Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B-eurRvklNVuSG53XSPRYaqM2eI.roa
File: B-eurRvklNVuSG53XSPRYaqM2eI.roa (raw, json)
Hash identifier: gP+jheAnyLi+2dfDj8qTbe3mFtqgNFB2pI/HeFknvLk=
Subject key identifier: 07:E7:AE:AD:1B:E4:94:D5:6E:48:6E:77:5D:23:D1:61:AA:8C:D9:E2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143E930FD168B40C34D387248D70B59
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B-eurRvklNVuSG53XSPRYaqM2eI.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51847
IP address blocks: 89.213.49.0/24 maxlen: 24
89.213.123.0/24 maxlen: 24
109.176.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e9:30:fd:16:8b:40:c3:4d:38:72:48:d7:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07e7aead1be494d56e486e775d23d161aa8cd9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:38:cf:1c:f1:34:cc:0c:48:02:31:0a:7c:f2:
66:a5:4b:07:22:6e:05:d7:2e:6e:b4:10:a3:56:6d:
34:72:49:8e:6b:f7:7f:a8:68:c4:e9:40:45:ef:2c:
da:cd:e4:20:e1:ec:39:bf:0d:83:ee:d4:10:5e:0a:
a3:e6:22:fd:12:5a:ca:e7:0e:28:40:99:99:a6:91:
9a:bc:3e:f6:d8:7d:e8:9c:63:1a:0a:fd:bf:3d:f8:
ba:89:34:69:8d:e8:72:87:a3:44:39:37:42:2e:82:
41:a3:65:62:83:34:e6:a2:fa:f5:42:35:6d:25:36:
59:40:5e:5c:fc:b8:e9:0d:42:34:ef:fb:58:b4:7a:
09:1f:4c:e7:71:58:cc:d6:39:e4:81:fd:5a:48:b5:
81:97:d1:86:7a:99:bb:59:88:ec:17:24:6b:73:1f:
a0:e5:35:1f:0a:da:db:25:c2:cc:df:38:cf:38:ee:
79:a7:4a:14:b9:fc:66:53:12:bd:b2:5a:ea:59:51:
a1:04:8a:5f:81:29:72:e8:ec:5e:90:76:88:07:bb:
4c:e0:32:fb:7b:f4:b0:18:4c:c9:e4:ea:81:d1:2d:
a2:08:c7:41:20:04:20:f7:92:ef:51:d5:1f:1c:3e:
e3:8a:ec:b5:35:9f:16:dc:30:f5:1e:e3:7e:1e:3f:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E7:AE:AD:1B:E4:94:D5:6E:48:6E:77:5D:23:D1:61:AA:8C:D9:E2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B-eurRvklNVuSG53XSPRYaqM2eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.49.0/24
89.213.123.0/24
109.176.254.0/23
Signature Algorithm: sha256WithRSAEncryption
14:59:43:40:4a:f5:45:02:bc:4a:8f:1c:5f:2c:88:b1:fb:15:
79:c8:59:ec:dc:de:48:08:47:6b:18:3e:09:7d:ba:02:73:7e:
ec:f7:1a:c0:5f:fa:e8:6a:18:67:ee:12:3a:88:4f:e7:8c:1c:
98:eb:9b:ab:d5:99:de:88:38:75:1a:a9:ad:8c:0e:d1:0b:bd:
ac:77:0b:93:fc:96:fc:64:25:04:56:65:68:6c:87:1a:c0:70:
f9:f5:f0:2c:c4:5b:c7:fc:11:9d:9a:be:59:fa:ba:3d:46:d6:
6f:ad:76:54:37:50:77:91:5a:75:36:b9:c7:7b:29:4b:65:ae:
fb:e2:ae:78:3c:cd:ba:49:23:6d:a6:46:80:5f:c7:c4:e0:c8:
e2:02:17:fb:40:02:4b:07:2d:3e:3a:3a:1e:bd:4a:b8:6c:b4:
78:d5:37:1d:ba:ae:54:63:38:67:ab:b4:ea:dc:b1:db:e1:f7:
bc:b0:91:3b:d6:8e:5d:ee:26:71:24:a2:f0:e6:cb:33:8d:1e:
ae:8e:b0:ee:5b:14:27:ad:0a:94:92:cb:75:54:2c:63:b7:53:
f6:2c:ad:dc:1a:01:70:19:cc:7b:a1:82:63:a6:d7:84:34:78:
7a:1c:56:b9:86:f6:78:2a:78:f9:4f:7a:ba:24:c4:71:e3:94:
3a:9f:5f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:49:34 2025 by rpki-client