Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/E0pkIzW9n-bHG2zbp1MoMQVm048.roa
File: E0pkIzW9n-bHG2zbp1MoMQVm048.roa (raw, json)
Hash identifier: B3BqiJI6fxLnY50JHLDClRKLpgrtgt/Wjoy5/3OG5qU=
Subject key identifier: 13:4A:64:23:35:BD:9F:E6:C7:1B:6C:DB:A7:53:28:31:05:66:D3:8F
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 0195811B875392F7511287FBE458C99D3F52
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/E0pkIzW9n-bHG2zbp1MoMQVm048.roa
Signing time: Mon 10 Mar 2025 17:30:19 +0000
ROA not before: Mon 10 Mar 2025 17:30:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61102
IP address blocks: 89.38.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:1b:87:53:92:f7:51:12:87:fb:e4:58:c9:9d:3f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Mar 10 17:30:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=134a642335bd9fe6c71b6cdba75328310566d38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:99:9a:10:cb:bb:c9:36:7a:ee:55:ec:3e:
69:ae:38:7b:d2:b0:50:21:65:b3:03:cb:50:24:30:
c6:69:51:48:76:0e:64:cb:84:af:ce:ea:07:c5:f9:
9a:9e:7a:e9:b6:69:c0:09:a5:9f:ac:9a:8f:d0:3d:
ea:38:4e:8f:ad:d1:ec:7d:6d:84:12:ed:12:a9:c6:
d9:be:67:53:76:32:41:1b:48:ed:4a:30:80:36:33:
89:86:d1:a6:ff:2f:49:7e:1e:18:e1:79:f8:69:ed:
f3:d3:a0:f2:9c:97:ac:bf:5b:4f:db:f2:ac:5c:3a:
a5:a3:62:ec:84:84:09:6a:f6:e5:aa:0d:5c:d3:d6:
bf:2a:bc:84:69:a3:9b:bf:53:f7:86:9c:08:07:b2:
dd:6d:0c:d6:19:ea:64:13:29:65:b2:ab:6b:4c:fb:
a4:da:4f:81:95:f4:b0:d0:c6:73:35:65:8a:af:4e:
6f:2c:43:86:db:26:6c:de:f7:30:ab:d2:00:11:2e:
dd:77:19:e0:8a:d9:6e:11:f5:2d:95:b4:cf:fd:c7:
9e:fb:8d:a7:21:f6:24:47:be:3a:93:c1:1b:31:44:
0e:2b:c1:ec:1f:2b:80:7a:3a:b0:01:2e:a3:1f:69:
08:39:f7:b4:80:ac:14:a7:60:c9:6c:f0:0c:5a:98:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4A:64:23:35:BD:9F:E6:C7:1B:6C:DB:A7:53:28:31:05:66:D3:8F
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/E0pkIzW9n-bHG2zbp1MoMQVm048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.31.0/24
Signature Algorithm: sha256WithRSAEncryption
61:1b:77:64:66:6f:ae:ba:96:3c:07:32:1b:d5:e6:aa:b7:d4:
60:94:1b:ae:d8:ea:04:42:04:41:ec:00:31:c8:0d:8f:b2:f2:
dd:9f:a6:79:cb:30:e9:93:7b:66:b3:a9:ea:c0:e5:ab:04:57:
46:68:bd:2c:82:f1:85:6a:19:8e:da:60:cb:a9:03:8c:6f:b0:
74:02:bc:29:ff:80:aa:63:bb:d6:5e:13:fa:48:17:88:c8:e5:
c6:8c:f5:6b:6f:6c:36:94:a5:41:e5:70:c6:f7:be:3d:b2:df:
91:00:4c:16:28:35:3f:f0:c9:57:eb:e1:c8:d7:7c:21:a1:d7:
af:e8:7d:39:e4:99:b2:60:49:7f:4f:15:25:d3:84:92:65:cc:
9c:c9:8f:1e:51:51:16:4b:60:db:43:b8:86:ba:34:0e:b1:69:
4b:7a:6d:15:80:d1:59:9e:e9:07:f6:13:22:5a:ca:62:61:d3:
2c:c0:26:5e:23:f5:b4:3f:00:96:e7:ab:f2:64:ea:15:09:27:
2c:b7:ff:0b:89:ba:bc:08:5d:de:50:ec:22:22:be:60:d1:56:
12:eb:03:97:e3:6a:6c:84:3f:60:a8:87:d3:6b:c3:12:b6:5a:
aa:8f:13:c9:45:69:20:83:a4:87:ff:3a:8c:ca:0d:34:fc:a3:
d5:5c:b6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:38:55 2025 by rpki-client