Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_NcltatYeskVsJ2GmWYQEOtBuzU.roa
File: _NcltatYeskVsJ2GmWYQEOtBuzU.roa (raw, json)
Hash identifier: EFUSsiFNwzbPc+B6nty0bVOEIqERfMB5igPoEOdQ1Ow=
Subject key identifier: FC:D7:25:B5:AB:58:7A:C9:15:B0:9D:86:99:66:10:10:EB:41:BB:35
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019427B42E2BE478C9270934ECD3F939CADB
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_NcltatYeskVsJ2GmWYQEOtBuzU.roa
Signing time: Thu 02 Jan 2025 15:48:27 +0000
ROA not before: Thu 02 Jan 2025 15:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2010906
IP address blocks: 89.116.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:2e:2b:e4:78:c9:27:09:34:ec:d3:f9:39:ca:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcd725b5ab587ac915b09d8699661010eb41bb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:80:6a:63:7b:77:91:38:ab:fc:03:4d:9e:
d2:16:29:1a:c5:d8:16:a8:a1:d0:66:5a:d7:9a:6c:
8b:85:36:56:69:e9:62:76:72:26:ea:1b:e2:af:fa:
78:81:91:34:da:98:cd:8b:7b:84:31:c1:7f:67:dc:
d3:33:15:b3:03:ba:28:6e:b3:bd:99:f4:b9:09:01:
21:3d:ba:91:70:6a:a6:f9:b0:cb:36:03:c2:41:db:
06:ef:e8:85:5f:c0:16:74:80:ea:56:ce:4d:6d:b3:
2a:e4:d2:00:50:9e:1c:ef:fc:f9:8d:6c:d7:5e:66:
ea:38:b5:d6:3c:1f:de:ae:e2:f5:67:a8:cf:88:58:
fe:df:fb:d3:91:2c:2d:63:6a:18:a2:a2:9c:e5:66:
37:0d:b6:e4:47:d2:fb:a2:54:5d:d2:e4:e2:6a:f7:
01:96:dc:a4:85:f2:a3:dd:3f:85:45:5e:ab:c6:81:
66:55:33:c8:cb:1c:f3:59:58:e9:29:56:36:39:8c:
ff:6f:1c:fa:4a:fd:63:a4:36:44:41:ff:81:a7:19:
a9:72:59:ab:e2:a5:d5:38:c2:f5:b8:b9:ff:2e:d2:
f1:b1:83:cb:37:3a:cc:da:0c:07:cd:02:03:3f:65:
cd:1a:df:aa:8a:79:7d:12:7e:ee:40:b9:34:81:b6:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D7:25:B5:AB:58:7A:C9:15:B0:9D:86:99:66:10:10:EB:41:BB:35
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_NcltatYeskVsJ2GmWYQEOtBuzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.97.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e9:25:e8:11:5b:2d:cc:19:25:b5:0d:79:67:6e:b9:4f:79:
bc:51:c1:f4:97:60:1f:da:e4:8d:be:a7:83:56:95:98:18:8b:
a5:89:ef:df:da:e7:55:c6:bc:8e:7b:cf:6c:09:c3:d4:d6:a1:
96:cf:ff:66:d4:5e:d1:cc:e8:90:ad:cb:81:a7:54:92:d8:51:
ea:85:06:9b:3a:dd:42:16:2a:b3:a4:8f:12:27:b0:d0:34:3a:
ab:53:ff:3f:08:d7:f9:df:07:6c:2b:5b:04:e7:c9:21:bb:57:
28:44:1c:db:a2:a1:1b:16:93:cc:97:58:22:2f:8f:e9:d0:39:
94:04:7e:ee:b9:cc:4d:8a:cf:f2:af:ee:ab:33:1a:0e:c9:28:
a0:aa:c2:4d:f1:98:49:fb:7e:57:a3:13:97:69:79:81:a3:4a:
6a:40:d6:9c:22:f7:3e:ef:cc:e5:07:39:f4:58:1c:18:73:e1:
db:7d:9b:06:64:87:2e:f0:d1:77:6e:08:95:91:3d:d4:05:00:
78:82:d5:aa:f9:21:66:92:c9:09:a3:8c:e5:1f:12:d2:b7:5e:
57:d0:41:fb:94:91:8c:3d:8f:04:60:32:de:2c:e5:37:58:7f:
2a:8d:e9:dd:47:f5:d7:cf:60:9d:90:fa:d6:4e:23:be:8b:2b:
2b:aa:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:52 2025 by rpki-client