Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Rv-Y6rHAhSJPoQHdCJLNBVXc--w.roa
File: Rv-Y6rHAhSJPoQHdCJLNBVXc--w.roa (raw, json)
Hash identifier: M7l/qsGDZqsfsCy3P3qXjnQMiv57RlRkHNf7JU+oLbI=
Subject key identifier: 46:FF:98:EA:B1:C0:85:22:4F:A1:01:DD:08:92:CD:05:55:DC:FB:EC
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D632CD325D6E2A4E5BA9AE14202DC3
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Rv-Y6rHAhSJPoQHdCJLNBVXc--w.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214241
IP address blocks: 89.22.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:32:cd:32:5d:6e:2a:4e:5b:a9:ae:14:20:2d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46ff98eab1c085224fa101dd0892cd0555dcfbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:e3:5b:a0:ba:af:ef:d6:2a:cb:b6:fa:94:
f9:06:65:90:22:14:8a:d4:a2:b7:71:a9:00:13:47:
9f:4f:fc:63:b8:ff:bb:79:61:43:a7:f2:9d:be:13:
71:a5:34:19:3c:5d:73:62:56:c2:86:d3:f8:a6:30:
6c:c2:4c:76:7e:3d:2b:bd:86:d4:7a:67:ba:8e:1e:
4b:64:c1:aa:82:f8:84:c9:ac:65:d1:94:4a:63:d7:
b0:84:96:08:a2:54:1c:da:44:c8:7f:51:ca:b2:e1:
4c:08:47:e5:0b:c1:23:d9:79:fe:b5:7a:ba:d8:03:
dc:a8:cf:25:89:4d:38:65:71:1f:6f:c5:b6:4d:a2:
78:34:ce:f9:e9:1a:34:ac:a1:13:7e:ec:e5:1d:d9:
7e:ff:d2:64:5d:dd:b9:2b:e1:e8:5e:01:00:cb:26:
07:9c:0a:b3:9f:37:25:f8:bb:03:b9:c1:87:74:5c:
01:71:36:18:4e:55:58:f5:0a:e5:3f:3f:e9:0f:57:
bd:9d:77:96:a1:c1:03:78:a0:a3:d0:06:19:b7:91:
dd:ba:8f:6c:71:0f:d1:18:f6:c5:9f:a6:29:67:05:
46:68:c4:de:cb:42:08:8c:a8:1a:b8:18:06:e5:45:
04:20:98:3b:3a:66:ea:90:8a:c7:df:eb:4c:a2:18:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FF:98:EA:B1:C0:85:22:4F:A1:01:DD:08:92:CD:05:55:DC:FB:EC
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Rv-Y6rHAhSJPoQHdCJLNBVXc--w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.194.0/24
Signature Algorithm: sha256WithRSAEncryption
03:3f:c6:7d:2b:97:f0:a1:2d:eb:58:34:52:57:be:d9:95:e1:
2a:d2:df:6d:51:1e:af:be:99:bb:2d:96:f6:6d:31:33:72:57:
bb:d3:ff:24:8a:14:f1:7a:be:85:ec:5b:8b:b8:86:4f:6d:29:
43:ab:8d:e9:d1:ca:24:4d:f3:54:25:76:48:7b:94:96:1f:15:
52:80:c6:93:55:f4:7a:c5:d1:9a:49:e0:b8:b4:ac:21:7e:87:
06:16:30:3b:cb:86:da:d2:3b:a0:60:b9:45:1e:4a:24:c5:2c:
9f:cb:81:80:67:b4:30:43:94:86:8b:89:a2:68:68:8e:de:0c:
53:61:64:b3:91:f7:b5:96:d2:39:7b:27:70:52:51:02:36:1b:
a6:85:73:b3:9a:04:ee:3f:27:a4:19:b0:f0:0a:fd:99:e3:e4:
f6:ae:15:ad:15:dc:d2:81:ad:0e:1e:94:56:0a:55:df:3e:32:
a1:3f:37:f6:71:41:31:25:90:3a:e7:d1:e2:07:db:6f:0d:f5:
3d:6d:72:9a:b2:55:35:d9:d7:e7:72:4d:af:7c:7f:13:fb:83:
3d:4b:84:e3:fe:39:78:cd:b7:6c:0c:dd:9c:2e:8e:f7:19:1b:
43:2d:93:42:77:13:a5:0e:57:d9:60:fd:85:f7:ae:8d:b8:cd:
e3:bd:b4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:15 2025 by rpki-client