Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GuwDDGXCRiz0ve7vv6m0yjraAPQ.roa
File: GuwDDGXCRiz0ve7vv6m0yjraAPQ.roa (raw, json)
Hash identifier: Q9AhhwsWqYq1MG0Hz+78OCE6TqBuj8Vg5hiHEF+vTkM=
Subject key identifier: 1A:EC:03:0C:65:C2:46:2C:F4:BD:EE:EF:BF:A9:B4:CA:3A:DA:00:F4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143ECD1FB93ACFE5EC35E74F63281C0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GuwDDGXCRiz0ve7vv6m0yjraAPQ.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58955
IP address blocks: 89.213.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ec:d1:fb:93:ac:fe:5e:c3:5e:74:f6:32:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aec030c65c2462cf4bdeeefbfa9b4ca3ada00f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4d:f7:da:a4:13:39:b5:66:09:53:6c:0f:83:
bf:c3:5a:da:35:93:0a:e2:a7:2d:50:d1:79:83:3b:
88:29:17:26:d4:37:81:8c:6e:17:83:19:64:bf:03:
42:cf:10:ff:f9:20:91:b1:3c:39:15:de:77:04:47:
58:57:3c:e5:d2:76:c0:fd:93:50:e0:9e:83:9c:1a:
bc:3e:b0:d4:fc:95:d3:d6:f7:dd:4f:cc:51:ea:4e:
e8:59:f8:e5:38:97:17:4d:d9:66:90:8a:ea:a5:4a:
21:60:09:5c:92:20:12:c5:69:77:dc:b8:a8:5d:11:
50:a2:dd:a3:7a:05:49:8a:61:7f:99:68:8e:9c:69:
39:e5:22:ae:2e:23:6a:af:de:8a:db:59:49:6b:e7:
18:37:44:e1:97:6e:bc:4c:ec:5c:f7:35:f5:51:56:
45:5b:a3:cf:6c:82:ad:d2:c4:58:ff:95:d5:84:56:
61:c9:52:18:ee:3b:c0:88:e1:9b:1d:2e:10:90:a7:
da:af:9c:99:fa:87:43:a2:7c:ae:fb:f7:f2:b1:95:
c5:f8:2b:4d:2e:70:94:e8:ae:84:c7:2e:7e:7f:53:
4b:ba:50:00:64:8e:8b:1e:30:fa:3d:a4:86:8a:4e:
8f:89:25:7f:94:3b:2a:e6:3c:aa:6e:a8:41:f3:53:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EC:03:0C:65:C2:46:2C:F4:BD:EE:EF:BF:A9:B4:CA:3A:DA:00:F4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GuwDDGXCRiz0ve7vv6m0yjraAPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ee:44:2a:5c:a8:90:7b:af:65:b5:5f:98:02:7f:e0:31:20:
5f:a5:c9:be:9c:87:6d:16:cd:01:46:db:5a:06:bd:10:f5:ac:
08:56:b2:c0:e4:12:e7:a1:56:5c:1e:20:a7:48:63:32:ac:ab:
58:dd:bc:08:0d:45:f9:df:1a:77:18:4e:aa:3b:2a:3b:0d:c4:
90:ed:ca:92:57:c3:3a:e9:52:59:52:e9:31:fb:9b:4a:a8:52:
e3:eb:cd:e8:7a:50:61:01:fb:52:20:69:09:37:80:d5:f9:0f:
9d:5f:85:a6:c6:5c:40:c7:e7:04:49:6c:43:0c:15:53:d7:1d:
4a:99:f6:fe:3d:d3:7f:c8:c7:18:02:2a:64:57:9c:5b:55:76:
ab:69:95:37:5b:7f:89:82:ab:13:73:b3:7e:81:ac:7e:7f:ef:
48:64:da:19:b6:83:1f:c6:5d:a4:73:5a:3f:10:a0:04:27:4f:
cb:43:7c:33:76:04:70:a8:b6:1f:4e:25:8a:f6:26:d4:fb:14:
30:0a:99:6e:25:3b:65:8b:30:cd:a1:50:b3:6d:38:f3:8b:05:
1c:6a:bc:15:30:86:c1:02:b6:e4:e8:5d:34:f8:41:8d:90:51:
12:99:d5:5d:bf:ec:08:aa:cf:39:0f:f4:95:a8:fd:ab:1d:7d:
06:9e:fd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:48:13 2025 by rpki-client