Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/8nPu7g_10GykuOn6hB7ddpZ32pc.roa
File: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (raw, json)
Hash identifier: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=
Subject key identifier: F2:73:EE:EE:0F:F5:D0:6C:A4:B8:E9:FA:84:1E:DD:76:96:77:DA:97
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 01942143B1D7A40A7D8D4A1FCB51D42E3B4C
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/8nPu7g_10GykuOn6hB7ddpZ32pc.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49001
IP address blocks: 95.131.33.0/24 maxlen: 24
95.131.35.0/24 maxlen: 24
95.131.37.0/24 maxlen: 24
185.194.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b1:d7:a4:0a:7d:8d:4a:1f:cb:51:d4:2e:3b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f273eeee0ff5d06ca4b8e9fa841edd769677da97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:84:42:29:1b:4a:db:f4:f9:98:bf:ff:85:d9:
2e:c4:39:72:a2:69:ac:9d:1a:c9:83:dc:9a:33:3c:
37:1b:40:7a:f1:0d:cf:76:96:d9:aa:93:45:dd:1b:
62:cc:d3:15:b4:eb:a8:15:e1:ef:07:d6:cb:18:f7:
1a:7b:83:f7:e3:81:ce:6e:e6:9a:57:ed:b7:6b:8a:
c7:7f:8b:13:c2:f5:fa:86:01:a8:c5:49:48:c5:48:
9d:c9:5c:93:5a:f9:e8:3f:2b:dc:65:90:10:bd:d8:
ea:6f:8d:a8:5c:cc:6c:01:e4:29:95:b4:a2:30:d8:
14:cc:89:14:2e:9b:e4:fa:cc:10:12:02:33:59:d4:
ba:72:d7:c3:22:dc:6d:75:30:e8:f7:83:01:61:05:
57:1c:dd:7c:6d:51:b6:0b:5d:16:4f:7d:9e:30:0b:
53:0b:93:d0:5f:b6:4d:f7:d5:6f:e0:19:9f:b4:78:
15:4b:ee:7f:b6:b1:ea:f2:d7:69:f5:cf:b5:cd:c6:
7d:dd:d3:62:dc:67:01:28:ec:d3:6a:01:c1:95:a1:
fb:89:04:21:e7:f2:80:9e:c5:8f:45:7d:cc:2f:c7:
4c:d7:c0:04:b4:29:92:52:43:d8:7b:cd:df:33:6a:
0a:77:89:4d:93:9e:5c:37:e2:1f:48:cd:1e:81:f2:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:73:EE:EE:0F:F5:D0:6C:A4:B8:E9:FA:84:1E:DD:76:96:77:DA:97
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/8nPu7g_10GykuOn6hB7ddpZ32pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.33.0/24
95.131.35.0/24
95.131.37.0/24
185.194.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:5e:60:c5:a1:6d:05:99:6f:00:6e:61:e3:f8:1c:84:c5:b7:
72:20:04:db:44:6b:d1:dc:2f:35:64:f6:f6:9b:82:92:8b:db:
33:fb:ac:24:6f:30:75:d9:ec:19:ab:65:bb:3b:50:06:26:d9:
bc:8c:e7:c0:6f:eb:1d:c6:03:18:38:69:41:e2:33:d4:1a:49:
d3:fc:6a:1d:35:c6:c7:1f:53:7e:56:3c:9e:ff:19:4b:a8:0a:
24:8d:f5:33:ed:42:59:59:ac:3d:2c:25:78:ce:7c:e3:f4:fa:
07:b8:a4:dd:e1:8c:f0:4c:89:45:4f:a7:07:82:96:86:3d:f1:
cc:1b:0e:be:59:94:ab:ae:5c:3b:0c:ce:f8:a5:06:a2:e0:02:
d4:fd:a1:3a:6e:42:0e:b6:57:5a:e3:a1:04:44:d8:4e:d2:8c:
22:7c:ab:9a:16:be:aa:2e:69:07:a2:3b:05:95:88:55:a8:1d:
32:69:72:d6:68:ae:5d:a1:0e:df:55:07:c5:d0:a8:3c:55:9e:
bb:67:01:1d:ae:6a:33:75:f8:3f:57:f2:29:c7:66:f3:71:ac:
7c:ef:72:aa:dc:4e:01:b2:72:c8:3e:2b:93:2d:19:20:3c:fc:
ce:54:c5:6a:05:fd:16:26:af:46:76:24:e1:7e:bc:30:6a:99:
d9:9b:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:06 2025 by rpki-client