Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/l4Nxoz018EVIoP5MUPd07fv1-eQ.roa
File: l4Nxoz018EVIoP5MUPd07fv1-eQ.roa (raw, json)
Hash identifier: RvxORGv6iV+mwPwIrCxORLg7ZBR+nmnmG8KEYZj6K84=
Subject key identifier: 97:83:71:A3:3D:35:F0:45:48:A0:FE:4C:50:F7:74:ED:FB:F5:F9:E4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194609C361D3EC192FB7D32F6B3E39ABE4A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/l4Nxoz018EVIoP5MUPd07fv1-eQ.roa
Signing time: Mon 13 Jan 2025 17:00:37 +0000
ROA not before: Mon 13 Jan 2025 17:00:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214309
IP address blocks: 89.35.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:60:9c:36:1d:3e:c1:92:fb:7d:32:f6:b3:e3:9a:be:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 13 17:00:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=978371a33d35f04548a0fe4c50f774edfbf5f9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:f0:c0:60:51:fa:a2:99:af:f1:e8:0a:a2:
10:66:07:8b:76:5a:d7:a7:f9:48:5e:7e:72:b7:ac:
c4:53:96:41:f2:ab:d1:c1:ce:66:99:2b:58:72:1b:
d0:06:e7:00:7a:eb:ad:e3:76:8e:c5:db:b7:78:71:
b8:78:75:6a:06:86:11:f5:a1:85:53:32:f2:a4:c7:
3e:f6:e6:5e:fd:c1:6a:bc:e1:0c:f4:c5:cb:f9:46:
63:1c:94:0d:33:f4:9d:01:23:ae:32:0a:03:ef:f5:
d9:a0:4a:bd:8f:1f:34:31:a6:0c:2e:32:ed:c9:a3:
db:73:6b:91:47:af:fe:a2:ba:2d:21:f9:a6:aa:e0:
e7:f1:d8:f3:9a:6a:db:24:d8:28:f8:aa:8e:4d:e2:
97:4a:25:e8:0e:be:a2:dc:6c:e7:0d:58:b9:55:9b:
f3:10:7e:c2:17:b1:a2:42:eb:6b:c6:ac:a6:19:61:
c5:d4:ec:9b:d0:93:a1:1c:2e:bb:78:ac:7d:dd:54:
83:53:92:b9:4d:e1:fb:cb:d8:2c:34:60:ae:ab:50:
ce:13:2e:2d:35:80:3e:a0:32:35:be:4f:03:01:15:
ed:6b:f0:02:42:f8:78:a4:36:30:8f:6d:0c:1a:97:
bc:d1:d6:b4:7e:3e:f6:b0:61:54:5e:a5:88:66:7d:
0c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:83:71:A3:3D:35:F0:45:48:A0:FE:4C:50:F7:74:ED:FB:F5:F9:E4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/l4Nxoz018EVIoP5MUPd07fv1-eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.130.0/24
Signature Algorithm: sha256WithRSAEncryption
64:70:69:97:33:fe:42:d4:1a:bb:e8:51:14:88:d7:f7:19:41:
c3:df:15:38:12:fe:d9:50:c2:2d:36:69:13:48:77:6c:da:a2:
1d:c8:b8:2c:28:d9:3e:55:a0:b3:e4:e5:2b:c4:ad:31:06:85:
3f:68:3e:9d:3f:d4:6d:0f:c0:69:8b:57:32:e2:c7:3c:f6:21:
d1:eb:1f:05:76:03:d0:04:cf:b2:a3:7e:59:b3:32:8d:4c:b4:
18:16:3e:9c:fb:fd:38:01:10:53:18:d7:72:bb:71:2e:ad:aa:
01:8e:6f:54:9d:80:cc:fe:9a:df:3f:a8:28:c8:0d:a5:fa:12:
9f:bd:ff:53:68:8b:3e:c3:fb:76:eb:8b:59:91:0e:bb:d4:46:
b2:de:3e:4e:8e:ff:03:8e:05:e7:43:c0:73:92:75:64:86:ef:
e3:7f:69:14:89:e9:44:de:d8:dc:33:49:72:0b:1c:6e:d5:68:
ba:dd:76:a9:4d:d6:27:b3:f5:eb:c8:c0:81:6e:6d:7a:98:53:
24:d2:13:14:7a:37:2d:6e:e8:db:17:9d:56:2a:a4:32:1a:7e:
f2:26:3c:0c:e8:bf:a3:48:bb:3f:fe:3e:c7:5b:c7:e0:c9:84:
2f:5f:b0:6f:ca:8b:7c:34:ac:59:ca:6a:e4:1b:8a:1d:4a:16:
61:40:8c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:58:13 2025 by rpki-client