Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/97CROi4ai0NnGcSso0MwhBwMtlo.roa
File: 97CROi4ai0NnGcSso0MwhBwMtlo.roa (raw, json)
Hash identifier: wnRHGdy8w5gSAExQYiehzs2ofcrcDesbdd3dij56b88=
Subject key identifier: F7:B0:91:3A:2E:1A:8B:43:67:19:C4:AC:A3:43:30:84:1C:0C:B6:5A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942144359BF02BF62C324CF3D2018F29FC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/97CROi4ai0NnGcSso0MwhBwMtlo.roa
Signing time: Wed 01 Jan 2025 09:48:25 +0000
ROA not before: Wed 01 Jan 2025 09:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216155
IP address blocks: 89.213.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:35:9b:f0:2b:f6:2c:32:4c:f3:d2:01:8f:29:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7b0913a2e1a8b436719c4aca34330841c0cb65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:c2:ef:29:1b:b3:3a:7b:57:e0:87:ee:ba:
70:f6:f3:3d:fc:9f:60:6e:87:5f:4f:64:8c:3c:9d:
66:84:fb:e5:8c:e7:13:b0:a8:ea:65:91:3f:b9:d8:
28:0f:d1:95:04:a9:dd:65:fb:85:d9:c9:3b:84:c2:
79:72:68:45:64:95:10:ce:ff:56:f2:62:c8:b1:e4:
10:f1:3f:84:0f:8c:3a:52:22:ae:99:1a:52:66:b1:
13:47:cd:ae:4d:3e:98:bc:31:f8:c8:a0:05:56:6b:
48:65:94:c2:bf:2f:a8:08:2e:45:a6:01:54:97:78:
3f:b8:f1:6c:16:4a:41:06:db:69:56:6a:47:21:97:
7a:f2:f0:0d:ac:91:e9:7c:e0:0c:bf:bc:b1:9d:fb:
92:8e:89:9a:65:47:ea:3a:57:c9:ef:e2:98:69:63:
56:8c:57:e9:b3:ad:a7:f2:1d:2f:33:9e:a5:29:e4:
39:34:92:95:c7:55:83:d2:15:0d:6f:62:a2:ee:e8:
8d:9c:95:10:ac:f2:d5:f9:13:03:71:c3:8d:9c:fa:
0d:32:cf:26:2b:33:0f:17:7a:88:21:26:0c:8c:a0:
bb:01:0f:38:c8:d4:57:3b:89:67:15:28:aa:93:54:
1a:20:73:58:25:42:58:ec:a9:f5:92:11:58:9e:cb:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B0:91:3A:2E:1A:8B:43:67:19:C4:AC:A3:43:30:84:1C:0C:B6:5A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/97CROi4ai0NnGcSso0MwhBwMtlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.149.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0a:b9:1e:68:fc:17:5e:6a:99:9f:47:ac:64:96:d9:f6:7a:
79:9a:5c:8a:3c:af:c9:08:3a:32:e9:d9:78:f2:8e:45:6b:ee:
8e:59:62:87:b0:f2:db:dd:da:4c:41:bb:33:28:43:87:e4:31:
f4:a2:01:76:45:bc:70:88:ec:36:a1:c0:de:00:a1:89:52:db:
ba:ee:85:10:c6:c2:54:ba:68:39:4e:dc:0f:ea:b3:fa:ee:d1:
a9:b9:45:69:4b:76:5f:1b:a5:0f:cb:c5:a9:b0:e8:5a:72:38:
20:bc:9b:7b:40:ac:77:ba:b1:08:b3:4d:a1:7e:1a:79:71:cc:
e2:6a:0a:17:84:cb:24:7e:19:78:50:68:59:47:c8:41:f6:c0:
29:e1:ec:37:3d:3d:18:b7:52:b6:bf:84:ce:c9:26:0a:65:90:
4c:9c:94:24:2f:b2:39:4e:02:14:2d:ff:db:22:c8:b1:79:da:
7d:ae:ea:47:c7:74:48:43:fe:7d:1b:04:e2:f3:c4:ca:5d:1b:
bf:b8:0c:e6:06:34:eb:a1:53:58:1c:62:0f:7e:33:ef:c5:a9:
63:04:e5:70:43:81:ca:a6:ac:00:3c:78:54:50:51:f0:3c:3f:
81:19:de:52:48:7c:51:50:16:ce:49:e5:28:af:b6:c1:5d:9a:
04:18:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:47:20 2025 by rpki-client