Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/Ie7P_6BcQVG-_xqWyQ0Sev5T9YA.roa
File: Ie7P_6BcQVG-_xqWyQ0Sev5T9YA.roa (raw, json)
Hash identifier: Q0YJZsowQKDF/z7KdU4WhwUtmGCYU5boJyobBWG4I6Q=
Subject key identifier: 21:EE:CF:FF:A0:5C:41:51:BE:FF:1A:96:C9:0D:12:7A:FE:53:F5:80
Certificate issuer: /CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Certificate serial: 01946A8594F6BE55450C5CA0F9EDE6E375B2
Authority key identifier: 33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/Ie7P_6BcQVG-_xqWyQ0Sev5T9YA.roa
Signing time: Wed 15 Jan 2025 15:12:06 +0000
ROA not before: Wed 15 Jan 2025 15:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12306
IP address blocks: 89.110.128.0/18 maxlen: 32
2a05:c700::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:85:94:f6:be:55:45:0c:5c:a0:f9:ed:e6:e3:75:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Validity
Not Before: Jan 15 15:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21eecfffa05c4151beff1a96c90d127afe53f580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:b1:b1:0b:8d:46:3e:98:c7:f1:13:5d:45:
d6:79:79:73:d2:17:07:d1:05:79:fc:4c:55:9c:8b:
b8:3b:35:66:49:81:39:db:09:86:6a:10:30:db:72:
16:54:e4:42:9c:cd:ad:4d:fb:48:38:74:5c:f8:f1:
dc:97:68:40:43:b7:04:33:22:ab:1f:5a:27:9c:4e:
1c:9f:45:75:56:fc:54:49:f5:f1:0d:c9:70:05:eb:
79:9e:d1:1b:ad:d6:b9:f3:c9:dd:d3:86:46:ad:39:
80:d7:e5:70:62:b6:f1:28:b2:18:48:ba:e5:10:cc:
25:21:b4:32:e7:e6:f6:7c:9e:d6:26:75:7c:6e:1c:
8a:5c:90:a8:a4:1a:b3:b5:3f:46:54:97:f6:0d:74:
c4:d4:97:b7:bb:00:eb:1a:91:d5:d4:8d:8d:ea:9d:
fc:1b:9a:8b:e4:ec:a0:49:92:30:c2:53:a9:24:2b:
2b:36:e7:29:ee:df:0f:36:56:19:d9:5b:7d:20:bd:
8a:a1:1d:92:ee:21:1c:3c:2f:fa:82:ac:d7:6d:c5:
31:bb:e8:fe:cf:3b:ea:3c:1f:4d:7e:79:24:be:de:
a7:b5:73:f5:ae:c3:95:c2:c8:55:89:54:13:b8:72:
54:a5:9c:cd:2d:58:60:85:c3:40:01:7f:fc:c7:23:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:CF:FF:A0:5C:41:51:BE:FF:1A:96:C9:0D:12:7A:FE:53:F5:80
X509v3 Authority Key Identifier:
keyid:33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/Ie7P_6BcQVG-_xqWyQ0Sev5T9YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.110.128.0/18
IPv6:
2a05:c700::/32
Signature Algorithm: sha256WithRSAEncryption
aa:47:7d:b6:65:7d:35:6f:76:68:e7:f0:52:28:5b:dd:55:85:
bf:6f:76:42:e8:1f:30:ee:b6:8a:bb:e1:f2:a8:6f:37:48:59:
e9:db:57:4a:d4:40:2b:c6:35:cf:d5:87:f1:2c:c0:d6:eb:3e:
70:e7:48:51:23:4a:a8:67:40:c7:ef:e0:d4:18:31:4e:e4:fc:
4b:45:17:a3:30:bd:7e:50:e8:1a:0b:9d:d4:45:3c:3c:15:18:
d5:6a:bc:54:c1:70:74:c8:7b:6b:6e:5d:f7:e6:9c:53:17:52:
34:22:9e:a6:ad:c2:8c:e2:b8:50:93:1a:26:bf:6e:07:8a:3e:
cb:ca:bc:ec:b6:84:1d:65:de:95:f8:b0:fd:10:74:fd:cd:6d:
40:a1:35:bd:9f:45:0d:af:a5:b6:23:7e:ca:4e:a7:ba:5c:08:
9f:0c:86:6a:b4:83:f5:1e:a2:f0:2f:41:87:80:7a:40:1a:6f:
29:d4:8d:de:cc:37:10:f0:c5:17:a3:22:29:70:35:b2:ac:22:
41:b9:2b:76:e8:ac:95:ec:93:dd:a6:61:ba:e5:66:ea:bf:0d:
63:43:4a:2e:7a:8f:7a:81:11:ec:c1:23:df:b5:83:7b:27:eb:
cb:b4:6d:b1:89:dd:d2:3c:03:29:f1:55:72:67:f2:6e:8a:35:
f8:3a:89:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:43 2025 by rpki-client