Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_xCsTMVNnW3y_NNwxVF3BkndTYg.roa
File: _xCsTMVNnW3y_NNwxVF3BkndTYg.roa (raw, json)
Hash identifier: 8GgKy4FkGUv9hIyocHaxNE+R3LdaIojfwaqUxmUrNn8=
Subject key identifier: FF:10:AC:4C:C5:4D:9D:6D:F2:FC:D3:70:C5:51:77:06:49:DD:4D:88
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421440C6D35D26F97F1856FB212C41D01
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_xCsTMVNnW3y_NNwxVF3BkndTYg.roa
Signing time: Wed 01 Jan 2025 09:48:15 +0000
ROA not before: Wed 01 Jan 2025 09:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209824
IP address blocks: 89.213.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0c:6d:35:d2:6f:97:f1:85:6f:b2:12:c4:1d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff10ac4cc54d9d6df2fcd370c551770649dd4d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:73:e3:05:09:6c:76:84:3b:55:e2:30:3c:
7c:5a:0f:e6:57:9a:e2:cd:59:43:c8:6b:63:6c:4f:
a8:c0:25:ab:36:0d:95:3f:95:a9:7a:33:66:cc:0d:
82:a7:4b:37:49:73:40:1c:9a:04:85:77:50:80:65:
6e:f7:bd:a8:46:a5:2a:cb:90:11:ee:c1:f3:f5:05:
50:2c:3d:a6:8a:0e:0d:02:b1:0e:91:29:9e:6d:d8:
62:63:4d:f7:b0:2a:3d:07:74:28:f7:b3:23:77:a0:
ca:73:37:2c:f2:11:14:1a:1f:97:03:1f:1a:c4:2c:
c5:8a:9d:1e:eb:97:62:28:a4:f1:fc:a1:2b:aa:d2:
ec:3e:ae:e0:03:d0:43:2b:ab:b3:ea:29:3a:f6:3b:
62:32:36:d5:62:a0:96:88:a5:53:e9:56:4e:53:9e:
b3:ae:e1:80:17:7d:d6:93:fd:68:ca:44:f1:b6:d9:
24:82:ad:7e:75:b3:56:45:80:a1:53:a3:80:07:cd:
46:1d:2f:16:fb:52:1a:5c:3b:4c:3e:80:02:94:a9:
ff:54:79:53:b0:7e:a2:62:fc:e8:b9:51:79:0a:52:
db:81:8e:b1:6a:07:5f:e2:03:39:81:45:dd:67:17:
7f:ef:81:38:31:36:b7:90:ad:94:32:55:22:c2:fd:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:10:AC:4C:C5:4D:9D:6D:F2:FC:D3:70:C5:51:77:06:49:DD:4D:88
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_xCsTMVNnW3y_NNwxVF3BkndTYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.133.0/24
Signature Algorithm: sha256WithRSAEncryption
79:3b:29:94:26:00:81:7d:e3:ea:02:98:88:b3:5e:11:97:e8:
66:e9:8c:07:01:2e:67:ab:1b:02:7c:7f:19:f6:68:ff:90:88:
4b:85:7b:1e:e6:bc:a1:e7:f5:d8:59:1c:72:b4:36:79:bb:55:
c9:c0:99:ec:0b:bd:a0:e3:f2:ff:07:d8:24:54:77:c8:6d:23:
aa:1e:a8:5f:c2:59:92:4b:0e:4c:0f:46:e9:5e:63:7e:77:f2:
50:11:28:fb:cf:0e:f6:63:90:0c:93:e8:a9:84:01:af:9b:15:
a4:f0:b5:64:d1:74:29:d6:ec:f0:32:57:18:b1:28:1c:9f:ea:
8e:1c:29:54:2a:1d:3b:ba:80:56:05:cf:e3:82:af:7b:2d:21:
5a:62:42:bd:1b:63:c7:40:30:50:54:d4:46:75:06:5a:80:6e:
e2:19:a7:1c:c5:0f:51:8c:1d:2d:c3:3b:30:6e:9e:58:ed:7b:
bf:79:bd:b2:1f:83:8b:25:b2:1a:86:2e:fd:4b:5a:9e:cd:2e:
32:32:d0:d5:68:55:49:fe:52:ff:93:ca:bb:83:fd:37:f2:1f:
79:08:76:b1:cf:c2:d2:9d:e3:34:c8:65:41:b8:0e:ad:4e:44:
d6:42:5d:02:a7:64:4f:5c:db:16:b3:f8:a8:70:13:5e:8b:cd:
77:68:58:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:51:56 2025 by rpki-client