Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iuPgovh9iL50RIX8r6dt7WuJEkY.roa
File: iuPgovh9iL50RIX8r6dt7WuJEkY.roa (raw, json)
Hash identifier: 7hXlEI0r+aSs0YKAQGy5sqXBwnmQNzscpxA2pUcYDFI=
Subject key identifier: 8A:E3:E0:A2:F8:7D:88:BE:74:44:85:FC:AF:A7:6D:ED:6B:89:12:46
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428275BF18BF74314286CBE739A14FFAA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iuPgovh9iL50RIX8r6dt7WuJEkY.roa
Signing time: Thu 02 Jan 2025 17:54:15 +0000
ROA not before: Thu 02 Jan 2025 17:54:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 89.34.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:5b:f1:8b:f7:43:14:28:6c:be:73:9a:14:ff:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ae3e0a2f87d88be744485fcafa76ded6b891246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:cd:95:85:99:ca:6b:08:ad:a6:83:30:b7:
72:98:3c:5a:b7:ae:1a:4a:e6:32:0d:93:f0:18:d6:
2d:bd:dc:cf:3c:ea:26:61:aa:60:db:c9:be:94:c8:
c8:cd:98:8d:e1:df:ff:ad:da:13:65:16:62:a4:d3:
b5:5f:0e:07:26:c9:15:3e:bc:8f:73:28:ac:1d:b8:
e9:4c:e1:8e:eb:61:c6:3a:97:e7:a9:29:bc:0a:82:
e2:40:5b:b2:44:67:d1:19:d0:4d:e2:10:64:11:4e:
54:48:c1:bf:55:01:24:9e:68:55:a3:35:f3:51:94:
72:69:e1:02:4b:92:7a:17:f4:b3:64:0c:55:b4:90:
1f:92:53:f6:c4:e5:53:c6:33:e3:78:3b:d5:ed:6c:
4f:94:18:aa:c9:54:a7:9f:6a:6e:a8:b2:82:97:3e:
ce:94:0a:86:a3:cb:a2:9b:56:e8:44:a8:6e:55:da:
aa:b1:cd:59:33:fe:38:4c:c9:fe:71:49:2d:f5:8c:
57:05:68:bb:88:86:e4:82:9c:e2:d0:56:e0:a5:df:
51:08:81:90:15:18:e8:20:e6:b3:06:fe:48:cc:aa:
fb:bb:11:aa:1f:be:e4:90:a8:71:4d:94:18:a2:90:
97:4c:f5:62:9a:a0:8c:ac:c2:d5:15:b7:62:8a:32:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E3:E0:A2:F8:7D:88:BE:74:44:85:FC:AF:A7:6D:ED:6B:89:12:46
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iuPgovh9iL50RIX8r6dt7WuJEkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.202.0/24
Signature Algorithm: sha256WithRSAEncryption
89:27:8e:54:b0:f9:ef:3a:a5:2c:1f:db:b0:ed:f5:bd:e2:08:
45:d0:57:5a:63:43:38:a2:77:61:8e:0b:fb:8a:66:56:d7:8a:
c8:65:c3:a8:c9:5c:b8:0c:f2:0d:28:ef:5c:56:dc:86:52:56:
b9:95:af:7f:84:61:b2:1d:ba:5a:ad:6d:1a:30:c0:ff:5d:e8:
a7:0e:d6:a2:46:d2:37:88:40:0c:b8:87:65:da:8a:ca:41:38:
73:3a:e3:4d:fc:06:e4:a9:c2:a9:43:69:a3:58:a0:0d:9f:64:
d7:d8:37:79:9b:53:dd:58:98:eb:5b:b7:47:e5:3d:9f:6d:40:
38:e0:bf:a5:1a:25:4e:84:e6:84:08:75:cf:a8:be:e0:e6:85:
ce:a1:d9:ef:7b:d4:fa:99:34:5a:cf:5d:6e:8d:81:5b:41:27:
79:1c:91:1a:00:c8:ee:30:44:fb:81:30:3c:71:5a:1b:e2:46:
8b:0f:52:ec:3c:d7:e2:f9:07:97:c8:e6:18:a1:b9:c6:52:02:
ad:b4:34:af:f6:59:7d:e6:bb:aa:74:24:a3:3f:bb:30:7a:28:
39:c5:b6:c2:67:25:e1:3b:c0:03:1a:1b:85:7d:c6:58:9a:bc:
b8:f3:d3:22:ba:b5:f2:01:59:df:8f:f3:45:13:72:53:f1:f1:
db:35:84:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:49:36 2025 by rpki-client