Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/rD4_vnlr510eZLzrr2aCnfyAvEE.roa
File: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (raw, json)
Hash identifier: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=
Subject key identifier: AC:3E:3F:BE:79:6B:E7:5D:1E:64:BC:EB:AF:66:82:9D:FC:80:BC:41
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019426D950A85E243495CC49FA333D52608D
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/rD4_vnlr510eZLzrr2aCnfyAvEE.roa
Signing time: Thu 02 Jan 2025 11:49:23 +0000
ROA not before: Thu 02 Jan 2025 11:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206403
IP address blocks: 89.223.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:50:a8:5e:24:34:95:cc:49:fa:33:3d:52:60:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 11:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac3e3fbe796be75d1e64bcebaf66829dfc80bc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:a8:60:8d:00:de:58:a2:fd:ed:01:a5:4c:
5b:98:bf:67:0b:fa:a6:a2:5a:10:c8:55:49:4e:df:
e4:ae:d4:fb:c8:70:a7:ec:e8:d3:e7:bb:41:9a:d0:
0d:bc:f3:c4:a8:fc:ab:22:58:6e:64:90:85:85:a9:
14:13:5e:d5:ca:a3:18:7e:5b:1d:e3:b2:ee:40:6e:
f8:f1:e3:4e:68:83:f6:03:28:15:76:11:51:ab:45:
ca:47:cf:4e:bc:b4:f2:94:1d:41:b2:d0:17:ed:41:
17:39:ee:82:dd:92:3c:64:db:c4:9f:d7:8f:99:dc:
a1:c6:9a:13:ee:42:ea:46:49:68:0b:a9:7c:65:5d:
4d:85:fa:10:f2:8d:a4:a6:a3:42:02:a9:a0:e6:1c:
e2:06:6d:7d:c2:b4:c0:38:cb:4a:82:e1:ae:82:2b:
ca:b2:33:b2:3b:b2:2f:fe:53:e8:84:b9:7f:39:90:
4f:fd:f0:b7:e5:4f:61:e1:ea:da:70:a3:ea:e7:7e:
ac:99:d1:63:0f:ee:6f:c4:df:f2:b9:aa:fe:d9:22:
1b:c1:d0:e1:54:27:27:63:c2:8a:2d:8a:7c:23:fb:
6e:bc:f9:de:b2:ce:c1:35:09:a7:93:ea:b5:94:a9:
16:44:9c:7b:3a:17:8e:37:a7:63:da:f0:61:81:40:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3E:3F:BE:79:6B:E7:5D:1E:64:BC:EB:AF:66:82:9D:FC:80:BC:41
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/rD4_vnlr510eZLzrr2aCnfyAvEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.16.0/24
Signature Algorithm: sha256WithRSAEncryption
18:39:82:4d:e4:a1:f0:ce:76:42:76:02:bb:c1:e2:bf:da:0c:
f9:84:41:9d:21:4e:39:6b:d9:bd:ed:ce:b1:27:44:89:c8:1b:
17:3e:58:da:c7:2b:2a:2e:76:de:45:0d:07:5e:93:79:91:80:
77:99:f1:c7:82:c3:37:3f:68:5b:01:3a:fd:5a:01:42:6c:32:
81:b7:f4:52:12:39:a8:27:5f:cf:ed:f4:fc:20:ec:06:74:be:
c6:35:cb:02:0e:83:9a:7c:f7:75:87:5b:02:be:93:0a:4e:61:
b4:ae:7d:d6:60:d8:5b:79:74:b1:20:8c:4e:ec:07:cd:cf:2a:
21:d3:bc:88:71:7d:89:16:3a:74:08:91:4d:c7:89:72:56:3b:
2f:81:08:03:6a:42:99:65:eb:f3:85:64:96:90:3e:a4:c6:d5:
06:1d:c1:b2:4b:27:ba:fc:19:cd:cf:96:c5:eb:ea:d0:35:6d:
0d:de:bc:b2:87:6a:44:c6:fb:b6:96:a0:3c:23:1e:ac:97:82:
d9:d6:8d:c0:ef:6d:e8:97:46:0a:30:c0:bc:04:7c:d7:1a:ed:
0f:bf:26:71:29:7d:c6:5b:c7:2f:84:4e:87:3f:0c:ff:f9:f8:
f5:8b:ab:2f:70:41:24:42:a6:7b:6a:f1:d3:70:ed:36:3e:b5:
0c:7c:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:37:32 2025 by rpki-client