Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SjeQ72jZIJwidbT18kYan12bPmA.roa
File: SjeQ72jZIJwidbT18kYan12bPmA.roa (raw, json)
Hash identifier: dMPC4LosPwkuMFzmTj5PdBpwRBjISSRtA/Dhhff8gQY=
Subject key identifier: 4A:37:90:EF:68:D9:20:9C:22:75:B4:F5:F2:46:1A:9F:5D:9B:3E:60
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01955B905455B87EA59717EE7D2E64C8AD7E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SjeQ72jZIJwidbT18kYan12bPmA.roa
Signing time: Mon 03 Mar 2025 10:32:20 +0000
ROA not before: Mon 03 Mar 2025 10:32:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 89.33.194.0/24 maxlen: 24
93.114.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:90:54:55:b8:7e:a5:97:17:ee:7d:2e:64:c8:ad:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 3 10:32:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a3790ef68d9209c2275b4f5f2461a9f5d9b3e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:86:b4:30:a2:f2:62:ce:de:09:b1:9e:49:
ad:1e:5b:72:b5:5e:36:62:e1:64:4e:9c:0a:09:59:
55:e8:46:0c:91:8d:64:b8:0b:e2:45:51:a9:b3:f4:
fd:db:af:77:16:8c:d6:66:67:70:d3:96:0f:e9:08:
69:d6:97:20:b1:72:23:f0:46:a1:a3:e1:ca:eb:c2:
8a:98:d5:53:6d:aa:fd:bd:e8:12:dc:4b:c5:96:cf:
77:24:2b:ef:d3:9b:54:fe:23:1d:6f:37:f8:22:b6:
7f:c9:6b:93:2b:5b:7b:63:a4:cc:18:b3:0e:7c:bc:
ac:ac:6a:cf:b1:20:ad:79:74:48:47:38:c1:b7:60:
af:c7:b8:bb:ed:49:1f:fc:0e:bf:97:64:89:d5:eb:
59:3c:c4:24:35:9f:67:21:42:b6:df:14:85:d0:0b:
6a:ef:80:44:91:0b:81:92:60:1a:71:43:e7:37:88:
e0:e6:01:c3:d0:68:b5:63:18:84:d6:9c:eb:ab:61:
71:b5:92:da:72:f9:a6:e5:41:93:94:44:42:54:ac:
4d:00:a9:cb:b2:b9:dd:7d:90:4f:42:a4:d6:a4:53:
78:06:4b:a4:c1:76:dd:e2:8a:ec:cb:96:47:5b:23:
6b:ae:4f:b2:6b:d0:82:6a:1a:11:2d:05:a1:b2:6d:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:37:90:EF:68:D9:20:9C:22:75:B4:F5:F2:46:1A:9F:5D:9B:3E:60
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SjeQ72jZIJwidbT18kYan12bPmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.194.0/24
93.114.72.0/24
Signature Algorithm: sha256WithRSAEncryption
48:9b:48:36:81:d0:a2:00:39:b6:27:3c:75:c4:e8:67:f0:7b:
dd:4f:98:f9:05:2c:17:8b:34:b9:52:2b:57:47:95:3c:5e:9d:
57:b7:53:84:a6:eb:54:43:8d:d6:ac:3a:17:a3:d0:6e:ac:13:
7a:16:e7:f9:05:93:75:ed:3c:e7:d3:e8:3f:83:a1:f8:6a:6e:
0c:5d:fe:be:ef:c3:37:dd:14:86:c0:6d:22:ee:5f:31:ec:2c:
0d:f4:f4:a5:1d:3b:a7:17:fd:57:52:69:ff:aa:cc:d6:93:5f:
8d:9c:89:88:37:a4:46:da:5b:ca:cb:2f:c3:80:5d:ba:33:35:
bc:1b:b0:55:c2:ea:38:de:77:23:74:0c:6b:f0:d1:9e:78:43:
95:af:d2:d9:51:99:6a:22:db:c1:16:04:08:79:be:b2:44:70:
4b:a0:1a:7d:84:7a:63:f6:ca:db:ec:90:23:7e:5e:8a:5e:82:
16:ef:77:17:be:ff:54:75:7c:9b:26:65:a5:20:19:1c:d8:29:
95:ed:c6:e0:c0:81:b1:f4:33:0b:9f:7e:99:8d:de:62:bd:50:
d9:a3:dc:dd:0d:b9:ee:de:ea:f5:fb:4c:65:bf:4a:8a:1d:14:
1c:28:cb:b0:28:39:be:de:07:e6:2c:f3:18:d0:03:19:41:c5:
ae:7a:64:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:00:40 2025 by rpki-client