Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa
File: 1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa (raw, json)
Hash identifier: 8x4G+E8iExmOXonfPhkgFAssRVwUmXgRDU/QwrPhfTc=
Subject key identifier: D6:72:E6:E4:CE:71:7C:9F:EC:B8:D1:8C:E4:4D:59:BF:53:FD:6E:E7
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 0194214416EFF40A03F5F42D2DEBCA635D34
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51822
IP address blocks: 89.226.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 14:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:16:ef:f4:0a:03:f5:f4:2d:2d:eb:ca:63:5d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d672e6e4ce717c9fecb8d18ce44d59bf53fd6ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:1c:03:01:f1:88:f8:08:57:bc:b6:a3:be:
86:fa:67:0a:61:84:11:3c:13:4f:12:39:80:43:2a:
6e:fb:2a:f2:0d:0f:64:a0:75:56:ba:0a:27:ea:56:
8d:72:f4:9d:3e:13:f8:04:2b:e2:5e:30:c9:4f:95:
c2:07:0e:de:01:3e:e5:ec:2e:26:74:c3:53:98:c6:
4f:e3:99:6e:51:35:6c:e0:15:6e:23:11:b7:da:d7:
91:01:08:ea:35:38:b1:e7:1d:cb:40:84:ed:d3:d6:
d4:db:44:87:d0:1a:5e:01:0a:cd:66:57:1a:3b:74:
92:ba:c6:0f:ee:85:fd:1d:a9:9f:54:1c:28:6d:c3:
58:b7:4e:c4:7d:80:cd:40:3a:0b:d7:8a:d1:b2:15:
29:16:c0:3a:7c:12:c8:72:bb:95:30:4d:8d:87:5a:
28:08:05:4a:5d:1b:be:c0:88:02:b1:7e:38:ec:2a:
b7:cf:01:02:2c:c5:d6:c4:a6:0f:50:a2:d8:ed:f7:
4d:09:dd:ed:3a:90:67:0f:a2:7a:f8:85:aa:a2:03:
2c:a5:08:2b:75:6e:ab:05:5a:40:ad:30:a1:6f:aa:
59:fd:89:78:8d:88:cf:9e:dd:2f:c4:22:52:1a:ca:
fc:62:cd:9e:09:30:d2:df:ee:87:a7:c1:48:7c:f5:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:E6:E4:CE:71:7C:9F:EC:B8:D1:8C:E4:4D:59:BF:53:FD:6E:E7
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.226.253.0/24
Signature Algorithm: sha256WithRSAEncryption
80:49:fc:00:d4:a2:49:69:c6:0d:bc:c8:6a:83:bb:3d:e5:8f:
e0:6c:48:4e:21:c7:f4:3a:ba:cb:fd:b3:c1:b7:eb:96:88:03:
4b:8f:22:87:6b:4f:87:8c:71:2c:bc:3f:80:1c:1a:93:35:d0:
c3:70:01:87:29:79:2e:8e:48:37:45:6f:3b:48:74:17:e4:87:
e0:51:96:22:b5:d1:a9:bb:c1:ff:04:a0:c8:c0:2d:2b:e2:5c:
f7:89:2a:9e:7c:d3:06:67:ac:09:da:23:26:ad:84:59:bc:de:
20:59:a1:df:0b:60:26:7e:64:b1:69:05:b5:7e:7d:5e:d1:22:
76:da:37:51:45:67:a1:8b:09:13:de:6f:05:f8:92:b1:e9:c7:
b7:a4:3b:81:4e:80:cf:7d:a4:28:3e:48:ed:f9:0f:dd:73:5d:
85:92:92:a7:9d:eb:60:b4:d9:86:cf:df:39:a6:6e:27:cd:19:
19:e8:5e:1d:1a:c8:43:05:e9:71:de:45:7b:3f:5c:a9:1c:14:
cc:ec:35:fd:10:c0:af:2c:3a:2f:cc:83:1b:b7:41:8a:70:97:
91:68:04:fa:db:a4:9d:d8:ee:de:98:90:2b:c6:bb:45:4d:59:
c5:2f:c7:c1:06:ce:b7:fe:61:98:b0:03:9f:92:92:aa:ed:2a:
86:82:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:18:15 2025 by rpki-client