Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E0kSF0iRgOGcIS9QbOhk0AYfxCI.roa
File: E0kSF0iRgOGcIS9QbOhk0AYfxCI.roa (raw, json)
Hash identifier: 9po4Tc/ZvS7FUvzvQZPiHTvu46IzDn3NRuiLu6GoaqI=
Subject key identifier: 13:49:12:17:48:91:80:E1:9C:21:2F:50:6C:E8:64:D0:06:1F:C4:22
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421443952D64827F23F076F42677D4564
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E0kSF0iRgOGcIS9QbOhk0AYfxCI.roa
Signing time: Wed 01 Jan 2025 09:48:26 +0000
ROA not before: Wed 01 Jan 2025 09:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 265919
IP address blocks: 89.213.5.0/24 maxlen: 24
89.213.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:39:52:d6:48:27:f2:3f:07:6f:42:67:7d:45:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13491217489180e19c212f506ce864d0061fc422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:c5:27:f3:d0:fc:aa:91:30:d3:0b:c6:54:
cf:5c:1f:e5:be:b6:81:d9:2f:cf:1d:1a:5f:85:24:
48:94:07:46:69:16:45:34:a4:f2:01:b5:c2:8d:49:
ee:c7:c2:e9:80:04:1e:13:64:d7:7e:09:04:ea:a5:
69:ca:09:aa:9f:d6:db:2e:60:89:50:71:c9:d5:47:
e1:6c:9b:1d:a3:63:b7:ea:21:ba:f2:b7:12:7b:30:
1a:0c:5d:17:48:f5:38:2b:c7:75:b6:00:01:b4:1f:
ca:b8:bd:89:7e:84:1c:1c:2e:a0:ef:ee:ad:fb:88:
5e:bb:d3:d6:c3:d1:ca:6c:a6:8d:95:87:5a:35:46:
d5:2c:bd:1b:aa:23:60:12:86:87:4a:c0:85:d4:85:
2e:cd:bc:4f:53:72:e2:ca:af:e8:57:65:a7:b0:9b:
69:60:07:6c:59:9d:46:c6:59:79:98:8d:72:f7:a3:
87:42:21:e5:e2:d2:8f:28:74:8b:f8:e5:ad:2e:20:
c1:3c:5b:0f:2b:83:7e:27:39:88:45:aa:d8:84:34:
95:97:de:64:5a:aa:62:d4:7a:22:77:6b:7a:b6:78:
2f:35:d2:62:12:16:91:70:d5:b9:e9:53:67:5d:60:
f0:ab:d2:14:8a:cc:ba:71:25:c3:28:45:f0:be:ef:
c9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:49:12:17:48:91:80:E1:9C:21:2F:50:6C:E8:64:D0:06:1F:C4:22
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E0kSF0iRgOGcIS9QbOhk0AYfxCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.5.0/24
89.213.231.0/24
Signature Algorithm: sha256WithRSAEncryption
29:55:86:6c:a4:09:7f:d6:8a:b8:e4:b8:02:9b:90:69:ef:88:
5a:b9:2a:71:0d:50:fe:9a:27:68:d2:18:0f:5a:ff:19:ac:4e:
f0:db:a5:69:b9:33:f9:24:82:51:2b:53:10:57:4a:bf:e5:55:
d9:64:1d:36:03:b4:18:8e:c5:73:5b:d3:2b:8f:3f:25:c6:a1:
e1:36:61:c8:f4:51:45:37:ed:36:3d:5c:77:ca:5f:5b:6f:c1:
5c:12:dd:2b:93:37:f8:86:99:79:41:16:a5:30:b3:c2:04:97:
f3:cd:f5:8c:fd:64:dd:ff:42:94:be:91:a2:f3:b4:28:73:66:
1d:8d:7a:aa:04:bd:7c:07:33:9d:74:de:4d:60:24:ef:b1:ca:
5a:0c:b6:14:70:cc:98:e6:a6:7f:02:ab:9a:1b:22:6f:d5:2e:
6f:2d:40:4b:3b:b8:51:d1:c4:a4:4b:f4:f7:b4:3a:b9:e2:91:
8f:d5:40:10:ac:5f:d0:22:19:09:83:df:8c:13:aa:6b:66:a5:
b5:23:41:e5:ec:86:5f:1f:be:96:9c:b9:33:6b:ce:9b:4f:23:
cc:32:9f:17:89:dc:1a:fe:1c:75:65:50:75:9c:f6:a1:db:24:
10:d2:34:6c:f3:8e:33:e2:97:08:a1:52:cb:7c:38:e6:9a:94:
8b:1b:36:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:47:07 2025 by rpki-client