Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/b_rI4TYzOidB7VM9UUtKiSxW5LU.roa
File: b_rI4TYzOidB7VM9UUtKiSxW5LU.roa (raw, json)
Hash identifier: FSPXI3Dcd4NYJhk5Uaoa5iEsUpA3P4ClToZPryW5vs4=
Subject key identifier: 6F:FA:C8:E1:36:33:3A:27:41:ED:53:3D:51:4B:4A:89:2C:56:E4:B5
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C4E84E8AA6085FBAAABF00FEAEE04
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/b_rI4TYzOidB7VM9UUtKiSxW5LU.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60627
IP address blocks: 185.83.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4e:84:e8:aa:60:85:fb:aa:ab:f0:0f:ea:ee:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ffac8e136333a2741ed533d514b4a892c56e4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:65:ae:f1:48:be:fc:42:6f:73:9e:2d:d4:
41:46:de:e2:11:91:c4:02:76:21:e7:bc:1e:68:ab:
49:db:5c:07:7c:e9:f0:4c:a9:1a:24:28:49:0f:93:
a7:2d:99:72:65:47:e8:ad:7f:a9:f4:60:ad:5d:cd:
0d:e7:c6:2d:b2:6c:30:0f:df:93:6a:77:a0:cc:75:
5c:3a:11:70:fb:7e:fe:e1:40:7f:16:a9:32:62:76:
4c:7f:70:63:b8:c4:d9:58:39:e7:c8:99:f8:40:45:
46:f0:ce:a9:5d:47:39:2f:bf:5f:54:e0:a3:55:5b:
0e:2f:7d:88:31:bb:b8:e6:01:5f:ec:26:25:2f:f1:
2b:6e:bb:1f:88:b7:46:d6:94:04:33:73:b4:5c:7d:
bd:d6:48:bc:2b:67:fa:d0:54:3a:3c:43:c8:96:0a:
8c:41:52:c0:57:ba:f3:76:80:12:1e:d6:e7:94:bf:
d3:c8:c5:55:c1:37:6c:e6:ed:de:ff:3b:17:f2:e1:
1b:1e:58:21:34:dd:2c:46:e7:15:d5:55:a3:0d:e3:
68:24:9d:a3:37:b5:7d:02:3a:02:7c:9f:5c:66:c0:
be:bd:58:71:57:97:5c:9d:f7:8f:06:a4:48:1f:6d:
21:96:6e:f4:51:a3:9b:3e:ce:65:53:bf:bc:8e:f4:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:C8:E1:36:33:3A:27:41:ED:53:3D:51:4B:4A:89:2C:56:E4:B5
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/b_rI4TYzOidB7VM9UUtKiSxW5LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.89.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f9:31:b9:09:52:10:89:24:52:56:a3:06:d3:92:d0:5c:8f:
97:ce:02:e4:84:e1:13:58:ca:1a:7b:b9:48:9e:4a:0e:4e:d9:
bf:ee:ba:63:5c:d6:ab:7f:36:7b:51:57:82:8b:3a:e8:ef:18:
83:9f:ef:05:67:a3:00:a5:f3:90:83:ee:ab:de:b8:15:22:6e:
ad:7b:90:15:fe:0b:aa:e7:3e:b3:99:82:31:46:16:7f:1a:31:
99:e1:25:dc:81:1d:35:73:ea:a1:4b:18:5b:43:6d:f7:92:bf:
5c:dd:6d:10:19:6d:96:2d:92:fd:bb:58:6d:9a:cb:3b:3d:47:
9c:2f:e3:eb:48:63:b1:77:28:45:42:df:62:45:d6:f6:7a:ed:
1c:84:d0:9e:02:86:55:7e:90:5d:76:d4:88:b8:89:5d:a5:7f:
8e:ba:39:39:c1:80:b3:bf:bd:b3:de:1a:48:21:b3:e0:92:aa:
28:e1:f4:be:64:c8:cf:50:d2:c2:0e:32:d3:05:56:b9:ad:e6:
4d:f7:dc:ba:ea:68:68:c9:4c:08:51:23:54:39:99:0e:1b:6e:
6b:4b:d2:b4:d6:81:2d:9e:3a:ca:f1:7c:f6:f8:99:cf:b2:ab:
6d:86:27:a9:d2:15:cf:22:8f:83:56:ea:42:a9:af:9d:58:bc:
65:2a:98:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:22 2025 by rpki-client