Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9atOPzTZUZ2QoGmpae6Wa0fA5r0.roa
File: 9atOPzTZUZ2QoGmpae6Wa0fA5r0.roa (raw, json)
Hash identifier: usyHFQ58xQx1AoY/Ae/QkiNM6i84pPGY9tQo4syST0g=
Subject key identifier: F5:AB:4E:3F:34:D9:51:9D:90:A0:69:A9:69:EE:96:6B:47:C0:E6:BD
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6BCFA766B3BE661D6A4CA7793BA62
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9atOPzTZUZ2QoGmpae6Wa0fA5r0.roa
Signing time: Wed 01 Jan 2025 21:47:43 +0000
ROA not before: Wed 01 Jan 2025 21:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41763
IP address blocks: 89.42.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:bc:fa:76:6b:3b:e6:61:d6:a4:ca:77:93:ba:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5ab4e3f34d9519d90a069a969ee966b47c0e6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:51:6b:39:e6:d1:a8:fc:ec:df:66:23:3c:36:
5a:05:4e:2b:21:e8:55:79:ab:1b:1d:50:41:10:c5:
46:6b:f8:95:68:17:a5:80:b1:2b:fb:e0:65:6b:ea:
af:38:c4:a2:5d:79:ad:ae:18:d5:da:73:f9:0b:5c:
47:05:4f:87:f1:b0:64:cf:ed:1a:c9:80:82:09:89:
1a:40:ec:17:d3:0f:26:c8:c4:c1:ed:ec:2d:e0:6a:
96:67:cc:14:e9:17:dd:73:22:47:d5:58:80:e7:ab:
6d:82:b8:99:88:75:43:14:91:91:f3:de:cf:72:a7:
16:d5:f3:e2:12:8e:59:95:84:36:6b:09:3c:be:1e:
9a:9e:66:44:32:d1:13:61:1f:1f:03:4e:8e:3a:e0:
fb:4a:43:9e:06:8a:28:1c:8f:d9:7a:53:35:e3:ec:
21:16:b5:b9:87:56:a4:7a:aa:2a:cd:51:ac:a4:1b:
5d:c2:15:c7:b0:11:30:bd:05:70:9a:14:d0:1c:d2:
dc:5c:f6:04:9b:89:df:d1:81:b7:d6:da:01:22:f5:
17:d6:68:e2:02:c0:68:27:8f:25:45:ef:a8:01:2b:
c5:e0:d9:5b:55:b3:e9:7b:43:b9:a8:24:d8:73:f2:
48:0c:58:58:3b:a0:d3:1c:1b:97:55:65:8c:10:4d:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AB:4E:3F:34:D9:51:9D:90:A0:69:A9:69:EE:96:6B:47:C0:E6:BD
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9atOPzTZUZ2QoGmpae6Wa0fA5r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:03:31:8c:ca:1d:f3:29:95:04:af:d7:62:c1:d9:46:7b:74:
80:b3:31:cc:ed:f7:62:e2:1e:66:61:99:92:8f:55:c3:08:14:
43:55:37:5f:23:98:da:2f:e9:39:f3:89:74:4a:b0:6b:26:1a:
ad:47:22:92:69:a6:a8:63:d1:d2:a0:c7:89:0f:d9:fd:07:d8:
55:ef:46:a7:dc:0b:55:3e:6d:3d:e5:8b:12:b7:33:7f:6b:51:
16:a5:bc:d6:55:d8:d1:35:d0:d3:64:f9:a7:e0:7b:13:b1:c6:
af:5d:fd:1a:6e:fd:c2:44:a8:f5:1a:95:f6:1b:24:31:b5:6b:
9a:1c:aa:16:88:db:ed:8d:ca:e2:d2:f0:b6:fa:2a:68:e8:09:
06:cd:04:27:b0:fc:3d:cf:f3:bd:55:ea:0d:34:a7:f3:d8:52:
0d:d9:bd:56:7c:ae:53:04:4a:51:37:14:e7:8d:8f:bd:51:dc:
e9:fa:54:e0:59:42:0c:90:11:bd:f8:bf:f3:3f:6d:48:7b:27:
d7:a1:30:eb:be:39:52:78:51:c1:df:19:7c:35:79:25:e9:14:
d2:6d:c0:09:7f:e4:05:10:a9:c0:95:f7:52:b2:5e:43:6c:64:
d9:b7:54:fd:ab:c3:f3:f9:31:9b:90:c9:3e:01:3f:84:b1:c6:
99:95:60:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:05:21 2025 by rpki-client