Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/IAhynHC3BeXQ5V6ipM00FrjrH7c.roa
File: IAhynHC3BeXQ5V6ipM00FrjrH7c.roa (raw, json)
Hash identifier: xUIuep5Mgj3+PGgYL02vof53aG5TJnfGHCNFQCcozjs=
Subject key identifier: 20:08:72:9C:70:B7:05:E5:D0:E5:5E:A2:A4:CD:34:16:B8:EB:1F:B7
Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial: 0194258EFD6AEA15BF442B61CD03E165E840
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/IAhynHC3BeXQ5V6ipM00FrjrH7c.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59639
IP address blocks: 91.199.199.0/24 maxlen: 24
193.200.89.0/24 maxlen: 24
2a11:1bc0::/29 maxlen: 29
2a11:1bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Jan 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fd:6a:ea:15:bf:44:2b:61:cd:03:e1:65:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2008729c70b705e5d0e55ea2a4cd3416b8eb1fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:2e:66:01:8e:5f:95:19:30:dc:0c:dd:a8:
db:00:fd:a4:b2:6f:95:c1:38:2f:a4:d0:86:ba:a6:
67:dc:aa:be:d5:2f:28:6b:c6:ad:b2:70:99:ed:6b:
69:fa:da:23:f6:71:3b:85:62:0b:c3:2e:13:79:a8:
20:51:6c:da:b7:c5:4d:75:68:96:b0:41:d3:8d:b8:
a0:33:16:59:f8:c2:c0:ec:88:33:e3:dd:5f:6f:3b:
ac:4b:1c:4b:ee:85:38:9b:ca:b5:4e:b7:28:70:7c:
27:b4:a4:e9:d7:2b:62:7f:9b:62:ab:d2:90:24:8d:
d2:18:81:68:c3:b1:b8:9d:8c:fd:ff:b5:72:ba:c3:
83:c3:10:80:3a:8f:17:d3:b0:1b:2b:0d:4a:bc:e1:
a4:35:db:18:69:44:62:38:9c:2a:de:b3:ad:be:5e:
27:b0:c3:98:c7:63:a2:5b:94:08:2b:db:da:59:7d:
c2:eb:24:32:a2:c5:27:0c:b1:3c:61:01:60:87:8f:
2d:5e:f4:0d:08:92:74:8c:ac:12:cd:af:05:db:a2:
c1:49:fa:04:86:df:74:cd:7a:f9:eb:ce:6d:5a:d3:
d2:79:1b:cc:d5:6f:5a:29:9d:e2:5e:ea:65:af:83:
be:03:e3:c4:f8:31:0d:23:0d:c0:8c:3c:b8:ce:01:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:72:9C:70:B7:05:E5:D0:E5:5E:A2:A4:CD:34:16:B8:EB:1F:B7
X509v3 Authority Key Identifier:
keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/IAhynHC3BeXQ5V6ipM00FrjrH7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.199.0/24
193.200.89.0/24
IPv6:
2a11:1bc0::/29
Signature Algorithm: sha256WithRSAEncryption
35:42:fd:33:8e:61:9f:68:e5:f9:a9:8b:3a:79:7e:af:29:8c:
44:ce:7e:07:06:27:9f:b1:e5:c5:d5:f5:ff:69:7a:35:fb:5a:
ee:e1:33:47:0a:5a:89:b1:5d:c5:b8:b4:84:33:2e:41:91:1c:
57:13:d5:83:ca:b6:2c:e7:b5:15:9c:9e:22:9e:27:ed:9f:c9:
35:d3:87:a3:44:91:50:9d:a3:94:29:d9:1a:cd:7e:42:f4:6e:
2d:8a:c9:19:8c:75:b1:d3:49:df:6b:1e:0a:51:09:89:99:0d:
62:34:8c:02:b9:d6:03:89:a2:70:64:9a:20:15:db:b2:34:92:
cb:ee:b1:b7:6b:9d:2e:21:83:44:54:14:b6:30:94:44:eb:18:
b3:8c:02:ec:ab:62:7a:02:1d:87:5b:f7:ed:1a:8a:29:f9:a7:
1f:f7:bb:14:e5:62:25:09:2d:74:bc:41:83:a8:4b:89:c9:c0:
d2:a2:63:cf:5b:bd:0c:91:e5:f1:0b:16:53:05:de:6f:e2:3c:
97:4f:18:cd:e1:65:d5:3d:1c:e3:1c:13:6c:47:3c:46:3c:f8:
5b:be:a6:b9:35:df:ac:e2:a6:fa:35:ef:53:ca:5e:79:3d:49:
f6:c2:02:f1:8a:01:73:6a:99:27:d7:c6:1f:1c:81:69:4d:a6:
11:f0:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 30 20:47:18 2025 by rpki-client on console-ams.rpki-client.org