Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VpHmEgY8MEC8UHZqES4seG4GdN8.roa
File: VpHmEgY8MEC8UHZqES4seG4GdN8.roa (raw, json)
Hash identifier: QOtIx68QrFCwB/NQZxcFNHMO6F4xJ4WqjIKxzcpVhvc=
Subject key identifier: 56:91:E6:12:06:3C:30:40:BC:50:76:6A:11:2E:2C:78:6E:06:74:DF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143EB4E31D520B432E0F010461901E6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VpHmEgY8MEC8UHZqES4seG4GdN8.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57014
IP address blocks: 89.213.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:eb:4e:31:d5:20:b4:32:e0:f0:10:46:19:01:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5691e612063c3040bc50766a112e2c786e0674df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:47:dd:f2:a8:04:2c:c6:ac:9d:59:42:85:
a9:cb:d2:57:51:aa:62:69:ae:59:bc:5f:12:e2:a8:
da:2a:fd:02:c2:8f:8a:4d:d9:bf:7c:75:18:01:36:
d6:7f:4d:74:ff:af:8a:43:52:10:e9:2a:c9:c7:0a:
6f:7e:02:27:1d:58:9d:6e:d6:e9:69:da:76:6f:f7:
93:60:56:78:a2:26:71:c0:20:79:04:21:85:28:d6:
ff:bb:a4:03:6d:1d:9c:59:a2:3b:b8:bf:3d:d6:75:
07:69:d5:a4:27:32:dc:a7:a2:a0:37:21:99:71:b3:
58:e3:3c:e4:f2:db:6f:b5:8a:3e:96:bb:18:6a:a0:
b7:38:90:67:c5:57:e2:f4:fa:44:be:73:e9:5e:bb:
31:52:ac:7b:c4:91:08:2f:22:88:89:b9:92:b4:df:
8f:b9:59:33:dc:01:b2:1b:ce:fc:ef:c9:09:cf:27:
ef:88:86:7a:14:ee:17:51:86:a9:f9:26:2d:62:fd:
9a:d0:82:8f:d1:31:88:bb:d8:3f:55:92:88:5c:64:
f7:49:af:fd:f6:18:fd:bf:68:c9:26:73:2f:24:6c:
47:1d:f2:a4:b9:1a:c3:58:75:f1:4d:35:86:b0:7a:
94:75:6a:25:19:54:11:af:1e:ae:8d:66:20:37:0b:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:91:E6:12:06:3C:30:40:BC:50:76:6A:11:2E:2C:78:6E:06:74:DF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VpHmEgY8MEC8UHZqES4seG4GdN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.105.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:32:b9:eb:ea:5f:e9:5e:6e:44:e0:bf:bd:25:87:3d:e6:d5:
f7:82:e3:ce:62:7f:c9:38:a2:9b:a1:fc:f7:6c:39:ba:bb:86:
db:57:2a:3a:e4:bc:53:ef:40:5f:b0:64:2f:fb:64:8d:b1:88:
2b:7a:66:2e:0d:e8:0b:f0:7c:1e:71:70:2d:81:74:f8:a3:0d:
a4:0e:2e:e2:cc:e4:83:f5:b5:6d:6c:30:a0:ae:2e:a6:60:eb:
d1:a0:56:59:0b:df:f8:1d:8d:52:a4:0f:da:08:bf:48:b1:82:
47:1d:28:4f:a7:df:11:1e:eb:f6:39:52:83:82:f4:ae:af:86:
25:03:28:fc:21:45:f6:51:76:ed:3a:da:1b:58:12:85:6c:d9:
a7:fa:ab:4f:83:10:5f:f8:7d:ce:6a:6d:01:ee:e2:ac:c1:93:
26:44:46:57:4a:2d:3b:a4:f2:20:17:41:7d:06:8d:84:b0:5a:
9c:08:f6:a8:57:ea:0d:88:c2:1c:93:15:a6:4a:ed:97:71:b7:
45:6c:ef:b3:84:27:a3:cc:8c:f6:6e:f6:89:71:3d:7e:26:05:
d5:0c:72:f7:c4:ab:1e:53:f5:39:b3:6e:a5:38:8a:8c:3d:ef:
2f:55:35:e6:55:d2:8e:9b:a4:d3:48:b7:21:65:de:fb:7f:84:
55:a8:b0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:39:20 2025 by rpki-client