Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/z3ewtEfxQMG6cFAntTN-bioPTEM.roa
File: z3ewtEfxQMG6cFAntTN-bioPTEM.roa (raw, json)
Hash identifier: 79oe+DjVQUw/UKxM4/7gQT4+b1B3f3oxNOVrtpA8X6M=
Subject key identifier: CF:77:B0:B4:47:F1:40:C1:BA:70:50:27:B5:33:7E:6E:2A:0F:4C:43
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369B6AED07600BFE33FEDE13C741926
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/z3ewtEfxQMG6cFAntTN-bioPTEM.roa
Signing time: Wed 01 Jan 2025 19:48:38 +0000
ROA not before: Wed 01 Jan 2025 19:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62322
IP address blocks: 89.33.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b6:ae:d0:76:00:bf:e3:3f:ed:e1:3c:74:19:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf77b0b447f140c1ba705027b5337e6e2a0f4c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:fa:bd:92:e7:63:c3:13:6f:11:86:8d:8d:
30:2b:94:93:1e:98:f4:cc:2d:7e:6d:ed:5b:ad:b3:
7c:c4:3d:94:73:07:f2:74:e0:bb:39:04:f7:cf:6a:
31:52:8e:3c:d2:94:a3:47:18:2e:fc:29:3c:b1:0f:
1f:99:41:48:75:c7:d8:1c:01:78:d8:61:a6:bb:ff:
ac:d7:2e:9b:2e:ed:f0:9c:4b:36:c2:df:88:bc:71:
17:1c:32:9a:67:b2:86:c3:d4:58:76:5a:79:49:f2:
f1:e2:df:12:10:f5:62:00:a7:8b:4e:09:38:61:26:
8e:aa:e6:9c:db:f4:1a:3a:e0:04:57:2e:9f:25:6e:
65:60:8a:98:0f:b6:b2:35:64:9c:1d:d5:02:c4:6c:
d3:d0:3b:74:a8:a4:c3:1c:94:f9:b5:f5:e8:da:58:
f4:73:51:67:35:23:8a:5c:c4:8d:2d:0a:eb:6f:43:
e5:6f:1e:08:bb:c0:15:f6:31:5e:fe:53:c8:30:66:
5c:d6:4e:4f:20:e7:8a:b0:07:23:8a:ea:cd:78:b0:
9d:43:73:10:e0:9f:0d:3d:3c:e3:30:25:3e:50:ee:
d5:c4:a4:0a:ab:d2:45:bd:ad:04:4c:e1:96:ae:71:
d6:b2:26:d4:f5:73:b1:f2:09:f6:ca:87:9f:b9:9c:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:77:B0:B4:47:F1:40:C1:BA:70:50:27:B5:33:7E:6E:2A:0F:4C:43
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/z3ewtEfxQMG6cFAntTN-bioPTEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.132.0/24
Signature Algorithm: sha256WithRSAEncryption
ef:d1:2a:31:ea:0a:09:75:a8:d4:15:d0:e0:64:2a:e9:64:d3:
56:23:c6:10:8f:dd:cb:9d:bd:dd:52:25:40:7a:20:46:5f:07:
52:aa:6d:c3:4e:63:44:8b:cf:4d:91:23:ef:1b:42:24:41:ae:
be:ba:54:2c:b5:b2:04:96:62:38:d5:f9:5d:a4:c8:68:17:e9:
87:f7:aa:bd:31:02:a4:76:ed:99:ce:8f:c4:50:cd:51:e5:79:
67:75:93:36:42:7b:c5:4f:26:ad:66:05:39:61:5c:96:57:bb:
ea:80:15:a5:d6:bb:6b:f8:1a:f2:da:6e:1e:e4:9b:52:12:52:
7c:c6:5e:b6:2e:8f:cc:a0:b0:f9:0e:51:f4:3a:70:bd:08:f5:
b6:6f:d7:fd:d7:fa:3d:59:10:40:8e:58:09:88:d4:f2:82:23:
1c:0d:85:d0:2f:d2:63:62:2a:d0:87:1f:88:68:54:a5:8d:52:
e0:65:02:54:37:0f:e3:fe:6e:4f:6c:f9:40:46:2b:08:63:09:
41:0b:7c:38:39:6c:70:14:41:c4:db:42:6a:ba:43:aa:04:c2:
5e:93:42:2f:fa:24:ed:57:e8:32:ab:1d:9b:00:d2:f5:0f:38:
da:48:5c:a9:1a:54:7c:97:eb:ca:29:49:4d:4d:04:bf:cb:87:
49:06:99:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:54 2025 by rpki-client