Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/YFRpsaUmyU9EnR_gTKsgrH2_HMo.roa
File: YFRpsaUmyU9EnR_gTKsgrH2_HMo.roa (raw, json)
Hash identifier: hg0m11jJ3WBuNJmw40K5KsiZlFjYLuwxrxAHutFP45M=
Subject key identifier: 60:54:69:B1:A5:26:C9:4F:44:9D:1F:E0:4C:AB:20:AC:7D:BF:1C:CA
Certificate issuer: /CN=0e9a5c3283a6a16b4d205a7c564a382641cd8691
Certificate serial: 01942444D21D6A8812A83248092388A671D1
Authority key identifier: 0E:9A:5C:32:83:A6:A1:6B:4D:20:5A:7C:56:4A:38:26:41:CD:86:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/YFRpsaUmyU9EnR_gTKsgrH2_HMo.roa
Signing time: Wed 01 Jan 2025 23:47:57 +0000
ROA not before: Wed 01 Jan 2025 23:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204804
IP address blocks: 89.20.48.0/24 maxlen: 24
185.239.145.0/24 maxlen: 24
185.239.146.0/24 maxlen: 24
193.162.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d2:1d:6a:88:12:a8:32:48:09:23:88:a6:71:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9a5c3283a6a16b4d205a7c564a382641cd8691
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=605469b1a526c94f449d1fe04cab20ac7dbf1cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:f3:e3:14:f7:94:9d:7e:6d:03:b0:50:95:
f4:fb:a0:96:c8:37:24:7a:09:2f:0f:d1:65:59:a8:
96:58:fb:31:ab:33:91:b3:e6:32:b3:db:c1:7d:5a:
d3:34:42:16:b2:db:26:51:90:13:94:ec:f1:a6:e7:
08:6b:76:1f:47:37:2c:87:0a:d3:f6:d7:a4:bc:67:
f0:00:ca:22:0b:5f:1a:e0:c0:00:d7:10:87:88:3b:
37:48:6c:c8:5c:2d:d1:cb:a9:36:a6:d6:7c:17:9d:
3d:ba:28:15:de:b6:37:3f:fe:83:d4:15:8e:0a:a3:
c5:fb:cc:03:f3:d9:6f:15:ee:c1:50:bf:a7:62:a5:
31:da:7b:5e:0f:54:2b:a5:8e:be:f1:f6:86:8d:bc:
c7:46:ce:b5:0f:3e:1e:4c:4c:99:81:82:ba:87:7f:
98:d4:03:c2:dc:87:fc:12:ec:00:0b:d4:b3:83:1f:
f3:60:02:df:e9:7b:8f:ef:16:f2:12:0c:74:54:0a:
87:95:15:7a:7b:e7:26:58:46:05:ca:aa:35:f5:91:
1b:1d:19:46:c5:a5:9c:72:08:ce:5a:74:3b:16:9b:
77:61:31:fc:0e:bc:f3:4e:54:e7:23:85:19:0c:c8:
84:b6:db:86:72:d1:e1:a5:df:cb:f6:73:80:cc:65:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:69:B1:A5:26:C9:4F:44:9D:1F:E0:4C:AB:20:AC:7D:BF:1C:CA
X509v3 Authority Key Identifier:
keyid:0E:9A:5C:32:83:A6:A1:6B:4D:20:5A:7C:56:4A:38:26:41:CD:86:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/YFRpsaUmyU9EnR_gTKsgrH2_HMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.20.48.0/24
185.239.145.0-185.239.146.255
193.162.28.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fe:ad:b0:a1:b0:2a:8f:b0:69:69:56:74:f8:6b:d5:76:8f:
51:5a:f3:aa:7f:0f:07:52:3a:d3:55:99:f7:92:ef:2a:cd:fa:
a2:be:50:da:2c:6e:12:e2:8f:27:79:3a:ce:ca:14:78:d7:0c:
d4:3e:d9:b5:b7:f9:17:62:2f:ab:0c:67:15:a7:60:91:2c:c0:
06:03:7b:75:f3:1b:80:de:ff:29:c7:b3:39:b9:d5:b6:26:db:
ac:30:3c:2d:ff:cd:06:df:56:8a:fd:3e:66:6a:44:62:b5:4b:
ea:e6:59:57:89:0a:69:32:d0:ad:11:d8:a9:92:75:51:77:3b:
8d:89:fc:32:79:68:b2:d8:0e:20:ef:b6:6f:ae:7f:a0:5e:da:
4b:03:b4:f2:aa:40:7d:87:76:4e:4e:00:75:23:1e:a5:89:c0:
66:d5:a5:32:ee:14:f3:92:6e:49:ec:d8:ad:f1:42:71:80:a2:
cd:37:a7:42:a7:2c:5e:95:00:37:c7:56:41:06:fa:af:ce:b3:
1f:a9:73:75:b5:97:b5:e6:32:b4:aa:98:9f:4d:e8:ff:7b:3f:
65:79:04:02:c6:4a:85:6c:42:31:f3:c7:2d:f2:86:b9:43:e1:
48:e1:e0:58:9e:99:1e:ef:2a:5c:d9:00:e9:45:02:58:5b:73:
e2:9c:c6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:31 2025 by rpki-client