Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/rPtueqwAgjU2IUHv5A02J4kLlys.roa
File: rPtueqwAgjU2IUHv5A02J4kLlys.roa (raw, json)
Hash identifier: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=
Subject key identifier: AC:FB:6E:7A:AC:00:82:35:36:21:41:EF:E4:0D:36:27:89:0B:97:2B
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 019473390E50BE4E473ABE0E06695014D907
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/rPtueqwAgjU2IUHv5A02J4kLlys.roa
Signing time: Fri 17 Jan 2025 07:45:06 +0000
ROA not before: Fri 17 Jan 2025 07:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51041
IP address blocks: 89.22.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:39:0e:50:be:4e:47:3a:be:0e:06:69:50:14:d9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Jan 17 07:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acfb6e7aac008235362141efe40d3627890b972b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:67:74:e1:b3:ad:86:9d:6b:59:76:bb:e2:
18:9d:f4:3c:c4:1d:da:38:c1:b2:e2:75:05:34:04:
b0:6b:13:1c:6e:b5:50:f3:47:fa:76:3f:45:6e:43:
dc:a4:b2:fd:df:1b:e0:4f:ab:c3:44:0e:db:f9:53:
df:f1:a5:3a:b2:9c:ae:d1:c8:c5:2f:00:6c:bd:04:
0b:c5:81:22:dc:e7:f0:8a:f2:f8:94:2a:ca:de:b3:
07:a4:7b:a2:01:d7:64:11:40:db:87:d3:4e:b8:a7:
e4:84:15:8b:68:ee:91:48:0b:8e:b0:c8:92:3d:e3:
21:2f:66:01:66:e5:b2:4d:cd:cc:5f:f6:09:21:ca:
69:c4:d7:41:1c:21:e5:28:f6:e4:3f:64:26:0a:24:
94:9b:d0:67:86:d8:5f:dc:bc:03:c0:d9:78:ed:70:
f8:bd:52:8a:f4:79:91:dc:27:fb:39:90:b9:b6:84:
b6:3d:35:53:92:7c:ed:b7:f9:ec:f7:d9:7f:0d:30:
04:b3:d3:ee:16:9a:4d:d2:ad:16:e5:f7:10:f9:ed:
47:9a:00:40:bb:de:a8:0c:7e:2d:b3:17:3b:ce:06:
1b:31:d3:9c:04:2d:92:03:70:5a:31:55:b9:25:86:
75:fd:92:44:f8:5e:3a:42:03:c6:1d:09:14:89:1f:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FB:6E:7A:AC:00:82:35:36:21:41:EF:E4:0D:36:27:89:0B:97:2B
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/rPtueqwAgjU2IUHv5A02J4kLlys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.216.0/21
Signature Algorithm: sha256WithRSAEncryption
73:eb:46:fb:c8:91:bf:f0:62:19:7d:39:8d:55:07:b5:79:fb:
df:99:0e:68:b5:31:4e:d9:3c:3d:6c:31:42:fe:e6:1e:f6:5b:
be:4d:ce:a8:23:3a:ea:00:2e:ad:d3:5f:64:2f:20:0a:c4:28:
6b:a5:0c:0a:b7:19:78:13:d8:db:49:a9:f1:c3:5e:f3:e3:e9:
a0:4a:4b:69:21:c9:ec:40:8a:c0:8f:6f:d3:2d:b8:4a:dd:13:
e7:f2:89:71:58:0b:bc:c4:c9:80:52:9e:17:4d:11:58:d3:cd:
9b:a0:ab:c2:38:81:e2:93:6e:13:b2:3a:b2:87:68:4b:21:8f:
74:12:56:18:a0:e4:93:7a:b0:b8:8d:b9:49:0b:ac:94:f6:f6:
1f:f5:bf:29:45:6a:71:30:a8:4a:2a:d2:0f:29:be:76:a7:25:
19:1a:0c:d1:d2:ce:a1:0e:fd:34:78:77:53:8f:76:0d:1b:73:
e8:78:42:56:93:06:de:f1:7b:5a:41:44:64:5f:24:48:37:fd:
65:24:06:10:b6:8e:4a:1a:1e:36:5e:0f:d8:84:1b:50:d6:f3:
ea:40:6d:c3:86:a3:6e:3f:a1:49:3a:11:78:c0:06:88:5c:5c:
fa:b5:92:2e:f0:1c:bc:0f:50:39:9d:10:3a:b5:a7:0b:5e:59:
01:f8:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:47:50 2025 by rpki-client