Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/1AVD6_mgeoD7QDUZJl7EDizwiPA.roa
File: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (raw, json)
Hash identifier: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=
Subject key identifier: D4:05:43:EB:F9:A0:7A:80:FB:40:35:19:26:5E:C4:0E:2C:F0:88:F0
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 01942143AF6FF6397B06B7FF1CBDEE6511B6
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/1AVD6_mgeoD7QDUZJl7EDizwiPA.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 95.131.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:af:6f:f6:39:7b:06:b7:ff:1c:bd:ee:65:11:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d40543ebf9a07a80fb403519265ec40e2cf088f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:6f:31:d7:95:5e:f9:32:15:7d:f0:b0:73:
20:96:11:ac:58:df:07:93:e7:49:6e:be:e6:8d:c0:
ca:ea:40:2e:4f:4a:95:44:09:30:65:53:aa:f6:58:
37:67:8d:05:67:64:ef:e3:70:6d:dc:a2:86:fb:5d:
5d:e7:59:b5:be:74:68:67:4d:da:d3:ac:2c:45:ab:
31:6c:d8:57:56:f6:21:97:4a:62:9c:59:e3:0f:2f:
f6:9c:e5:98:f5:e3:f0:43:28:6d:da:ce:dc:7a:58:
45:e1:94:4c:64:b5:3b:a2:81:a3:de:7e:89:34:8d:
d6:f9:50:92:f8:d2:22:d5:86:30:a0:fa:38:d0:64:
03:8d:56:77:67:04:82:dc:8b:ec:46:e9:df:9d:21:
30:ca:bd:55:ce:f2:81:56:96:93:d4:f6:d1:f3:ba:
bc:1c:86:25:6a:f2:a1:8a:bb:5f:06:21:df:96:f0:
c0:39:f3:3b:cc:29:55:1a:10:26:4d:8d:c9:55:a4:
23:c4:26:58:60:37:40:2b:dd:8c:3a:2a:4e:c6:a6:
61:97:6c:01:57:4d:59:bb:97:da:b4:8d:25:a4:85:
32:68:8d:65:29:2f:0d:c2:c2:ad:7b:c4:4c:59:36:
e8:f8:26:6f:d1:8d:ce:81:89:4f:c7:fc:ba:00:d4:
f5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:05:43:EB:F9:A0:7A:80:FB:40:35:19:26:5E:C4:0E:2C:F0:88:F0
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/1AVD6_mgeoD7QDUZJl7EDizwiPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.32.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8e:e2:74:fa:e1:b1:32:3c:39:bf:57:62:02:17:31:58:11:
39:f8:eb:59:2e:06:31:43:64:fa:c6:05:37:b5:b5:67:7d:10:
02:70:bb:0e:d0:97:b1:f8:2f:4d:51:59:10:94:88:96:3b:31:
db:f9:20:a0:2f:6c:3f:92:e0:36:ba:65:97:a8:b3:1e:28:c9:
d4:bd:fa:ae:88:f1:79:dd:89:61:49:1d:ed:23:ba:65:d9:c8:
af:da:b0:a0:bf:3e:8a:2b:19:b2:97:76:b2:45:00:fb:e9:6b:
3f:e3:3c:6f:6f:c5:04:4a:31:f1:ac:72:50:12:4e:e9:40:23:
7c:e6:85:36:e1:03:ca:64:d9:e4:af:ac:49:a6:6a:9d:3e:4f:
bd:22:83:7a:94:27:4a:28:bd:a6:c8:e6:ac:77:08:a4:fd:f3:
b6:d4:5f:f6:58:dc:13:c7:e4:cd:e6:a7:8c:61:23:94:76:98:
03:18:7d:72:98:96:eb:75:26:c2:87:c0:9a:a0:50:02:df:9f:
33:2f:be:87:d8:ec:05:a8:d3:bb:64:f5:c0:5a:85:2c:73:37:
c4:af:00:ac:33:03:ba:e2:35:7d:9e:6d:13:c4:33:68:0b:e7:
62:15:c3:a7:d2:4a:78:ad:21:87:78:e8:0c:08:26:23:33:8a:
ee:98:f5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:01 2025 by rpki-client