Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/exOJgZWKhs3CfxljzDJO3y7m_kg.roa
File: exOJgZWKhs3CfxljzDJO3y7m_kg.roa (raw, json)
Hash identifier: sLEFa7RsALBhT6NfAUon7unSxy37m3yVXscXWcoyxvY=
Subject key identifier: 7B:13:89:81:95:8A:86:CD:C2:7F:19:63:CC:32:4E:DF:2E:E6:FE:48
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 019424454A43AE03AB64E997845AD0EBCC14
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/exOJgZWKhs3CfxljzDJO3y7m_kg.roa
Signing time: Wed 01 Jan 2025 23:48:28 +0000
ROA not before: Wed 01 Jan 2025 23:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4323
IP address blocks: 89.191.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4a:43:ae:03:ab:64:e9:97:84:5a:d0:eb:cc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Jan 1 23:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b138981958a86cdc27f1963cc324edf2ee6fe48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:08:b5:e6:0e:6e:95:f0:39:d5:c5:54:af:
a6:90:81:7d:52:5c:08:cd:55:96:d8:9e:e0:14:25:
ff:24:4f:b8:ea:e1:25:9e:e9:b4:99:df:cb:56:b8:
58:31:50:03:20:55:ba:1c:4c:de:7a:4c:ce:65:fb:
03:e2:ee:c0:68:72:df:64:2b:27:e6:3d:ec:a3:7e:
4c:24:7e:5c:08:f1:10:b2:2b:06:d7:67:81:5e:00:
15:48:76:64:48:f1:5e:02:b0:bf:3a:3d:65:73:c7:
05:3f:8b:e0:5a:1a:91:5d:19:dd:21:2d:51:27:ec:
ef:41:61:ad:12:b2:9e:57:09:5f:ef:fd:48:08:41:
4d:8e:a0:aa:0e:39:a6:b7:66:f8:f6:61:00:3c:55:
a9:d7:d2:4b:a4:b4:66:93:c2:26:8b:f7:e6:2b:fa:
6c:67:ba:1a:b4:21:20:5c:b6:04:d5:1f:cd:aa:e8:
77:f1:e8:5a:6d:d8:b4:18:36:9a:3b:87:61:43:1a:
48:b8:ed:a8:88:e6:3d:78:d6:6f:b5:3f:c7:97:99:
a2:bc:f4:f6:57:96:30:90:31:89:81:ee:5b:fb:9a:
37:f1:37:dd:35:d6:6f:03:d3:33:0f:3f:3b:2e:6d:
de:7c:5b:6e:4f:b4:c9:8c:80:fd:2f:9d:b7:f6:90:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:89:81:95:8A:86:CD:C2:7F:19:63:CC:32:4E:DF:2E:E6:FE:48
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/exOJgZWKhs3CfxljzDJO3y7m_kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.65.0/24
Signature Algorithm: sha256WithRSAEncryption
31:fa:43:bf:2d:96:ed:02:eb:45:04:ce:21:da:2e:ef:1b:8f:
11:52:65:0b:ef:2d:3b:9e:6f:4d:4e:03:19:42:ad:61:06:a6:
24:49:40:0f:d7:6f:5c:48:bd:d3:c0:38:02:17:d8:65:07:36:
2a:c9:53:22:c1:b1:a8:78:56:4f:b3:0c:62:76:85:82:3e:53:
6c:64:35:a6:79:f8:7a:cf:67:2c:3e:43:67:dc:f4:b3:d4:5d:
c1:ab:7e:c5:7d:4c:af:66:63:de:e8:97:21:d7:49:16:84:5d:
bb:d7:55:d4:83:df:96:3f:6b:cd:79:a2:bf:47:55:f2:5d:42:
53:45:19:44:4f:34:0b:df:e4:81:a3:74:f8:1a:27:cb:e9:49:
ad:33:e2:fb:b8:5f:1d:58:5f:e2:f1:6a:2a:51:2a:c0:3c:37:
05:5f:b2:45:bd:28:6b:b5:99:53:71:f3:9b:4b:ca:08:ba:fb:
d8:44:60:89:41:1c:bb:d4:69:60:5b:37:16:8a:b2:81:a8:11:
8c:ed:ac:73:d3:b4:07:ec:f9:f0:99:64:0e:60:84:4a:71:de:
76:e9:aa:a5:b1:6d:fb:64:b9:8c:26:70:f4:95:fd:9e:a9:23:
15:9b:21:43:59:f5:3d:aa:6b:09:76:4d:a4:67:5e:6c:c0:92:
93:70:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:57:13 2025 by rpki-client