Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/9gxzTW1mgh8bmac2wLoLQrkF4uc.roa
File: 9gxzTW1mgh8bmac2wLoLQrkF4uc.roa (raw, json)
Hash identifier: sau0Cs/4+uEe1236DOzuPy0kOQnVJxfBhS41SKmSwpM=
Subject key identifier: F6:0C:73:4D:6D:66:82:1F:1B:99:A7:36:C0:BA:0B:42:B9:05:E2:E7
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 01954EF8C03B87D9D00B0A067E599D089CA3
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/9gxzTW1mgh8bmac2wLoLQrkF4uc.roa
Signing time: Fri 28 Feb 2025 23:51:19 +0000
ROA not before: Fri 28 Feb 2025 23:51:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.18.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4e:f8:c0:3b:87:d9:d0:0b:0a:06:7e:59:9d:08:9c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Feb 28 23:51:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f60c734d6d66821f1b99a736c0ba0b42b905e2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:f8:2a:82:a9:5f:43:a8:2f:47:cf:24:b8:
34:75:21:48:d0:45:9a:40:97:a9:eb:8b:14:72:f9:
f5:c5:a9:a0:de:21:6d:5b:ee:2d:a2:9a:fe:b8:f8:
b1:ac:97:b3:72:c6:c7:af:a3:1c:03:8a:01:30:07:
6c:1f:90:77:6e:40:d4:3f:16:ab:19:1a:b3:7c:09:
d0:be:50:bb:7d:98:6e:a1:2a:6d:43:c9:b9:ac:8c:
aa:c3:14:c3:03:ec:82:95:58:3b:88:30:93:4f:25:
91:da:c6:2e:ba:e7:58:fe:98:5b:5f:f0:d2:0c:4e:
9a:b1:5f:7d:72:55:f8:a6:18:e3:0b:27:27:b8:1c:
d5:b3:13:c1:e3:cc:ef:c5:04:41:60:0d:b1:b9:d8:
6a:6e:67:b1:31:e6:83:88:63:5b:b2:6c:c5:83:78:
e0:dd:09:f6:f6:ee:0c:e2:71:01:22:db:34:7d:64:
f1:6f:6f:63:d4:6c:f8:c4:8c:75:97:87:8a:b0:1e:
4f:04:55:cf:39:74:a8:0c:31:eb:47:a0:16:d6:c0:
cc:2f:74:a1:8f:f8:85:3e:18:d0:a7:60:1b:30:85:
62:79:70:92:e7:a4:f9:81:2b:ed:64:7a:eb:b4:13:
55:00:fa:b2:87:be:55:4d:85:51:ac:92:10:e1:5f:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0C:73:4D:6D:66:82:1F:1B:99:A7:36:C0:BA:0B:42:B9:05:E2:E7
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/9gxzTW1mgh8bmac2wLoLQrkF4uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:a6:ab:f0:4d:23:f2:22:2b:1f:cb:09:32:e4:87:23:b6:75:
8f:ec:f2:a4:bc:1a:e2:ee:0b:fa:82:34:36:48:54:91:02:b2:
10:64:9e:1f:78:13:a0:43:f0:3c:b4:24:99:42:81:54:2a:7c:
c0:e4:8a:d5:3d:f8:79:d3:75:d6:c6:7c:69:5c:09:0b:0c:c3:
ba:d5:27:50:5e:f7:00:f0:5a:43:76:a5:97:fa:71:b7:91:ea:
55:16:69:f2:5b:6f:39:a1:39:cd:2a:c7:89:18:5c:ab:fa:5e:
f4:e7:4a:ad:84:3b:c5:55:94:90:56:60:2f:61:5c:59:55:75:
8b:91:a9:80:7a:12:0f:fc:e6:8f:c5:72:74:b3:f4:e8:d9:b0:
02:ba:e5:5b:91:b3:fd:ab:a4:5e:fd:ea:fd:71:11:53:94:79:
e4:49:26:68:a9:dd:d1:18:8d:c0:6d:4c:b8:36:71:52:43:e5:
bb:82:0a:6c:fa:87:b6:57:c7:01:b5:a0:ea:1c:d0:85:93:08:
cd:89:61:e4:4c:0c:a2:c9:32:2a:d7:4f:99:62:b5:81:dc:6e:
e3:56:1e:b5:9a:5e:1f:c6:da:60:c3:5b:3b:f9:4d:bc:52:f0:
6c:0f:7e:58:4e:6f:23:53:b3:31:03:e6:51:f1:a9:ce:0b:57:
51:7c:9d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:10:20 2025 by rpki-client