Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/m17bWYxF7RkW5RobPkRzDhAI_e8.roa
File: m17bWYxF7RkW5RobPkRzDhAI_e8.roa (raw, json)
Hash identifier: OH/jdp2+9NCsG5wvd500csAts9bNZ74vlfpt5dqCAWs=
Subject key identifier: 9B:5E:DB:59:8C:45:ED:19:16:E5:1A:1B:3E:44:73:0E:10:08:FD:EF
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01955B68F5C8025D907CE0D4627162B10B90
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/m17bWYxF7RkW5RobPkRzDhAI_e8.roa
Signing time: Mon 03 Mar 2025 09:49:20 +0000
ROA not before: Mon 03 Mar 2025 09:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198160
IP address blocks: 89.36.32.0/24 maxlen: 24
89.36.33.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
2a14:6780::/29 maxlen: 48
2a14:6780::/32 maxlen: 32
2a14:6781::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:68:f5:c8:02:5d:90:7c:e0:d4:62:71:62:b1:0b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Mar 3 09:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b5edb598c45ed1916e51a1b3e44730e1008fdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:fd:4a:43:3a:f7:47:d8:ac:46:ad:01:77:
6e:dd:47:99:43:09:5c:06:4f:bd:d3:cd:fc:49:3a:
d2:97:11:b5:45:8e:a5:97:9e:94:82:12:96:18:2a:
77:eb:44:31:db:13:d6:9e:d2:5d:ec:73:82:86:2a:
c3:22:12:50:07:25:78:d7:24:f7:00:f2:b5:fa:8e:
80:ba:07:34:f7:df:e0:28:67:09:c9:95:fe:68:c7:
78:a4:bf:36:88:0a:db:7c:45:27:a7:cc:1d:64:e2:
11:3c:66:46:52:11:fe:af:99:eb:cc:4d:a0:12:12:
ec:a2:c7:62:d1:92:8b:53:76:1f:ac:4f:e5:ae:4f:
07:aa:9e:81:6d:b2:57:d2:5a:4d:72:7f:f4:7c:5b:
71:31:e3:53:ee:9f:d0:aa:8c:97:b2:a5:f7:db:08:
7f:72:ed:ab:4c:e8:50:7c:9e:90:20:84:08:e3:e7:
a3:8c:22:b9:01:94:b8:61:47:0e:df:6e:6d:35:99:
6a:eb:fd:2a:15:b2:4d:43:3d:e4:48:7e:20:2b:6d:
ca:a3:eb:7d:26:a9:6e:5a:1c:5d:c9:49:37:17:f0:
c0:67:d7:3a:65:cd:a2:ec:6e:bd:9a:c0:cc:fc:d3:
5f:10:20:b6:06:73:fe:f3:3e:92:be:41:13:3e:30:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5E:DB:59:8C:45:ED:19:16:E5:1A:1B:3E:44:73:0E:10:08:FD:EF
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/m17bWYxF7RkW5RobPkRzDhAI_e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.32.0/23
185.121.133.0/24
IPv6:
2a14:6780::/29
Signature Algorithm: sha256WithRSAEncryption
47:cf:7d:13:a4:09:0c:6a:49:c6:de:64:20:8a:9c:a4:a1:f5:
ff:38:6b:05:c2:15:71:27:48:e5:c3:2f:55:4e:26:13:f5:84:
22:86:5c:d2:1c:e5:9b:58:13:ed:34:bd:1b:f0:9b:86:7b:84:
9f:eb:8f:50:67:be:b6:46:37:14:9b:66:23:76:2d:88:b2:a1:
f6:45:76:20:4e:ae:e3:01:f6:b2:7e:64:50:7b:3c:da:73:6b:
fe:64:7e:a1:c1:3e:28:9a:f7:47:4c:af:cd:bb:88:a7:ed:d5:
a2:0a:70:8c:ff:92:18:11:57:16:fd:ed:07:0c:e0:83:5d:26:
29:1d:ea:6d:6d:25:62:66:72:a8:dc:bc:77:6f:91:26:47:2d:
6d:d6:37:42:2c:a6:87:58:ea:ff:57:91:da:f5:6d:ef:35:7e:
c3:ec:c7:d9:f2:7b:9b:26:ba:bd:b6:5c:86:70:e4:65:28:e9:
a9:83:29:89:71:51:5d:93:23:91:59:43:f0:a8:a0:f5:ee:9a:
e6:df:b2:2c:a5:42:53:28:5f:91:c5:63:6e:0e:90:9c:88:de:
4b:43:70:5f:ec:e9:16:98:d3:f4:5b:e2:4c:5b:e2:fd:c7:38:
7f:d0:42:96:94:fc:3d:30:15:49:96:f0:35:41:45:ae:5c:e1:
5b:73:c1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:29:22 2025 by rpki-client