Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T1CmHXzlfxMsCBJ7UWlQ58DkXSo.roa
File: T1CmHXzlfxMsCBJ7UWlQ58DkXSo.roa (raw, json)
Hash identifier: zVu0kRTfy3LPf96hd6d1hZG8BMOPWMk6Tbxg5pY+hkg=
Subject key identifier: 4F:50:A6:1D:7C:E5:7F:13:2C:08:12:7B:51:69:50:E7:C0:E4:5D:2A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143DF28A4B9CBD6AD7FE21FDC486F7E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T1CmHXzlfxMsCBJ7UWlQ58DkXSo.roa
Signing time: Wed 01 Jan 2025 09:48:03 +0000
ROA not before: Wed 01 Jan 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39600
IP address blocks: 89.213.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:df:28:a4:b9:cb:d6:ad:7f:e2:1f:dc:48:6f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f50a61d7ce57f132c08127b516950e7c0e45d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:56:2d:d5:d9:9d:31:5a:66:ff:0e:ae:0a:
f3:77:6f:3b:b1:28:88:ed:92:3d:c8:fb:74:78:db:
93:d1:53:cd:7a:2a:be:a2:38:78:05:83:17:98:6a:
46:1b:df:79:c2:b1:5b:16:08:44:0e:65:3c:9e:54:
2b:f1:77:f1:29:14:52:19:f9:9b:f1:d9:b2:70:15:
a9:c4:99:e2:16:7d:94:f0:92:b4:92:19:f5:2c:10:
5b:16:e2:4f:e2:32:91:1a:03:53:18:3e:de:d9:a6:
f3:5c:15:82:3a:d2:2f:cd:25:d0:e8:93:88:eb:79:
4a:c0:66:cc:3b:64:cb:2f:a4:62:6a:3e:54:43:88:
27:fe:aa:d8:10:45:71:36:75:cb:91:66:ed:c3:a5:
f7:44:71:3f:63:c3:ec:46:29:8f:d8:32:52:57:3b:
97:a3:28:03:b3:9b:98:6e:bc:71:7e:f6:cf:08:d9:
35:a8:df:cc:ce:d6:5a:30:9f:d0:0f:2a:f8:4f:4d:
d4:42:15:d0:de:e0:e8:ef:07:83:f0:8d:1e:07:05:
c5:db:09:84:f7:2b:6f:7c:a0:f2:02:74:bf:49:c4:
40:e4:71:c3:fb:07:48:4a:77:48:65:fe:15:5d:33:
36:7d:da:c7:8d:fe:17:51:95:66:2c:88:d4:5f:78:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:A6:1D:7C:E5:7F:13:2C:08:12:7B:51:69:50:E7:C0:E4:5D:2A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T1CmHXzlfxMsCBJ7UWlQ58DkXSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5c:de:5b:4c:c7:80:3f:76:4e:46:f6:60:18:85:64:52:29:
33:50:f6:93:86:eb:10:c3:c4:9f:21:e2:d9:4f:58:64:80:69:
ac:6a:04:ec:62:65:9e:38:c5:47:77:bc:03:cf:d6:fc:07:5e:
92:86:4d:25:ef:e6:5a:22:56:36:72:f2:44:53:87:96:46:55:
5c:69:c1:c4:1c:20:3c:14:3a:ef:3f:5c:fa:fb:62:af:d9:ce:
89:f7:9a:d0:0c:5f:7c:ab:c7:23:9c:b2:f7:4e:e2:9c:dd:d4:
45:2e:5a:55:18:06:ab:56:e5:6a:7e:8b:4a:70:72:db:7f:9d:
ef:5b:af:57:7b:24:11:f9:60:11:c7:95:52:c6:56:3d:47:a0:
49:20:2d:1c:57:f2:df:c4:93:2c:e0:25:2e:27:15:c4:01:98:
7d:55:38:2c:14:16:05:74:5a:aa:a2:6b:a8:fe:34:bb:99:62:
0a:09:49:c6:57:18:a2:b7:bb:9e:fb:f4:ae:42:7b:88:ac:33:
f0:2d:26:4e:a0:9e:46:46:06:04:29:07:07:88:09:d1:93:6b:
45:0e:40:00:61:67:7c:c8:bb:0d:a8:8f:04:8d:b1:33:6b:e7:
c2:99:73:9a:77:01:92:7e:e9:b5:86:88:12:0f:b1:1d:69:6b:
54:3c:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:43:53 2025 by rpki-client