Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aVtvnhb4umijYpk3d3lywBjueGs.roa
File: aVtvnhb4umijYpk3d3lywBjueGs.roa (raw, json)
Hash identifier: qEcwm7bqxtyhr1J4k5MD2uL6buN0M+m8XDSYtuQdOwM=
Subject key identifier: 69:5B:6F:9E:16:F8:BA:68:A3:62:99:37:77:79:72:C0:18:EE:78:6B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143E623EEC75661F7D7665F75156091
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aVtvnhb4umijYpk3d3lywBjueGs.roa
Signing time: Wed 01 Jan 2025 09:48:05 +0000
ROA not before: Wed 01 Jan 2025 09:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50104
IP address blocks: 89.213.45.0/24 maxlen: 24
89.213.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e6:23:ee:c7:56:61:f7:d7:66:5f:75:15:60:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=695b6f9e16f8ba68a3629937777972c018ee786b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:24:a9:2d:47:79:e5:ea:b1:78:6d:6c:f3:
40:3b:bf:da:82:93:0d:81:50:23:d4:c6:ec:9a:90:
cc:32:e3:ec:d2:e8:e5:f4:b6:a1:ae:89:ca:aa:14:
1d:ed:4d:d5:86:93:b9:a3:21:bb:9f:8b:c5:6b:c8:
0d:a1:c4:85:9f:74:3b:6b:8c:a4:a7:72:d7:d4:7f:
05:1e:da:2a:75:6a:b8:98:e1:75:ce:0c:78:42:6d:
50:37:6f:54:03:45:4b:18:b9:f3:b8:c8:13:86:32:
87:6f:b5:f7:81:2b:51:b3:b1:29:c6:21:07:41:b3:
df:a8:df:4d:14:dd:cd:ab:45:34:60:67:4b:af:e5:
52:75:4e:3d:19:82:69:d6:3f:65:e7:5b:c4:82:39:
34:e4:15:64:b5:85:21:fe:3f:b8:81:e3:63:ab:a9:
56:4d:d0:52:2c:02:93:6b:b6:cb:1c:44:e2:c4:e8:
2f:01:b7:00:06:91:ff:70:31:5b:c3:fa:e7:f7:3d:
69:4d:fe:cd:41:5a:a4:45:83:38:5e:7d:f2:aa:bc:
20:64:af:17:c1:98:f9:4f:f6:22:07:4a:f8:4d:2a:
65:45:77:49:4d:ac:0e:8d:1f:06:b7:d0:2f:58:63:
87:17:2d:6b:78:78:b3:67:65:a7:db:67:a7:1e:d6:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5B:6F:9E:16:F8:BA:68:A3:62:99:37:77:79:72:C0:18:EE:78:6B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aVtvnhb4umijYpk3d3lywBjueGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.45.0/24
89.213.160.0/24
Signature Algorithm: sha256WithRSAEncryption
40:90:d4:9e:63:36:4b:d7:72:05:30:8d:15:5f:fe:3a:d9:43:
f8:bf:09:32:7a:97:f5:92:14:ae:2f:66:06:8a:b6:fb:f4:89:
3e:46:93:7c:04:e0:68:fe:28:8c:7b:df:52:78:f4:cf:3c:0d:
5d:dd:26:ec:27:fd:68:7e:54:8f:7c:ff:99:52:48:29:17:c8:
6d:63:3a:8b:83:4a:f1:ac:f2:b7:9f:4e:9e:af:5e:9b:b3:11:
46:62:a8:82:9f:5f:44:de:61:9e:2a:44:77:36:38:0a:84:60:
18:98:84:42:8a:36:c6:c4:a1:7d:cf:cf:0c:f0:10:4a:04:43:
dc:36:88:f7:dc:49:a5:23:57:41:e8:e7:7b:60:35:5a:44:0f:
72:d2:11:48:9f:ac:11:53:26:9f:d9:64:4b:90:d5:bb:cd:44:
b8:01:7d:b6:0a:0d:ca:7e:8f:9f:56:8f:1a:5b:c2:ea:be:66:
01:11:83:9d:ae:a4:2f:b6:bf:01:26:b7:25:78:9c:11:7a:0c:
9b:2e:99:ab:15:fd:80:c4:62:f4:73:5f:1d:32:60:74:b0:80:
44:66:1d:7b:ae:95:8e:4c:9d:32:ba:13:a5:87:90:78:30:26:
38:3b:c2:10:7f:6b:42:e7:e3:92:43:55:9f:70:b9:92:d1:e8:
46:d9:ed:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:38:00 2025 by rpki-client