Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/_2x-4OGJJSoKcxtXyC5heNpC1Lk.roa
File: _2x-4OGJJSoKcxtXyC5heNpC1Lk.roa (raw, json)
Hash identifier: vkhFS/TDoPtaxHhXWGchXfwiYEYa7shcVneeg8uj/S8=
Subject key identifier: FF:6C:7E:E0:E1:89:25:2A:0A:73:1B:57:C8:2E:61:78:DA:42:D4:B9
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 019427B5CD71EFFB865A33D3EB4256B2ED7D
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/_2x-4OGJJSoKcxtXyC5heNpC1Lk.roa
Signing time: Thu 02 Jan 2025 15:50:13 +0000
ROA not before: Thu 02 Jan 2025 15:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 89.187.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:cd:71:ef:fb:86:5a:33:d3:eb:42:56:b2:ed:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 2 15:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff6c7ee0e189252a0a731b57c82e6178da42d4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:1a:ed:a3:7c:ac:cf:40:57:ec:65:fe:31:
46:b0:39:91:87:64:d5:c6:78:11:9e:34:3a:a2:b6:
fb:69:c1:4f:18:11:4a:4f:26:d9:b0:e4:69:75:bc:
da:f9:21:2e:a3:d5:cf:15:12:33:e9:19:f4:f4:d1:
dd:5f:31:13:38:1e:1d:b1:97:8e:80:2c:e4:b8:e4:
7a:83:0b:a0:65:76:4e:d0:26:b0:fe:62:79:d7:09:
08:ae:2b:dd:c0:e4:a3:cd:25:07:d7:0e:bf:bd:ca:
df:47:5b:6d:c3:60:81:0f:7d:b3:dc:54:8d:d2:e2:
d8:ef:1a:f6:c1:ac:0e:d1:65:53:b9:7c:6f:b2:10:
f4:50:ce:6e:e6:a9:6e:e8:27:9c:56:22:0f:91:31:
39:1d:c8:ae:37:59:5d:23:3b:55:34:0c:43:a6:11:
5b:d1:22:67:dd:3b:17:d0:ab:21:f6:e5:6b:19:b8:
0c:c8:ba:95:7a:cc:cf:c4:a2:9e:1d:73:9f:8b:a3:
1d:5c:88:4f:cf:9b:68:da:e5:e3:6c:83:8d:0e:1c:
17:7f:5c:1b:ee:f6:b6:06:2f:98:94:1e:0e:ae:fb:
e9:37:82:98:f3:80:9d:33:54:5b:3a:94:5f:5f:0b:
bf:60:95:00:9a:3d:ce:29:b7:9b:ea:11:14:86:09:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6C:7E:E0:E1:89:25:2A:0A:73:1B:57:C8:2E:61:78:DA:42:D4:B9
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/_2x-4OGJJSoKcxtXyC5heNpC1Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.28.0/24
Signature Algorithm: sha256WithRSAEncryption
63:77:94:f4:13:59:1c:ad:f0:1b:75:ca:38:81:96:f8:4c:d4:
6b:4a:f2:bd:a4:09:56:8b:35:e0:44:eb:85:ad:02:65:ca:3b:
e6:6a:9c:e4:37:ab:87:2d:26:ae:72:71:49:10:88:b4:31:d8:
a1:13:26:8d:de:ac:ae:be:48:2c:df:ba:01:b1:f4:c9:1b:2a:
b4:4d:b4:38:ae:75:d3:40:0a:6f:bd:49:4a:e9:39:59:d7:0e:
39:fa:19:55:10:02:d4:dc:56:55:1a:f5:a2:3a:4d:df:93:17:
f0:e7:ea:ee:15:47:80:01:e1:24:ee:a0:b6:42:4b:ca:7d:2f:
0a:8d:9c:b4:79:78:e0:cd:92:03:32:86:74:df:de:1f:7b:11:
f7:52:1b:91:df:76:8f:61:b3:b5:e3:e9:32:96:ef:46:3a:30:
54:8e:f6:fc:5b:a1:5c:db:83:da:8d:ab:60:f7:a0:7a:13:d3:
41:24:b6:13:c2:a1:50:d5:c2:84:e7:4e:99:df:c6:98:a9:b4:
87:c0:57:54:2f:ef:ce:3c:fb:8d:6f:ba:3c:56:46:09:4c:9f:
ae:4e:57:29:df:58:15:61:31:a1:63:80:a8:be:e8:97:76:23:
ba:c7:94:e6:3b:78:a5:6e:cb:fc:78:37:88:c8:1a:f0:59:8d:
d6:08:c9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:45 2025 by rpki-client