Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7-BgjTOBph-WuNWcHIvkpd6u7co.roa
File: 7-BgjTOBph-WuNWcHIvkpd6u7co.roa (raw, json)
Hash identifier: Adce7lOW42Uz67a2aImaIb6Nd1Jkqmcu4MKDh694+2U=
Subject key identifier: EF:E0:60:8D:33:81:A6:1F:96:B8:D5:9C:1C:8B:E4:A5:DE:AE:ED:CA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143FD6164F78AFA4B0E94DDDB7DAB69
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7-BgjTOBph-WuNWcHIvkpd6u7co.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198825
IP address blocks: 89.213.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fd:61:64:f7:8a:fa:4b:0e:94:dd:db:7d:ab:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe0608d3381a61f96b8d59c1c8be4a5deaeedca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:d0:b3:ea:a8:9d:aa:ae:60:73:fc:64:8b:
25:76:12:22:d2:f1:76:c8:3e:7e:d2:b4:07:02:4a:
b6:20:63:58:66:ee:da:17:5a:03:a6:4e:cf:f9:ad:
3d:f3:5c:e9:21:99:75:77:34:d4:d5:0e:f2:cf:19:
79:19:28:25:cd:b2:bb:69:24:7a:89:eb:8c:ac:34:
f1:b0:ba:8d:bf:54:4e:b2:48:ed:f7:9a:15:69:c4:
c8:5f:9b:5e:53:19:c3:7b:ef:9f:47:9d:ef:13:44:
e1:8d:0f:65:4c:7d:43:00:02:6e:40:eb:f6:6e:95:
b0:40:3e:6a:53:e2:4f:b1:93:f4:3a:79:d2:89:8a:
31:d5:c9:87:d4:11:1d:4a:04:be:30:d9:da:20:d8:
0f:65:c1:92:ba:7a:4e:4b:a4:dc:6f:22:af:03:1f:
6d:62:be:3b:a4:f8:f8:d0:1d:44:a5:86:d1:b4:9a:
41:9f:40:e3:f2:80:74:a2:9b:7a:69:8a:e4:ea:0f:
62:73:51:f2:23:4f:65:e0:f4:0c:56:ee:c1:7e:05:
0c:ea:fb:6b:8d:5f:27:8e:3f:13:2e:ae:56:bf:f6:
7d:e6:88:6c:c8:1d:59:4b:d6:cb:62:66:29:3e:2b:
bf:d3:d7:72:cc:5c:a6:09:6d:32:e8:3e:fe:6b:66:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E0:60:8D:33:81:A6:1F:96:B8:D5:9C:1C:8B:E4:A5:DE:AE:ED:CA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7-BgjTOBph-WuNWcHIvkpd6u7co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:4f:47:d5:d0:0f:f6:e7:a9:49:4c:66:e7:ec:1c:e0:47:fe:
cb:8c:ec:b4:f9:9b:ec:13:80:3a:00:51:d9:5c:d2:05:07:10:
d6:41:72:d6:16:29:2c:f2:11:db:3b:eb:a1:6a:fe:63:d4:a7:
5f:5c:33:ce:c3:7c:b9:0e:f2:62:52:43:e3:7c:3b:53:27:ad:
a0:48:e8:f4:7e:62:e1:0a:ac:5f:77:f7:1b:6d:94:75:b1:67:
ec:6b:46:c0:8c:dd:3c:71:48:c0:5e:b9:b8:a0:2d:97:38:06:
40:80:6d:be:4f:86:73:63:92:9d:42:c3:05:72:d3:2e:7d:5e:
f1:59:36:f8:2a:d1:3f:bd:cb:71:01:12:ba:4f:85:c0:e6:ca:
7c:67:fb:49:f8:7d:e6:e1:f5:f7:92:16:4a:7b:ea:9a:7c:6c:
cc:e1:f5:26:55:3a:72:ed:f6:8b:40:06:33:ad:fc:1c:67:3b:
f3:58:cc:3b:b8:84:1e:d0:0d:4e:e1:db:21:7b:ea:d7:ae:3f:
51:f8:6c:10:7b:7f:42:d7:15:9d:08:bc:0c:8b:6a:a4:ec:d6:
7a:99:43:cf:85:cb:5c:e6:b8:d6:a3:5a:b1:5a:c3:3a:19:b9:
eb:1f:d3:fc:e6:be:95:78:83:5b:40:64:59:a6:45:39:8e:14:
d0:73:bb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:40:50 2025 by rpki-client