Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UQW9_mJ0ruK_EJBM7C3AzciAxQw.roa
File: UQW9_mJ0ruK_EJBM7C3AzciAxQw.roa (raw, json)
Hash identifier: IAktf7tHFtSv/xpvc7DnpflsUJuggerLzVLspNBXWwM=
Subject key identifier: 51:05:BD:FE:62:74:AE:E2:BF:10:90:4C:EC:2D:C0:CD:C8:80:C5:0C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6C70C64FD1C2CFF907BA3281CA47E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UQW9_mJ0ruK_EJBM7C3AzciAxQw.roa
Signing time: Wed 01 Jan 2025 21:47:45 +0000
ROA not before: Wed 01 Jan 2025 21:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199414
IP address blocks: 89.33.12.0/24 maxlen: 24
89.46.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c7:0c:64:fd:1c:2c:ff:90:7b:a3:28:1c:a4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5105bdfe6274aee2bf10904cec2dc0cdc880c50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:82:34:dd:1b:81:31:04:cd:d2:99:0a:35:2b:
83:30:5d:60:26:3a:aa:86:bd:2e:7d:f2:73:57:a5:
0c:31:5e:d9:10:e2:51:e2:70:56:a2:96:d2:f9:a9:
75:4a:33:d7:e0:55:71:4e:cd:3f:3b:cf:a6:77:7b:
42:f8:ec:bb:2b:f2:72:37:0d:d1:80:38:18:33:21:
e6:e5:9c:0e:54:96:ea:46:6c:fb:fe:e6:6c:52:bc:
7e:79:f2:df:9c:c0:c2:b8:75:37:fa:2a:ad:31:6c:
05:86:6e:07:12:54:45:26:95:2b:ec:30:db:94:ee:
64:96:e2:83:23:f3:f9:38:3c:cf:05:da:ea:f9:fd:
6a:56:46:ec:f2:28:fd:cd:71:05:f3:23:71:dd:e3:
0d:0d:af:6b:aa:b6:d8:6d:cd:81:c6:74:7a:c4:b3:
73:d3:d9:91:07:68:25:43:79:f0:c4:b8:83:4e:0e:
89:d1:77:5e:82:59:9a:5d:6c:fe:00:3c:8b:6f:31:
2e:4e:99:91:a4:27:64:34:f1:c2:89:d9:1b:f8:81:
92:c6:16:6d:4a:aa:2b:e5:e0:93:ae:36:85:06:a7:
9f:b5:83:27:3c:ca:6c:c4:2e:ee:d8:c0:f5:42:8e:
0f:91:5a:df:c2:18:49:c1:96:c2:96:76:73:5a:d8:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:BD:FE:62:74:AE:E2:BF:10:90:4C:EC:2D:C0:CD:C8:80:C5:0C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UQW9_mJ0ruK_EJBM7C3AzciAxQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.12.0/24
89.46.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:df:cd:59:06:73:c6:f0:52:89:88:ca:8b:73:fc:ad:fc:7d:
ed:89:90:b2:d6:71:56:d8:f6:f1:85:e3:30:99:2f:ad:54:6e:
ea:dc:39:06:22:6a:56:a0:75:55:62:e3:2b:eb:26:33:e8:68:
07:b0:81:30:ad:b8:65:44:a9:29:03:b6:28:df:41:3b:18:8f:
4a:18:24:23:77:fe:d4:fa:34:62:d2:8a:f9:65:2a:4f:0f:7e:
fa:ac:3d:e0:2b:0c:0e:c1:46:58:92:a2:5e:14:40:73:c7:26:
8c:1f:75:fa:2d:9e:7f:d4:83:db:0b:a5:96:be:2e:3f:5e:13:
7b:97:a7:7a:36:f0:eb:1b:e7:3d:cf:9b:22:e1:bf:b6:98:29:
99:95:50:d2:e6:ec:76:6b:48:2d:6d:62:d4:ef:29:6b:a6:e7:
6e:4d:dc:e8:94:48:13:23:3e:58:cc:ee:44:36:aa:79:33:0b:
37:1c:42:b2:cd:a4:04:82:c4:ff:85:98:09:e3:b4:e5:25:c2:
34:5c:65:fe:8b:e0:c6:91:96:52:17:2e:8c:2b:08:68:89:de:
7e:f7:19:20:91:17:d5:02:36:3c:f6:9b:92:f6:ed:7c:e9:ec:
6b:94:97:a8:00:7b:ec:8b:63:aa:b8:87:c0:2f:eb:dc:e7:e1:
1d:cf:0b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:21:10 2025 by rpki-client