Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/Re_UifNbcWs-_GiyHAPPOm-yvBI.roa
File: Re_UifNbcWs-_GiyHAPPOm-yvBI.roa (raw, json)
Hash identifier: /7ri6bimyKdV62h18w2ONkdLybTnrpaymT5BH6L1jYA=
Subject key identifier: 45:EF:D4:89:F3:5B:71:6B:3E:FC:68:B2:1C:03:CF:3A:6F:B2:BC:12
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 019425217E444A39050AF82893E1A4A66916
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/Re_UifNbcWs-_GiyHAPPOm-yvBI.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212174
IP address blocks: 89.35.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7e:44:4a:39:05:0a:f8:28:93:e1:a4:a6:69:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45efd489f35b716b3efc68b21c03cf3a6fb2bc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:cf:b8:ff:93:5e:d0:08:70:e3:b7:4a:4a:
ef:b5:89:a0:97:34:0f:79:6e:5f:c7:b4:8b:a1:73:
1b:ae:1d:3e:1b:15:9d:09:2b:83:c1:24:0b:0c:4e:
eb:14:ec:7a:8b:cb:2e:68:85:cf:56:45:ec:93:82:
6b:5a:1e:c1:92:a8:c2:d6:08:11:1f:53:da:92:8e:
49:6a:15:80:f0:f8:9a:6f:da:6d:f7:5b:50:d5:cb:
38:3d:21:36:0e:63:5c:cc:5b:de:34:47:08:03:e4:
0d:ce:c5:8c:5d:9d:33:9d:ed:7a:0b:0b:a1:c3:95:
6d:37:fe:bf:25:bd:f7:e0:d0:5f:fa:4c:49:a1:75:
eb:6f:aa:51:ef:b6:97:7e:9a:ab:8e:17:4f:33:e9:
30:be:69:78:32:b7:7b:0d:83:84:32:1b:31:82:25:
cd:95:d4:7d:32:d0:9b:f1:15:44:fb:ed:0a:7b:42:
db:77:0a:c4:64:bb:d0:65:51:3c:a8:58:68:d8:03:
30:20:0f:f7:2e:68:bd:25:6d:9b:e7:19:1c:69:4f:
18:16:24:4c:98:ea:07:4d:b6:1c:b1:ff:51:73:7a:
52:4e:9e:aa:60:f1:02:4f:4e:6b:eb:15:e3:1b:d3:
04:a9:5d:4f:09:44:00:9b:f4:cd:3f:f0:6d:d1:b1:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EF:D4:89:F3:5B:71:6B:3E:FC:68:B2:1C:03:CF:3A:6F:B2:BC:12
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/Re_UifNbcWs-_GiyHAPPOm-yvBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.233.0/24
Signature Algorithm: sha256WithRSAEncryption
63:17:0f:60:59:81:1d:93:1c:fd:d5:15:88:f7:f5:1b:cb:25:
49:17:35:d9:76:a9:6d:a4:0d:fb:2a:db:f3:d6:ba:2c:9f:ea:
c0:0e:da:71:d0:cb:3e:f9:14:39:e7:60:dd:04:7e:64:a6:b2:
a8:4c:0c:8e:96:4d:a0:9f:c3:b3:49:c5:cc:d9:7b:e7:29:bc:
36:72:de:0e:6e:60:bf:28:f0:bd:60:18:b9:62:3a:e9:11:64:
87:03:9d:28:80:dd:c0:58:1e:f5:af:a1:78:b8:ae:ac:8c:ad:
2f:a2:aa:5f:d3:1c:54:47:bd:13:13:ae:0b:05:61:0f:07:79:
af:a3:c0:d5:c4:12:7c:af:bd:45:8b:72:56:bf:23:f0:a6:ca:
b4:75:54:14:ef:55:cd:1c:28:fe:4c:08:bd:a7:fc:dd:08:69:
46:bd:bc:93:c9:f7:be:dd:38:8b:d7:a9:69:39:74:72:78:8a:
7e:bc:c2:42:e3:31:be:5f:a2:67:ab:bc:15:f4:39:1f:88:37:
5f:b5:1b:95:d3:17:4f:5a:0c:49:53:8a:d8:80:6f:98:21:52:
92:5a:36:b0:02:6c:f8:e2:3a:ae:32:5f:30:8e:74:d9:db:16:
08:13:3b:c3:a8:bd:64:75:4d:e5:a2:24:b1:a2:d6:74:9e:03:
f6:f1:97:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:57:57 2025 by rpki-client