Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/PpFwrmWlH3pZymfQKYsFi4K-adw.roa
File: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (raw, json)
Hash identifier: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=
Subject key identifier: 3E:91:70:AE:65:A5:1F:7A:59:CA:67:D0:29:8B:05:8B:82:BE:69:DC
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019421B24899C5686FC1EB298DB81A2189CF
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/PpFwrmWlH3pZymfQKYsFi4K-adw.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21509
IP address blocks: 89.167.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:48:99:c5:68:6f:c1:eb:29:8d:b8:1a:21:89:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e9170ae65a51f7a59ca67d0298b058b82be69dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:99:e9:d0:b5:84:26:bf:e3:b4:78:87:21:
cd:c1:77:2f:8f:a6:02:3b:d2:19:d9:a4:73:4e:5f:
7e:2b:e5:93:3f:87:4d:65:b1:64:5a:25:ab:8a:22:
47:ec:60:10:d2:fa:bd:52:e0:9e:52:cf:74:a0:b3:
6d:d7:a6:2b:8f:a9:54:d6:a0:2a:09:4e:8e:8a:0e:
0c:b3:59:33:a1:a1:f5:6f:be:d0:24:eb:04:81:41:
1e:2b:d7:f9:6f:6c:d8:de:00:0f:ed:b2:65:83:b8:
28:cb:16:16:62:53:ff:a5:2d:dc:a1:7a:a0:06:8c:
e2:0c:c8:7b:29:c1:e9:7b:33:43:90:e8:3a:9e:2a:
2a:eb:6c:cf:3a:53:02:fc:d7:1e:54:85:9b:a3:df:
48:48:55:3a:d7:e5:3e:e2:b3:82:9e:bc:f7:6e:ac:
23:73:f7:3a:a9:a8:a2:1f:de:65:f4:8e:22:3b:e1:
96:ae:4f:24:2f:5b:4b:54:87:d2:d0:22:ae:7f:45:
fb:ca:d1:3b:84:15:2f:f3:5c:a5:e7:25:c3:58:76:
a2:19:bd:af:78:d3:b8:a7:eb:a8:5f:d5:0b:73:a1:
9b:e8:9a:68:1a:12:88:f1:8c:c3:24:af:06:d1:34:
af:7c:55:d3:92:8d:ec:d7:d0:a8:5a:4b:fd:08:f3:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:91:70:AE:65:A5:1F:7A:59:CA:67:D0:29:8B:05:8B:82:BE:69:DC
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/PpFwrmWlH3pZymfQKYsFi4K-adw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.135.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ee:53:8f:84:69:cb:c5:f1:fe:1a:be:18:15:9b:6f:ad:6c:
00:20:52:e8:2c:4d:92:ad:14:a3:36:ff:12:b8:7d:32:8d:24:
52:7e:3d:5c:a6:91:32:7a:93:13:2d:c1:ca:14:07:50:21:7d:
24:09:04:bb:0c:c4:35:91:b9:d0:bf:86:7f:cd:f6:8e:48:08:
58:43:66:0a:14:27:b5:0b:ee:be:c3:76:d0:a0:47:b6:bb:56:
d1:fa:7c:ce:1f:2d:13:87:59:b5:0e:50:cc:d9:44:0d:a8:2a:
1c:05:be:8d:d7:d3:c5:4a:20:d6:6f:1e:f8:9c:55:4a:74:f2:
2c:39:25:2c:ea:dc:69:c8:96:45:c2:60:5b:9f:0a:29:52:6b:
49:3a:13:0d:19:49:2e:ac:69:00:7e:6a:2b:67:21:24:00:ce:
56:1d:de:ed:4e:11:38:3f:64:ac:26:c6:2a:d8:f7:af:f7:4a:
e8:82:6c:4c:d7:f4:eb:25:16:cc:d9:c4:10:f6:26:1d:53:87:
65:c8:10:e2:c6:0f:83:48:86:e8:c9:6f:aa:47:09:e4:39:88:
39:de:11:39:df:e5:b7:fd:73:08:d4:00:76:b4:65:d5:98:6c:
39:56:02:df:bb:de:aa:54:cd:68:93:c8:ff:49:60:eb:66:45:
84:86:78:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:32:29 2025 by rpki-client