Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/9dTi4wdiI3Tu8z52gakpEQiMUok.roa
File: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (raw, json)
Hash identifier: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=
Subject key identifier: F5:D4:E2:E3:07:62:23:74:EE:F3:3E:76:81:A9:29:11:08:8C:52:89
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 01942067FEB861CCF1A49EC3BD4D3469F3AB
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/9dTi4wdiI3Tu8z52gakpEQiMUok.roa
Signing time: Wed 01 Jan 2025 05:47:53 +0000
ROA not before: Wed 01 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 132.231.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fe:b8:61:cc:f1:a4:9e:c3:bd:4d:34:69:f3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5d4e2e307622374eef33e7681a92911088c5289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:c0:5f:3c:78:ef:b6:65:6d:1f:6f:08:4f:
f0:f1:7c:46:a8:97:d6:05:1d:6c:87:c1:5a:3f:7e:
c3:ac:b7:43:44:ab:98:06:b1:d1:45:1f:fc:e2:9b:
63:c7:0e:c1:12:35:00:f8:ca:30:24:18:ed:19:91:
08:4f:4c:29:bc:f8:6e:98:75:75:3e:79:23:cf:e2:
cd:45:79:d0:9f:3f:e3:99:11:3a:56:ec:e9:79:f2:
d0:d7:21:1a:eb:38:5f:9e:f6:9b:37:6b:be:fe:45:
d4:b5:4f:7a:f3:e3:43:59:29:19:64:7e:51:1e:77:
89:a6:2a:37:98:4a:83:e9:74:77:98:03:56:e3:8a:
4a:a3:1a:09:17:60:c8:97:a6:4a:f5:f1:7a:8b:5e:
0f:5a:5a:ad:6f:9a:9b:cc:62:73:1f:f0:5a:7e:61:
78:60:d0:1c:2c:66:61:64:25:56:f4:4e:ef:c5:27:
17:30:f7:01:5d:54:55:22:2c:80:4f:4e:3b:06:80:
88:02:2d:7a:05:2b:bc:01:f1:e2:c1:58:54:14:31:
f2:63:b0:40:e6:28:64:e4:13:f4:62:e9:04:93:58:
d4:56:51:94:dc:1d:66:ca:b5:eb:11:bb:d9:da:bc:
a3:1f:ea:67:e1:8b:da:cd:e6:f1:86:cf:1d:df:6f:
a3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D4:E2:E3:07:62:23:74:EE:F3:3E:76:81:A9:29:11:08:8C:52:89
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/9dTi4wdiI3Tu8z52gakpEQiMUok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
dd:45:10:db:8d:e4:a6:40:ec:9d:28:1f:26:6b:e8:22:e1:0e:
89:80:f0:d0:e8:39:4e:45:2c:6f:4f:8d:6d:d4:f9:f9:31:3e:
7b:9f:07:24:51:54:30:20:3c:09:b6:51:1e:25:f9:d1:55:f4:
a7:b9:7c:0f:c2:a4:e3:f2:16:95:3a:37:1a:6c:a4:84:81:c0:
e5:1d:2f:83:2a:6c:ee:9e:83:0c:56:f0:0c:78:09:86:71:53:
7d:73:71:1d:31:6e:b4:58:51:d9:6b:74:10:fb:16:d9:71:a1:
0f:2c:d6:af:80:f6:04:a6:08:34:63:e6:be:b0:82:84:98:7b:
bf:b6:7d:87:21:5e:69:54:86:d9:77:f1:03:90:e6:35:d9:2e:
e4:c1:57:4f:34:7a:1b:ee:51:06:7c:be:40:2f:f5:d2:7f:43:
09:25:74:3b:59:2c:47:61:00:60:fe:e7:7d:00:28:a2:62:8b:
10:f8:37:9d:21:68:34:2d:8b:73:89:5f:2b:ee:09:48:e0:4a:
13:ef:f5:a4:b9:13:d3:8c:8f:bd:9b:3c:14:e3:c3:53:49:62:
ab:04:7c:db:b3:c4:fb:dd:24:af:20:d9:2f:3e:48:b5:1e:a9:
07:d7:07:61:f8:6b:03:1d:1f:9b:35:96:3a:37:93:67:7d:4f:
8e:89:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:22:22 2025 by rpki-client