Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/IPovu3wKU_9ejo6OwxWYFYuXlqU.roa
File: IPovu3wKU_9ejo6OwxWYFYuXlqU.roa (raw, json)
Hash identifier: uje76ui267Q93lflgCd4k/YSjf03nMVsUkcsU2QC3+U=
Subject key identifier: 20:FA:2F:BB:7C:0A:53:FF:5E:8E:8E:8E:C3:15:98:15:8B:97:96:A5
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369841AFDC57FDAF63D7EA8D8DB37DD
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/IPovu3wKU_9ejo6OwxWYFYuXlqU.roa
Signing time: Wed 01 Jan 2025 19:48:25 +0000
ROA not before: Wed 01 Jan 2025 19:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5606
IP address blocks: 89.38.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:84:1a:fd:c5:7f:da:f6:3d:7e:a8:d8:db:37:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20fa2fbb7c0a53ff5e8e8e8ec31598158b9796a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:69:12:c6:62:3a:8d:ae:65:49:3f:3c:a3:
24:be:85:13:fe:78:7f:9f:98:db:da:f3:80:58:cf:
ba:68:1d:b7:10:f9:4c:8c:5b:18:52:01:dd:3e:72:
bd:dc:e5:74:3e:a8:b5:c7:31:af:3e:3a:1b:c1:be:
03:86:d1:a6:cb:2d:88:7f:0b:16:00:ad:de:51:ee:
16:94:41:20:19:4a:d3:da:40:f9:dd:a7:aa:c0:c5:
62:0a:7b:51:cb:34:ec:02:56:02:6a:98:75:5a:7e:
a3:96:c6:99:10:e0:33:34:a7:62:aa:c4:4e:a1:c8:
45:e0:20:5d:3c:4a:53:00:e1:df:70:97:61:bc:86:
11:7d:1a:82:17:4b:d7:46:f0:86:ac:06:25:b8:cc:
0a:06:a9:dc:07:c8:2e:fc:1a:58:b0:0c:8e:cd:34:
00:e6:b0:2e:15:8b:06:4e:80:d1:84:f7:15:87:97:
41:de:52:d7:a9:25:09:4f:38:07:53:04:7a:9d:29:
78:6e:1f:7c:77:2a:11:93:7b:63:ef:43:c7:1d:df:
c1:c2:6a:0c:44:fe:a7:13:5e:11:a6:4d:da:42:43:
0c:02:f1:19:ff:ad:61:3d:a4:b4:92:ce:bd:2d:52:
1d:dd:fe:cd:33:32:a8:21:04:aa:6d:fe:df:a4:21:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FA:2F:BB:7C:0A:53:FF:5E:8E:8E:8E:C3:15:98:15:8B:97:96:A5
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/IPovu3wKU_9ejo6OwxWYFYuXlqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:47:62:ec:fd:3a:f2:dc:44:88:a9:af:a6:09:5b:c1:18:b6:
dc:bd:18:0b:e7:92:e0:75:07:0e:f5:49:43:52:5b:52:d9:b6:
c5:67:1c:08:67:ed:46:b1:43:3c:42:4a:28:47:da:ca:c7:a5:
89:6e:82:6c:7c:07:4a:47:7a:0f:23:cd:8e:3b:0f:fc:ff:e4:
48:84:25:a5:0a:bf:ff:0e:a6:a6:27:ba:0a:0a:c6:9e:71:cf:
6b:49:a5:07:d4:f5:b0:c0:79:b8:05:0c:2f:b8:45:6c:88:52:
a9:d9:84:f6:c7:99:1f:ff:b9:ac:bb:c3:8f:e0:b3:a7:15:2e:
9f:21:d6:e0:01:4c:48:97:0d:6a:cd:8e:3f:75:0e:c9:8b:99:
2a:5e:b7:30:28:c5:62:e0:ed:d4:cc:19:2b:07:fb:00:a4:83:
d0:91:27:71:e9:7f:e4:98:7a:bd:c0:3f:8d:e7:4d:5e:eb:66:
b0:97:e6:cf:b2:86:9d:36:5d:4b:fc:51:e0:65:a9:ed:96:11:
da:fd:aa:17:6f:27:74:fd:9a:a2:ab:a4:f8:44:1e:83:64:2a:
76:a1:bd:0a:fb:25:25:23:f0:c2:27:af:ae:50:5f:27:b2:93:
5d:8d:4b:a6:71:a9:51:b6:e8:41:59:72:f4:4d:19:ca:e9:1e:
66:49:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:25 2025 by rpki-client