Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/NPffvzyYCQ1VGQX5s9EH8MCdkLM.roa
File: NPffvzyYCQ1VGQX5s9EH8MCdkLM.roa (raw, json)
Hash identifier: ZIpNbtJtajAkg9tTb3DzFwtmkDZ5B+a0yULTgfFJCGM=
Subject key identifier: 34:F7:DF:BF:3C:98:09:0D:55:19:05:F9:B3:D1:07:F0:C0:9D:90:B3
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D662247723B2608062409A10F4FBD6
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/NPffvzyYCQ1VGQX5s9EH8MCdkLM.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 89.42.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:62:24:77:23:b2:60:80:62:40:9a:10:f4:fb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34f7dfbf3c98090d551905f9b3d107f0c09d90b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:db:7b:cb:24:2c:8c:02:ab:9a:9e:66:07:6b:
1f:f2:63:33:15:d3:04:f7:fd:02:6c:4b:35:ee:24:
b5:92:fc:68:0d:85:d6:e6:60:28:48:db:af:cf:4b:
fe:ee:a4:34:30:ac:3c:2d:0e:e9:e1:81:00:33:30:
e9:8c:5c:1c:16:f3:78:5a:01:09:ce:00:1e:35:de:
72:12:9d:67:48:db:0c:f3:d8:e5:8e:32:5c:27:58:
b5:12:02:f9:0d:82:e2:79:e4:d1:7d:b7:f3:db:b4:
4d:4c:08:c1:8e:18:7b:56:85:66:75:fe:c5:8f:48:
03:1b:a3:09:b4:41:ce:f0:c4:19:15:c9:3c:0e:31:
06:12:18:3f:86:01:47:11:86:2d:a9:b2:a3:f9:2c:
c2:0b:90:48:58:40:ad:f8:9e:4c:17:ea:51:bf:f1:
c9:5a:cd:3a:0b:d2:a6:d9:cd:45:bb:e1:f4:7b:0f:
3b:1a:db:a4:61:61:60:32:8b:ed:2b:9a:4a:f6:a3:
11:9a:62:3a:ce:e4:d8:5a:c5:d0:39:47:90:4e:7a:
41:be:20:22:1e:88:b0:ff:94:e2:1f:b8:dc:4b:e0:
40:aa:e0:22:c4:47:20:fc:b4:bf:de:20:96:64:03:
dc:ab:ae:fb:65:da:3e:59:de:47:8b:57:76:41:d0:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F7:DF:BF:3C:98:09:0D:55:19:05:F9:B3:D1:07:F0:C0:9D:90:B3
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/NPffvzyYCQ1VGQX5s9EH8MCdkLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.29.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ff:a4:1a:d4:89:6c:a3:a2:34:6c:1b:00:26:bb:cf:8f:c4:
de:cb:6d:33:b1:81:07:e5:db:2e:6f:70:9f:3e:c3:e3:4f:8e:
e7:74:40:4c:ef:da:9b:1e:1b:b3:97:01:f1:3d:bd:a9:bf:ba:
8c:06:80:5a:14:e5:5e:8f:2f:4f:b7:8d:af:2f:1e:35:b1:84:
89:88:72:b3:be:48:05:13:02:c3:11:00:04:03:4d:77:8b:7d:
c0:96:0e:6c:aa:31:ae:b6:8a:2b:70:c8:b1:56:30:d2:96:39:
cd:9b:a5:77:ed:50:09:2c:38:d0:d1:f5:a8:72:ba:88:69:23:
64:10:f6:6b:78:9c:74:64:7c:cb:b3:e3:62:df:7c:6d:d3:8f:
bf:a6:a5:16:12:59:50:2f:46:91:0d:49:6f:c6:32:41:b5:89:
fa:bd:f0:51:c7:bc:7b:da:b8:5b:e1:ec:0a:c5:96:af:40:53:
13:1c:98:7c:c4:58:00:dc:87:b4:39:a6:dc:fe:22:5d:37:53:
f7:ba:85:55:ef:b7:b8:42:2e:b6:b1:75:5d:40:92:3d:54:fb:
94:96:50:46:65:dc:cc:0e:ad:81:92:f6:0b:6e:b7:bf:d5:90:
fc:31:f8:b3:96:97:98:a2:8d:ac:97:5e:83:5d:a3:80:c1:e0:
c2:8b:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:51:03 2025 by rpki-client