Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YUHaXxdFvMS6Ze8WivzKNwNUx34.roa
File: YUHaXxdFvMS6Ze8WivzKNwNUx34.roa (raw, json)
Hash identifier: OZbHrMEcKiVGVJQhzkaiv7Rx6HuQRKhQ1PgwAv/zTYw=
Subject key identifier: 61:41:DA:5F:17:45:BC:C4:BA:65:EF:16:8A:FC:CA:37:03:54:C7:7E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194282776333FF4E9EAEB65DF3680D8ACC9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YUHaXxdFvMS6Ze8WivzKNwNUx34.roa
Signing time: Thu 02 Jan 2025 17:54:22 +0000
ROA not before: Thu 02 Jan 2025 17:54:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 89.34.219.0/24 maxlen: 24
89.39.121.0/24 maxlen: 24
93.115.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:76:33:3f:f4:e9:ea:eb:65:df:36:80:d8:ac:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6141da5f1745bcc4ba65ef168afcca370354c77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:ce:02:72:7b:e8:83:7b:8c:60:8f:dc:9b:
94:5f:18:5e:8a:2b:08:b3:c4:f8:b5:3e:53:92:79:
95:08:61:77:98:1d:c6:14:f8:7d:a2:04:21:88:57:
17:1a:39:b7:f9:5b:45:6c:3c:59:35:ca:f7:1d:a5:
be:04:8c:a7:99:ca:9d:b7:4a:bc:ac:1d:16:ae:85:
01:92:51:e3:4a:68:c3:fb:7d:04:2a:b7:f3:ed:6a:
34:45:04:59:d6:fa:d6:02:4c:45:33:46:a7:49:8b:
dc:4d:6f:4f:98:44:e5:26:da:29:6b:05:4a:9f:11:
32:05:bb:ca:42:e6:a0:01:54:09:4d:74:79:ef:c4:
b4:b0:01:7a:70:06:54:90:5a:85:51:2f:28:46:39:
cd:1c:21:3a:73:02:49:1a:e9:4e:ed:7e:70:e5:92:
3c:71:6a:05:f0:02:a5:77:00:c7:5d:f9:41:73:45:
8d:1f:8b:2f:c5:a6:26:b8:da:de:9b:4d:a4:e8:b4:
02:d0:93:16:10:d7:a0:31:85:88:c9:e2:86:fa:45:
fb:0c:29:d2:37:a5:87:61:13:ee:57:e8:29:3e:6a:
c2:63:c0:7d:51:81:c5:49:b0:c4:86:2b:f7:89:78:
08:74:4c:28:98:ad:01:42:aa:fa:53:fb:04:ad:db:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:41:DA:5F:17:45:BC:C4:BA:65:EF:16:8A:FC:CA:37:03:54:C7:7E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YUHaXxdFvMS6Ze8WivzKNwNUx34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.219.0/24
89.39.121.0/24
93.115.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:55:36:cc:f7:c5:0d:6f:82:9b:17:12:61:0c:7f:a7:90:b2:
50:c7:97:25:5c:30:56:af:ba:09:6a:1c:01:a1:ab:01:50:4c:
98:2b:5f:09:64:82:49:f0:d0:e3:f4:ae:7f:bb:2b:73:2b:db:
60:f8:fb:ff:9d:28:ba:60:ce:b7:8d:1b:d3:90:e4:d8:7e:cf:
e7:21:48:95:ac:71:3a:08:df:ac:d2:f4:ab:45:cd:83:2f:06:
0c:c6:08:a8:2b:28:5c:9b:43:58:4b:5d:9e:e7:5d:05:35:cf:
6c:63:0f:47:21:cf:d6:0e:63:f1:cf:bd:33:ce:55:2a:7e:ee:
c3:83:ca:c9:32:02:dd:18:65:38:f4:8f:1a:87:dc:14:31:7a:
67:0d:87:0e:61:c6:f4:7a:f6:94:30:df:4d:a5:fe:99:c1:7b:
83:ec:3e:c1:31:96:b9:c8:a9:45:3c:4d:04:b9:aa:eb:49:6b:
be:ce:d9:f3:c3:39:69:b4:5c:89:0d:55:52:3b:79:79:5d:dd:
b9:3a:47:3e:1e:81:ca:ab:f1:3d:52:78:78:39:a0:ca:43:e6:
52:58:37:1f:07:ea:44:dc:ff:38:1e:32:db:cc:d2:ee:5d:47:
41:89:9e:43:dc:23:c7:fe:dd:fe:99:09:b9:c0:86:6c:7b:c7:
a0:79:2f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:40:28 2025 by rpki-client