Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y_mGo_tW4uoQzvEZ2m_Ekmq_l2E.roa
File: Y_mGo_tW4uoQzvEZ2m_Ekmq_l2E.roa (raw, json)
Hash identifier: c7+8CP/nejp/lPR9ZoasBSus01SZXPjw3aqkC6onjRY=
Subject key identifier: 63:F9:86:A3:FB:56:E2:EA:10:CE:F1:19:DA:6F:C4:92:6A:BF:97:61
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421442D36EEF6F4A7826DB9633F433BE7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y_mGo_tW4uoQzvEZ2m_Ekmq_l2E.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215269
IP address blocks: 89.213.49.0/24 maxlen: 24
89.213.51.0/24 maxlen: 24
109.176.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2d:36:ee:f6:f4:a7:82:6d:b9:63:3f:43:3b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63f986a3fb56e2ea10cef119da6fc4926abf9761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:73:af:c9:2d:2d:92:12:30:d9:39:32:86:
b9:b7:50:1e:d8:28:b0:73:90:07:85:66:54:e3:ae:
97:5f:6d:42:e1:24:f3:0f:51:63:a3:c5:d5:5c:92:
1c:8e:b8:38:44:d1:15:c3:7b:2d:a3:f2:96:d1:c3:
1c:92:ae:b8:2e:27:a1:8a:b3:9f:32:07:38:b7:44:
83:73:e5:cc:88:92:e8:38:b3:1a:e5:8d:f8:1e:d3:
35:06:19:9f:0e:7d:9b:9f:bc:25:0b:01:0a:7d:09:
68:c4:e7:2e:e3:76:51:7c:82:00:02:3d:7a:e7:6b:
69:d0:3b:19:bd:56:4a:91:26:2a:e9:42:ed:1a:df:
6c:2a:ad:a7:4a:65:d6:90:b7:45:1c:86:a2:ea:ad:
95:49:ab:cc:93:7c:35:e9:2a:bb:0b:28:59:33:82:
33:f0:59:a1:5d:2c:34:65:10:1c:bc:94:1f:87:e8:
61:41:81:9c:78:e1:b2:ca:b8:c9:46:72:ea:14:7a:
d2:d5:e7:a6:6c:aa:32:1e:5a:74:2e:fd:b3:75:29:
1a:4b:a3:cf:57:55:07:8f:f4:2a:ca:91:29:35:73:
4a:ef:87:82:ad:2b:60:8d:8d:ae:a2:de:4a:3a:36:
e8:e7:b2:3a:ce:07:b1:e2:d0:5a:46:8b:17:b5:61:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F9:86:A3:FB:56:E2:EA:10:CE:F1:19:DA:6F:C4:92:6A:BF:97:61
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y_mGo_tW4uoQzvEZ2m_Ekmq_l2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.49.0/24
89.213.51.0/24
109.176.254.0/23
Signature Algorithm: sha256WithRSAEncryption
58:71:2c:0d:c5:34:74:46:39:c6:cf:4b:99:2e:ce:94:9f:62:
a2:c6:5c:d8:e3:9b:b7:c5:d2:85:98:49:22:ee:32:24:1d:b1:
cb:c5:bd:f3:62:12:48:35:ab:70:bd:0c:9b:49:62:76:1a:ad:
f7:28:f7:9f:ab:c8:71:30:29:90:12:06:3c:98:58:cb:85:21:
e8:02:4f:47:82:c5:63:11:9f:2c:b4:39:6b:11:67:a1:7d:90:
c1:c5:49:38:dc:08:7e:45:b7:b2:d4:57:8a:c0:a1:fc:fd:24:
62:bf:26:a4:11:70:d6:1f:7a:66:9c:b7:b2:b6:66:4e:6b:8b:
f5:a2:00:18:3e:e6:4e:67:d9:96:49:0a:1b:e0:f1:1a:68:02:
94:cb:12:db:07:91:c8:96:7f:ea:96:24:04:1a:8d:b4:9a:3e:
3b:e9:37:7f:61:d1:af:dd:f6:68:e3:0b:3a:06:73:3d:a4:f2:
e2:d9:13:10:ea:ad:71:7f:af:51:8e:65:6e:71:21:20:01:d2:
3e:8f:9b:75:53:18:50:32:c5:65:0a:97:df:b6:e3:c7:b5:db:
85:42:04:a1:b7:a9:50:d7:52:84:fb:55:b6:cd:7f:fe:a5:c6:
0b:07:f5:81:6d:5c:14:6b:a9:d5:44:73:a7:d8:02:e2:f8:dc:
a4:84:87:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:45:29 2025 by rpki-client