Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_SX9J3Pj_qnkU-NeTXczzP_hvKE.roa
File: _SX9J3Pj_qnkU-NeTXczzP_hvKE.roa (raw, json)
Hash identifier: 6VQwIkvY3KsPR6S+0eOyulpiBGBNevyU9Wft5kx+erc=
Subject key identifier: FD:25:FD:27:73:E3:FE:A9:E4:53:E3:5E:4D:77:33:CC:FF:E1:BC:A1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019426A7D054E86A9074EB2EE8EBF42606B0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_SX9J3Pj_qnkU-NeTXczzP_hvKE.roa
Signing time: Thu 02 Jan 2025 10:55:19 +0000
ROA not before: Thu 02 Jan 2025 10:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 89.213.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:a7:d0:54:e8:6a:90:74:eb:2e:e8:eb:f4:26:06:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 2 10:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd25fd2773e3fea9e453e35e4d7733ccffe1bca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fa:9b:58:93:f2:83:79:d4:4a:95:32:af:01:
44:7d:e5:f6:5c:ea:85:f2:d0:91:5e:2b:f5:48:0f:
f8:3d:58:3b:ae:96:74:ea:c3:e4:03:88:35:0e:3c:
b0:ec:02:3a:71:4e:81:2b:c1:89:7d:7d:3e:e2:64:
ce:7b:f0:7a:82:9e:e2:3b:d3:a9:99:98:63:48:01:
b5:54:fe:a3:e1:06:c3:46:a9:5a:a8:c2:85:6e:82:
fe:01:50:19:47:9f:82:15:7a:ef:0e:4a:5e:5d:00:
b4:a6:0e:fc:45:eb:6e:e8:fc:52:8b:32:2c:85:e4:
f0:60:91:cc:8e:51:27:bc:f0:04:3e:5b:3c:f6:8f:
9e:cf:0f:43:0d:33:78:8f:d9:e2:2c:1d:23:db:69:
31:7d:39:08:d6:40:98:e8:d7:29:a2:1b:35:3d:fa:
a8:bf:5a:4c:41:97:9d:43:68:eb:f5:e4:6e:19:2f:
d9:60:5a:8b:0c:aa:f7:5a:67:97:c7:13:02:9e:8a:
54:e6:71:e8:7c:e4:c2:e9:71:31:44:25:7c:c3:62:
01:22:bd:d1:64:27:68:bf:38:85:ff:cc:10:76:3b:
d8:01:90:1f:46:b8:88:f5:2b:8d:23:42:ab:ab:63:
c5:30:c5:93:61:7f:5d:cc:90:83:23:67:2e:8a:26:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:25:FD:27:73:E3:FE:A9:E4:53:E3:5E:4D:77:33:CC:FF:E1:BC:A1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_SX9J3Pj_qnkU-NeTXczzP_hvKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e3:ff:ad:92:7d:93:29:ed:8d:a7:a0:a9:0a:4d:65:f6:e7:
d9:90:1e:ca:93:84:f4:c6:7c:6b:15:07:86:3c:1b:26:b8:4a:
b0:d7:19:77:5f:67:a9:ac:17:c6:28:df:31:a8:e3:54:6e:9b:
b8:d5:1b:ff:c0:6b:4f:1d:2a:b1:34:0d:ce:c1:8a:65:7a:6a:
da:73:3a:14:63:13:82:80:1d:7d:7a:f4:a9:f5:0b:d8:04:88:
ac:83:1f:5c:be:47:48:99:e6:3c:bf:f1:95:50:1d:06:a6:02:
3c:10:fb:05:df:95:95:cd:46:64:74:ce:70:8d:85:2f:80:5a:
36:ca:29:42:3e:9b:60:69:61:42:30:b3:47:45:d5:31:66:e5:
e6:b5:ce:ba:8e:5f:e1:c2:30:14:3c:ce:39:31:3f:3a:24:b2:
55:67:70:70:b9:37:5a:92:95:7f:3f:3f:b0:7d:9d:de:82:98:
22:37:fe:cb:d7:b2:17:cb:e3:a9:3e:e3:0d:20:d9:7c:63:69:
fe:c8:d9:d3:45:4e:b7:41:e6:46:d5:27:13:59:55:f0:86:cf:
d8:2c:7b:61:e6:3e:9a:cd:80:11:82:3c:54:eb:ba:45:32:ab:
f1:16:9e:69:f6:26:c4:a0:c4:0b:d5:81:2b:41:13:4d:a3:77:
2b:ad:9c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:55:06 2025 by rpki-client