc:11:3f:d2:f7:48:c7:98:f7:9a:30:0f:91:1a:bf:
9a:75:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:26 2025 by rpki-client