Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa
File: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (raw, json)
Hash identifier: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=
Subject key identifier: E9:DD:FB:BD:89:FF:FB:45:6A:E9:26:59:5C:43:BF:AD:4B:ED:E8:0C
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019421B24B1B1E246D6EDD066215B52E40EB
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47480
IP address blocks: 89.167.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4b:1b:1e:24:6d:6e:dd:06:62:15:b5:2e:40:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9ddfbbd89fffb456ae926595c43bfad4bede80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:26:ed:a3:b0:75:ce:62:e0:62:e9:98:66:
51:86:f1:3d:6f:a8:14:4f:1f:b6:02:0b:31:41:b5:
54:0d:f9:d4:d9:5a:e2:ff:fb:d0:20:36:7c:ec:c3:
b0:55:df:4c:f9:ed:ad:fe:38:8e:dc:58:e1:94:64:
c8:d7:09:30:fe:95:69:52:b2:fd:ac:a9:63:b3:00:
06:32:f2:de:e4:c3:a9:9a:5b:5b:51:3b:65:5f:cf:
de:31:c3:57:6b:7c:70:7c:ce:69:ca:91:ad:a0:ee:
0d:23:d6:b5:d8:46:de:90:7b:ae:e0:66:53:d4:db:
92:5f:fd:54:ec:7a:7d:71:31:e5:94:10:29:4c:ff:
bd:35:da:67:64:67:b1:cb:c2:a2:1a:66:5c:73:42:
b1:71:e9:56:87:f7:b3:92:50:48:11:e3:ec:14:94:
da:27:41:6e:43:28:e8:7b:e6:50:6a:ae:1c:03:9d:
aa:6e:a4:2b:95:9c:7b:f2:c4:a9:76:44:15:83:8a:
4b:29:03:11:90:c8:de:a6:d8:9c:65:e4:5e:3d:68:
2a:1e:6a:a1:22:0e:0e:0c:76:6a:fc:5e:65:ee:1f:
b5:a0:d6:0d:9a:63:ba:92:0e:90:44:b4:d5:c5:95:
89:76:1c:fa:87:de:cc:ba:65:55:41:11:e7:b3:86:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DD:FB:BD:89:FF:FB:45:6A:E9:26:59:5C:43:BF:AD:4B:ED:E8:0C
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.239.0/24
Signature Algorithm: sha256WithRSAEncryption
78:1b:52:4a:6e:02:17:bf:4e:0e:01:f8:47:19:ff:45:bc:ac:
bc:24:cc:d1:26:a0:ef:5e:c5:f2:94:29:7d:e1:d0:ca:0b:f6:
37:e5:4d:51:8c:40:4c:69:86:2c:e3:e5:13:47:59:57:88:16:
0b:0e:fa:ff:85:1a:75:fd:e6:f4:c8:99:94:58:16:db:d6:8c:
8c:eb:84:18:37:ca:c4:8d:76:5e:d7:ca:65:f6:2a:a6:82:c4:
48:a2:e5:24:73:34:82:b2:12:15:44:80:ae:cb:08:36:2b:ea:
a6:0e:8f:f2:fd:d7:6d:10:48:e3:3a:30:81:b8:56:90:75:62:
77:ce:26:2d:2f:48:da:1e:b0:27:27:c5:ba:d3:33:b5:01:9d:
fc:34:12:76:89:56:46:40:d1:01:b2:1c:ad:5f:b0:18:5e:e2:
4b:02:1e:5b:bf:78:c8:cb:e6:c3:b8:26:86:bb:61:66:08:c2:
86:71:18:25:bb:27:f9:b9:8f:3d:3a:8e:87:46:9d:36:a4:f9:
19:cd:0c:5f:2b:01:50:4a:45:78:de:c4:5c:9e:87:e8:35:59:
71:7d:20:bb:d5:c9:b7:d3:39:43:89:1b:a3:d7:4b:2b:9b:6c:
d8:0c:48:10:f9:2a:fb:37:8a:78:76:af:28:d7:6d:4f:ca:36:
2b:b5:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:57:39 2025 by rpki-client