Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8xiiRDYfuQ-OsHSQTyn0Mcg0pjY.roa
File: 8xiiRDYfuQ-OsHSQTyn0Mcg0pjY.roa (raw, json)
Hash identifier: 3gaUne3lMf0X4aEX2t0M8FG8CJoUybf+H9royW94jD4=
Subject key identifier: F3:18:A2:44:36:1F:B9:0F:8E:B0:74:90:4F:29:F4:31:C8:34:A6:36
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421440274CCE8A22C8389E16101E6E8A5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8xiiRDYfuQ-OsHSQTyn0Mcg0pjY.roa
Signing time: Wed 01 Jan 2025 09:48:12 +0000
ROA not before: Wed 01 Jan 2025 09:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202364
IP address blocks: 89.213.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:02:74:cc:e8:a2:2c:83:89:e1:61:01:e6:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f318a244361fb90f8eb074904f29f431c834a636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:88:84:22:3c:50:37:12:45:a1:c0:4e:5a:
55:b7:68:cc:0d:c6:b9:aa:ad:28:57:b9:bb:94:30:
a5:6f:92:d0:00:bd:16:8d:ea:4c:df:9e:7e:dc:25:
20:1f:cf:e7:92:72:95:5f:8c:34:b5:90:5a:51:21:
99:98:cc:08:64:8d:35:af:bd:c1:0d:bf:4e:ec:5b:
77:68:a2:9d:8b:89:df:46:c0:2f:cc:80:5c:dd:cd:
1a:88:37:b4:0e:63:ea:02:62:eb:ec:69:d6:5b:be:
4a:da:da:21:d0:67:32:b3:bc:1b:76:e0:af:83:96:
0e:f7:35:a0:85:a5:a3:78:f8:69:c1:b2:30:a3:f2:
27:f2:1c:01:3f:26:68:ef:45:d8:38:3c:5d:ed:65:
fd:9c:3f:43:d0:5f:f4:54:0b:67:b6:71:ca:c6:33:
67:8b:e3:29:6d:c7:b0:39:0c:bd:38:12:38:2d:c9:
53:f2:90:2a:bd:82:d5:a0:53:b9:02:8d:f0:10:00:
9f:af:fc:51:7b:a6:13:78:21:07:d3:1d:4c:ee:d0:
f6:b6:1b:5a:57:03:7a:c5:0a:62:b9:b3:37:87:83:
90:fc:70:03:64:b9:be:ed:cc:04:6f:6f:55:92:89:
92:af:95:e4:7b:f3:f9:d0:89:5b:a7:36:2f:06:42:
fd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:18:A2:44:36:1F:B9:0F:8E:B0:74:90:4F:29:F4:31:C8:34:A6:36
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8xiiRDYfuQ-OsHSQTyn0Mcg0pjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.192.0/24
Signature Algorithm: sha256WithRSAEncryption
68:50:81:82:09:a4:ca:50:e6:71:48:df:6e:28:b7:ff:3a:ce:
92:9d:90:31:f9:b5:29:6c:8e:e7:c5:58:87:1a:fc:0f:20:2e:
50:c6:65:70:4c:9f:e7:a6:47:06:d3:49:71:28:25:16:de:8b:
9c:33:32:54:b7:1e:b1:c7:fb:7e:28:4c:3c:90:7a:16:dc:ea:
3b:5a:7f:b1:0c:9b:70:cb:9f:ce:13:db:21:5d:0e:af:4a:09:
cd:f3:07:e5:0c:35:fd:07:11:5a:c0:31:d7:05:88:25:46:ad:
b0:72:64:1f:9f:07:22:7b:0c:d3:5a:01:5b:76:fc:58:36:86:
d6:68:78:9c:11:f2:4f:d9:09:20:7a:33:74:63:b6:7c:04:d0:
84:47:46:7e:8a:7d:6d:a4:4b:b6:3c:71:c2:5f:48:dd:41:9b:
8f:58:8b:b2:2d:05:06:98:d8:bd:bd:0f:d7:98:33:f2:4b:1e:
84:08:f5:11:20:b3:0f:30:fb:6c:38:c8:d6:02:45:c8:8d:24:
a8:16:37:16:eb:c6:0f:bf:00:22:e5:1b:f2:60:21:b7:3a:e7:
30:a8:68:28:40:52:8f:c6:aa:49:26:4c:33:94:c5:69:b3:d8:
16:2e:66:c7:09:c9:3d:60:65:52:49:37:05:a8:9a:d6:fc:8f:
8e:54:40:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:36:46 2025 by rpki-client