Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/vCbOPN37-7Enm6vsP3-hGOISXDg.roa
File: vCbOPN37-7Enm6vsP3-hGOISXDg.roa (raw, json)
Hash identifier: 7gKAoJeE/xQ9th4073due0jo0EKw0fA+BzapZ9ZOEdQ=
Subject key identifier: BC:26:CE:3C:DD:FB:FB:B1:27:9B:AB:EC:3F:7F:A1:18:E2:12:5C:38
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019423D8063345C49ED865CF444F518F75C2
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/vCbOPN37-7Enm6vsP3-hGOISXDg.roa
Signing time: Wed 01 Jan 2025 21:49:07 +0000
ROA not before: Wed 01 Jan 2025 21:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203936
IP address blocks: 89.34.76.0/24 maxlen: 24
185.240.88.0/23 maxlen: 23
185.240.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:06:33:45:c4:9e:d8:65:cf:44:4f:51:8f:75:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jan 1 21:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc26ce3cddfbfbb1279babec3f7fa118e2125c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:2f:b0:12:45:d1:44:fe:5f:c8:e6:5f:3b:
42:e9:e7:d2:5a:5d:ff:48:05:f5:b6:71:2b:90:f2:
be:bd:67:55:da:67:c2:78:f9:29:f2:c8:9c:c3:38:
33:1d:86:9c:8b:dc:4f:5f:de:9a:ac:be:07:f0:02:
ad:fc:4b:75:66:f1:20:22:61:03:e6:a0:71:4d:54:
cb:39:21:cd:74:4d:2e:87:b1:8f:09:a8:d6:ee:59:
e8:8b:4e:b7:26:38:53:ae:f2:17:52:d4:cc:1e:1f:
23:ba:bc:ea:fb:0a:1d:66:46:d4:f6:e2:c3:42:e2:
a1:96:c4:c3:24:8f:3b:6e:19:ba:dd:b1:71:63:4d:
65:0d:ac:09:9e:8e:12:32:91:df:15:2d:39:cc:08:
9f:9f:3e:6e:dd:b6:02:81:39:47:91:ea:c9:85:d5:
6d:53:5e:1f:ab:cd:3e:15:59:fa:72:35:fc:a2:87:
68:de:bd:2f:31:f3:9a:fe:0d:75:0f:c2:e5:f6:4e:
83:af:f2:04:27:34:c6:92:4f:80:ca:d8:fa:d4:14:
33:96:24:73:74:3a:3b:3a:b5:d2:13:64:e1:ac:1f:
2b:d5:2e:aa:c8:9f:30:91:d5:0d:a9:ef:42:b4:09:
67:5b:d7:bd:29:d4:4b:47:ea:09:eb:11:56:c8:d4:
c9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:26:CE:3C:DD:FB:FB:B1:27:9B:AB:EC:3F:7F:A1:18:E2:12:5C:38
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/vCbOPN37-7Enm6vsP3-hGOISXDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.76.0/24
185.240.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:a6:f9:95:3f:61:85:34:99:c5:2a:b7:93:71:cb:0b:62:68:
90:98:45:57:6a:93:01:a4:b7:4f:13:ce:a5:bf:b8:e4:84:9c:
a5:94:40:0a:69:00:35:0a:bf:ed:4e:56:57:e0:13:2d:d9:ab:
88:6c:bc:37:99:98:36:7c:6f:15:39:d4:de:20:05:74:e6:65:
31:b7:67:5c:c7:98:5e:56:71:12:fd:f9:a7:e4:bf:5a:bf:1e:
9a:58:c1:3b:98:a9:34:65:00:73:26:b0:01:5b:24:53:6a:41:
c3:2c:00:7c:fc:3c:f5:6c:da:85:99:c7:0e:58:07:d9:6a:3c:
89:7d:97:2a:a7:6f:89:1c:e7:12:b3:ac:84:09:0b:17:61:99:
f1:d4:7a:18:80:f6:f1:79:17:a4:29:81:79:29:5f:98:1f:d9:
ac:6b:a3:1e:c4:3b:ca:df:73:bf:c0:4a:3f:7b:d2:40:e0:ce:
1c:db:f1:2e:94:f9:2e:80:19:b5:46:28:db:ee:6d:6d:04:6e:
8e:6b:e4:f7:21:e3:96:fa:4b:32:2b:e5:af:0b:df:d1:97:63:
4f:a0:b5:8f:cb:30:06:2f:23:d2:12:0b:b0:66:3a:b1:2c:bd:
ff:92:1e:44:ab:c6:b0:66:52:36:70:e9:86:4c:05:fc:13:3e:
fc:54:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:40 2025 by rpki-client