Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/kYicqWZAzu8hiJozc5PHShhEq-E.roa
File: kYicqWZAzu8hiJozc5PHShhEq-E.roa (raw, json)
Hash identifier: OYwB+H/kkij7RR6F2kmOg8GEEkzDZp7ZZQMM62pUIGk=
Subject key identifier: 91:88:9C:A9:66:40:CE:EF:21:88:9A:33:73:93:C7:4A:18:44:AB:E1
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01945F950E8747EB5061F1993BA532CCAF43
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/kYicqWZAzu8hiJozc5PHShhEq-E.roa
Signing time: Mon 13 Jan 2025 12:13:11 +0000
ROA not before: Mon 13 Jan 2025 12:13:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214876
IP address blocks: 89.252.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:95:0e:87:47:eb:50:61:f1:99:3b:a5:32:cc:af:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 13 12:13:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91889ca96640ceef21889a337393c74a1844abe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:f5:35:b9:b2:72:09:09:21:99:ed:7f:e6:
c0:f7:c5:da:5f:10:6f:d5:e3:a2:56:0c:63:9a:b2:
63:ce:32:8b:d8:d7:05:5d:24:07:89:9b:3b:97:16:
b0:6d:9d:6a:48:8a:37:4c:16:4c:ff:b2:80:f7:c8:
15:2e:b6:71:3d:45:44:82:81:d0:b6:b1:4f:5d:e7:
f0:5d:09:3f:76:a1:a6:ec:6a:3f:c5:20:fb:7c:01:
19:2f:22:78:dc:c3:cf:5d:89:6c:5c:af:1d:68:6f:
62:9b:5c:08:1f:e1:3a:1a:34:6e:37:b0:03:5a:23:
a1:dd:4e:57:bd:1e:74:f4:af:13:49:28:70:54:f3:
a0:98:8a:18:64:73:bd:2c:2f:90:99:b7:4c:a1:05:
23:5a:6d:c1:7d:40:f6:c1:00:c7:d0:34:ee:51:4c:
58:4d:66:8d:5a:71:dc:8b:62:2b:4e:46:4b:85:46:
8b:d8:3c:5c:08:b8:58:6a:e0:a5:96:d6:fa:68:ce:
f3:8c:20:7d:9d:6d:c2:5c:b7:9b:ca:4c:a9:16:c6:
db:b7:55:17:fb:3a:37:f4:c0:24:2a:bb:03:ae:2b:
b2:dc:b4:66:27:76:43:4b:25:e7:42:4a:16:d0:51:
da:c5:d3:5e:6e:22:a0:69:5d:d5:24:8d:8d:49:bd:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:88:9C:A9:66:40:CE:EF:21:88:9A:33:73:93:C7:4A:18:44:AB:E1
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/kYicqWZAzu8hiJozc5PHShhEq-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0a:73:01:ea:d5:b9:08:73:8e:37:32:a5:64:e9:e0:72:05:
93:05:34:be:34:28:f4:9f:73:6c:f4:5a:6f:06:86:b5:1c:08:
20:d7:b2:c9:e9:f9:da:73:2d:d9:f6:70:0e:33:ef:fe:7e:89:
ed:4d:59:20:4f:32:1a:95:ec:4f:bd:8f:35:76:d7:6f:05:52:
d0:d6:e1:e3:ff:90:b4:66:51:79:e2:36:7c:75:c5:e1:41:9d:
91:ff:0d:8f:15:8c:6c:29:a3:5e:5a:60:41:6a:ac:59:9b:a9:
e5:1c:10:7b:9f:36:68:57:8e:9d:e7:c3:38:b7:4a:f3:6b:ea:
c1:28:19:d5:7c:bc:c6:e5:2a:08:8f:0b:f4:05:17:5f:f2:26:
3d:5f:af:e2:a3:5b:a8:a1:ce:3b:1b:9c:c8:b5:c1:b5:5a:48:
55:9d:6f:ee:46:28:6e:bf:52:48:98:16:8e:95:fe:d1:7c:41:
4c:80:ef:4a:6c:fa:dd:24:de:e9:cc:80:fb:c1:61:16:80:80:
9e:ed:93:f0:91:78:b7:47:cf:9a:7d:eb:56:c2:4b:4b:65:32:
d1:de:7e:53:58:11:6d:72:69:28:b1:39:41:20:5d:19:2f:62:
83:10:e9:ae:78:22:5d:98:e4:01:bd:cd:f1:b1:68:fb:00:22:
93:84:dd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:46:54 2025 by rpki-client