Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/RN4M9N3WnfL7GX3wk6UJj_EXMHw.roa
File: RN4M9N3WnfL7GX3wk6UJj_EXMHw.roa (raw, json)
Hash identifier: 3NtNdYAmvR0+xWguERketzpPU2prcMm2lCP1FdYm9x8=
Subject key identifier: 44:DE:0C:F4:DD:D6:9D:F2:FB:19:7D:F0:93:A5:09:8F:F1:17:30:7C
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369B256A9174C2F985D7C4BD3B0E4CA
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/RN4M9N3WnfL7GX3wk6UJj_EXMHw.roa
Signing time: Wed 01 Jan 2025 19:48:36 +0000
ROA not before: Wed 01 Jan 2025 19:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61279
IP address blocks: 89.40.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b2:56:a9:17:4c:2f:98:5d:7c:4b:d3:b0:e4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44de0cf4ddd69df2fb197df093a5098ff117307c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:0a:4b:e6:c8:a4:23:76:8e:0c:d3:0f:42:
6b:85:8b:36:c3:f2:b8:e5:4b:1c:99:a2:72:8f:52:
cd:08:82:da:c9:37:bb:3f:d9:36:6f:6b:4a:a8:52:
7b:d8:60:81:1a:71:d0:5f:b9:ff:20:46:35:31:2b:
ec:5b:67:42:f6:47:b5:7a:e4:49:43:51:78:d3:e2:
34:4c:ce:47:3a:03:73:57:9b:bb:55:06:4f:fe:9d:
8f:4b:7c:62:21:07:a5:fa:45:be:fc:f6:79:1e:f2:
56:69:e5:15:41:d3:26:4b:85:a3:14:9d:8b:28:b3:
58:39:37:37:62:53:e3:47:da:6a:b8:2d:5a:f6:2c:
8f:1f:3c:8e:88:18:f5:7d:c1:8c:2d:ed:f6:9d:a4:
c8:c3:0e:48:2e:a2:1d:f5:ed:1a:f5:b0:46:cd:f5:
1d:99:35:ca:32:9b:69:d1:dd:dc:86:1e:c5:a3:e1:
25:9d:9c:a2:b9:b2:2b:43:8d:58:96:25:9f:16:7c:
07:c0:f9:d1:39:fc:97:de:03:ec:39:81:a2:a2:c7:
0d:7e:5a:ea:90:57:32:d6:1c:c0:11:2e:b9:92:d6:
00:25:b5:ae:d3:21:ae:57:0e:a0:d5:b3:28:be:ca:
77:c6:e1:b2:b4:66:2b:c4:09:a2:88:a7:ac:32:ed:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DE:0C:F4:DD:D6:9D:F2:FB:19:7D:F0:93:A5:09:8F:F1:17:30:7C
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/RN4M9N3WnfL7GX3wk6UJj_EXMHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.20.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0d:5c:17:3e:a5:c1:d5:32:2c:7c:91:d2:1c:9f:8f:66:fb:
81:ba:1e:0d:0d:81:91:2d:1a:97:b4:c7:07:d6:ee:d9:4a:48:
1e:1d:bd:4b:db:57:3b:1a:96:50:04:4c:52:61:04:22:57:a9:
79:46:cb:8a:0b:0a:58:e3:41:e0:98:eb:a3:3a:c8:7d:12:bf:
37:a6:51:6d:26:96:26:46:97:7a:b8:dd:b1:5b:f8:d6:76:10:
ed:96:f9:7a:94:b8:b2:d6:a3:e7:d8:8e:8b:f9:eb:d2:34:f5:
1b:7d:16:33:92:d6:81:7a:76:e7:6a:1f:36:69:60:05:2f:59:
88:61:31:8e:ac:7d:72:4b:54:85:67:c0:75:84:d6:89:3e:68:
cd:f5:60:0c:ff:11:a0:0b:41:45:6d:2f:9f:80:43:00:2b:ea:
be:bc:43:3c:08:36:50:e7:df:74:23:43:82:7c:3e:c9:a0:81:
25:54:e9:73:4d:7f:c9:aa:3d:e4:09:e6:99:64:f1:90:5d:1d:
61:c1:c3:a1:0f:a2:5d:5d:d8:ba:49:01:53:ea:ea:4d:2b:7b:
db:95:2e:a4:cb:6e:09:0e:dd:22:ca:2c:70:14:37:7b:bf:0e:
a4:eb:21:d0:c3:2c:18:12:45:62:a9:7b:2c:6b:d2:28:2d:cd:
c3:63:ce:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:14 2025 by rpki-client