Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/_54CIVi2Yw4yngdpfKbMO07oyqo.roa
File: _54CIVi2Yw4yngdpfKbMO07oyqo.roa (raw, json)
Hash identifier: TM5Ay2NTiDiELYyiOeCmFyJPSSpITIxR/LNxTfFDHDg=
Subject key identifier: FF:9E:02:21:58:B6:63:0E:32:9E:07:69:7C:A6:CC:3B:4E:E8:CA:AA
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 0194236A3ABE6F4A72626613840348E5C59C
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/_54CIVi2Yw4yngdpfKbMO07oyqo.roa
Signing time: Wed 01 Jan 2025 19:49:11 +0000
ROA not before: Wed 01 Jan 2025 19:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57888
IP address blocks: 89.111.200.0/24 maxlen: 24
89.111.246.0/24 maxlen: 24
94.250.18.0/24 maxlen: 24
94.250.116.0/22 maxlen: 22
94.250.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3a:be:6f:4a:72:62:66:13:84:03:48:e5:c5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff9e022158b6630e329e07697ca6cc3b4ee8caaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:f5:44:67:8d:8b:7f:37:45:7d:1d:04:07:
49:f9:c5:4e:c3:3e:06:d9:73:67:fb:5a:a3:62:34:
ac:79:82:df:78:a1:fe:84:8a:6a:ba:2c:67:28:50:
fd:ae:ac:78:e8:dc:bd:cb:2d:f8:f9:3d:a3:38:3d:
b0:59:74:03:ef:61:cc:48:1a:0d:33:02:39:f8:f6:
18:77:8c:e3:87:9b:09:34:7f:85:51:38:51:08:60:
4f:68:af:5b:27:27:27:c6:12:3b:d2:71:d9:34:d0:
79:a9:d5:16:10:90:8e:fa:3f:15:62:1c:b8:74:a1:
45:12:83:6f:74:f8:79:0e:39:b5:d6:c8:ac:1f:c6:
c3:56:5b:17:f6:07:5d:fd:41:3c:30:0d:45:01:1c:
f9:07:b3:18:60:1b:a0:13:6c:62:4b:62:98:ec:d9:
8c:5c:4f:6a:90:44:d0:30:09:21:b4:bf:1c:1c:9c:
19:84:dc:04:24:8b:cc:c7:c9:aa:b5:2a:2b:a4:cd:
35:f6:04:3a:a7:e6:22:22:47:37:d5:e6:e3:8f:9a:
cc:8b:6c:b5:de:8d:7d:48:e0:cd:34:aa:cc:6f:11:
42:e5:73:2c:ea:c7:8d:37:a7:0e:02:2b:6a:18:55:
5a:dc:16:e9:5f:c0:64:c2:d8:da:98:46:4e:fb:1a:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9E:02:21:58:B6:63:0E:32:9E:07:69:7C:A6:CC:3B:4E:E8:CA:AA
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/_54CIVi2Yw4yngdpfKbMO07oyqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.111.200.0/24
89.111.246.0/24
94.250.18.0/24
94.250.116.0-94.250.120.255
Signature Algorithm: sha256WithRSAEncryption
b9:42:c7:2f:d6:64:cd:24:53:1e:1e:fd:8b:2a:39:00:01:2e:
36:c0:49:64:a6:15:3d:e3:ff:7e:ac:45:5a:3c:de:db:d8:d4:
24:8b:aa:1c:0a:da:c5:15:15:60:f9:2f:40:a3:de:1b:0b:23:
22:0b:5e:7e:e3:60:d8:22:f0:0b:5a:cf:a8:0d:95:58:da:bd:
cf:db:87:81:19:67:04:51:52:57:fe:21:76:dd:fb:82:65:ba:
61:95:93:57:a6:72:60:0f:e7:92:6c:9d:e1:4d:95:86:81:28:
54:0e:3a:cd:a3:b7:99:1f:8e:b8:bc:91:e4:68:ec:8b:cb:a5:
18:d6:fd:1e:5c:fa:4d:e9:61:54:b9:c7:ba:1a:4b:11:e7:79:
ef:7f:33:a6:b6:f7:74:92:cd:7a:b6:9f:ac:93:78:08:22:79:
6f:f6:37:8c:ff:46:2b:33:07:88:ab:91:be:03:28:4c:fe:dc:
41:a7:35:11:1c:3d:fa:b9:95:94:3b:07:b2:c9:6a:21:e3:56:
c1:0c:13:9f:f2:ef:35:33:91:ee:e4:34:e5:54:e0:0a:d7:a5:
7e:c7:4d:d2:a2:eb:e0:6c:2f:cd:53:cf:52:6b:f6:6b:07:c8:
7e:c1:bf:88:e2:ca:00:68:b0:87:ac:63:f8:35:33:8c:0b:cb:
1a:ad:a8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:34:01 2025 by rpki-client