Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/_eUdNns9K3pmktpDjbsJKL25mLM.roa
File: _eUdNns9K3pmktpDjbsJKL25mLM.roa (raw, json)
Hash identifier: H1epmYT39WpWPDkyNBRD00gVA4UMe6PA7lYf9t27Nt8=
Subject key identifier: FD:E5:1D:36:7B:3D:2B:7A:66:92:DA:43:8D:BB:09:28:BD:B9:98:B3
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 019425217764DA2F377F263C398A7A9D147C
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/_eUdNns9K3pmktpDjbsJKL25mLM.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35450
IP address blocks: 89.35.225.0/24 maxlen: 24
89.35.230.0/24 maxlen: 24
93.113.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:77:64:da:2f:37:7f:26:3c:39:8a:7a:9d:14:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fde51d367b3d2b7a6692da438dbb0928bdb998b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:ec:3e:22:92:92:0f:9c:57:19:1c:68:86:
a9:4b:e7:6f:dc:a2:fe:cd:6d:95:c2:db:83:76:d1:
cf:9d:5c:61:b5:f2:71:83:00:62:9a:cb:72:76:81:
b3:db:81:7b:a8:65:58:68:9d:82:ba:6b:61:f0:94:
2e:f6:01:f9:52:87:5a:79:07:44:e0:e0:d3:35:ea:
74:2b:fd:08:f5:d1:27:c2:15:5b:9b:b4:ff:4e:f6:
74:40:2f:b5:81:90:55:50:68:46:45:2e:e1:14:a5:
45:73:f8:d7:a5:0d:29:38:30:63:8b:12:69:fe:2e:
89:1e:8b:af:19:09:40:a2:cd:65:e2:10:26:62:a4:
a9:18:e8:d4:cb:96:38:65:f1:c4:e8:2c:76:09:5a:
d9:f8:3f:36:7c:da:1b:4b:58:ba:28:68:46:8f:de:
d6:38:dd:06:01:eb:86:87:ae:5c:49:0a:95:68:e1:
99:9d:cd:7b:03:c4:3e:bf:4c:60:b3:8c:bf:10:49:
f8:64:19:2e:48:63:37:5a:83:e6:4c:c5:8d:c3:1d:
df:ff:e6:7c:06:62:5d:80:92:04:83:36:33:5e:2a:
e3:71:73:a2:a6:6d:55:ae:0a:18:76:79:3f:81:a6:
65:d1:4b:d8:ab:99:e5:5a:0c:cc:79:fd:39:2b:8d:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E5:1D:36:7B:3D:2B:7A:66:92:DA:43:8D:BB:09:28:BD:B9:98:B3
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/_eUdNns9K3pmktpDjbsJKL25mLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.225.0/24
89.35.230.0/24
93.113.154.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a9:12:be:3f:ab:a4:6d:5a:ab:d5:ee:ce:87:98:44:71:68:
90:ac:9b:82:32:12:ff:fe:9b:7f:a9:3a:6b:f0:24:4e:f7:bc:
50:37:ed:c2:fe:b6:44:c5:37:8c:7f:4b:90:b1:49:9e:8b:3b:
bc:99:a3:be:3d:3b:e3:9b:09:73:15:82:19:f0:a3:a1:01:03:
c4:dc:6a:58:a1:02:60:9a:08:38:d2:8e:44:74:0b:d2:73:5f:
58:85:90:fa:27:e0:4a:f9:85:ee:ca:11:70:a6:e6:89:09:a9:
66:6a:51:b8:2f:70:aa:86:9e:f4:0f:97:18:66:f2:7a:37:72:
ff:fd:64:dc:e4:0d:d3:ad:2b:2b:8c:09:58:c6:75:2b:1e:bb:
b2:98:55:08:bc:a8:e4:40:4b:24:c4:7b:ea:0b:ca:2b:52:8b:
e8:61:c3:cc:1f:35:c6:02:05:ac:4b:de:79:56:1e:7c:e2:3c:
a1:46:04:10:08:bf:9a:9c:ec:a0:63:70:1a:c3:53:e5:31:91:
14:64:e1:a7:42:66:53:97:53:62:49:15:8f:01:b4:57:3b:48:
80:68:57:cb:8a:69:9c:aa:a6:84:f5:87:0d:3f:07:14:fd:5d:
8c:14:32:77:1f:27:8e:49:55:5f:7f:82:46:b3:55:fa:bc:ed:
1d:94:8b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:12:48 2025 by rpki-client