Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa
File: FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa (raw, json)
Hash identifier: /WpBV6VXQYMepV5lfUa4zJ1OtPuJRJ1gNT7mbz//kPY=
Subject key identifier: 15:5F:54:DD:8B:F6:23:BF:F6:F7:DD:BF:4E:EE:26:06:22:10:16:52
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 0194236A3BF754382F1CD222C704D73CB3EE
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 89.111.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3b:f7:54:38:2f:1c:d2:22:c7:04:d7:3c:b3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=155f54dd8bf623bff6f7ddbf4eee260622101652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:92:82:8e:c6:42:87:50:05:76:62:26:f1:
c9:c1:f9:eb:de:8f:26:65:6f:67:ca:15:1e:1a:9b:
fb:ef:9f:ce:88:7d:2f:7b:f8:81:83:8e:42:e4:a7:
ad:1e:d2:09:13:6a:36:7d:5f:e3:c2:93:f8:36:87:
77:98:d9:a6:3c:76:47:63:fa:a7:6c:52:ac:f2:9a:
6c:c7:cf:b7:e4:42:2c:e1:66:e2:3f:5f:72:f4:6c:
a5:33:a0:da:47:4d:6c:21:a6:04:7f:a5:a8:4a:32:
d5:b0:d6:e3:16:5f:59:d7:18:38:da:14:49:78:91:
2f:12:a1:9d:29:5d:34:7c:69:8f:a1:6b:df:a1:0b:
f7:da:55:6f:d5:a3:82:e9:07:39:7b:00:71:72:a6:
02:ba:33:a9:38:f0:42:c4:9f:15:51:5f:70:5f:6d:
22:5f:99:ca:6f:07:24:16:cf:f4:bd:61:8e:e1:73:
ca:09:6e:5d:af:79:7e:61:71:bc:e5:49:49:03:b0:
10:63:15:06:26:2f:39:93:fa:df:54:18:e2:90:f4:
f7:d1:02:16:12:16:48:5f:98:6a:b4:ac:d6:be:7c:
50:ef:03:ec:5b:fe:ce:8f:dd:3a:51:b8:f8:26:2b:
4e:53:f3:6e:76:d7:fb:e9:f6:f7:62:97:9c:3e:93:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5F:54:DD:8B:F6:23:BF:F6:F7:DD:BF:4E:EE:26:06:22:10:16:52
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.111.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:90:67:21:98:65:27:f1:7b:13:0b:09:45:6e:43:c2:3f:18:
56:a2:75:70:c4:91:a7:78:c6:c3:3a:09:4d:49:41:70:58:86:
ac:9a:b4:98:7c:58:c6:ff:58:d9:7d:ff:46:95:1e:4f:db:a2:
db:d4:ed:92:47:25:ac:3c:e0:af:8b:1d:bf:8a:c6:df:63:34:
9e:7f:11:ab:b5:a7:9b:41:7b:1d:6b:2d:fd:d5:7d:62:6e:20:
b4:fb:cf:e9:f1:2f:97:67:54:63:72:f5:f6:10:17:5d:e8:c5:
a8:a4:d1:38:b0:73:e5:14:60:5f:06:22:e4:4e:54:f1:0a:79:
18:61:06:82:95:5d:50:aa:77:e5:8d:07:07:cc:15:3f:25:e3:
1d:25:04:fb:af:2a:81:26:47:5f:0f:72:34:2d:7e:9f:92:7d:
49:d4:ad:24:5a:f8:62:38:cc:d1:45:6c:1c:d5:70:cd:7f:98:
72:b8:a3:88:cd:37:ef:a6:40:80:ca:be:90:42:b4:d7:1d:87:
0a:63:26:cc:a3:11:69:c1:d3:3a:8e:74:3b:e9:09:c3:b2:c9:
52:fc:6b:2d:37:1a:30:aa:a6:f3:5c:c2:27:9c:a5:2c:71:76:
57:92:94:49:ea:f1:95:42:54:f8:36:2f:a4:6f:38:8e:6d:94:
c7:36:e9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:47:02 2025 by rpki-client