Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/nIYkafi3Fbs2UEPVHy-1dk_XZJY.roa
File: nIYkafi3Fbs2UEPVHy-1dk_XZJY.roa (raw, json)
Hash identifier: C85UsMe6AVjaAgOWVelbVx4DGM8L/+RGHGv3IwPan5Y=
Subject key identifier: 9C:86:24:69:F8:B7:15:BB:36:50:43:D5:1F:2F:B5:76:4F:D7:64:96
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C6D5FA282E79FBDD7566E4BB691FD
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/nIYkafi3Fbs2UEPVHy-1dk_XZJY.roa
Signing time: Thu 02 Jan 2025 09:50:27 +0000
ROA not before: Thu 02 Jan 2025 09:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34205
IP address blocks: 81.89.112.0/20 maxlen: 20
109.236.224.0/20 maxlen: 20
212.14.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:6d:5f:a2:82:e7:9f:bd:d7:56:6e:4b:b6:91:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c862469f8b715bb365043d51f2fb5764fd76496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:a8:fc:f6:59:55:c4:ee:5c:5f:10:67:74:
38:00:a6:96:20:05:3d:da:98:fa:d4:12:fd:2f:ac:
0e:65:9e:af:6d:ea:89:a9:8f:c2:5c:a4:8d:b8:a9:
47:e6:93:2e:ba:1b:b0:3a:41:3a:5e:d4:cf:d1:76:
a3:c5:27:11:18:5d:92:3f:65:a4:f8:6b:91:0f:d9:
90:96:ac:b6:25:cc:22:02:29:8c:8a:30:59:45:83:
b2:dc:14:be:c8:5f:28:21:98:64:b9:58:23:8c:e7:
78:85:cb:02:ab:fe:b9:8f:14:23:f4:48:9b:d9:fa:
56:44:9d:66:a1:73:46:82:a1:25:75:f2:1e:1d:cf:
a1:44:c3:19:de:9c:cd:c4:1c:ad:33:c5:4f:28:e1:
ae:40:11:6f:ac:a8:5e:5e:70:49:3a:69:68:f4:31:
6c:15:40:ea:31:aa:cc:45:e0:06:07:69:21:3c:c3:
5e:ce:40:ef:5f:96:b3:fc:1e:c9:83:66:bb:be:4b:
56:ae:90:f6:3f:d6:89:82:bf:fb:94:21:d2:71:bf:
4a:ba:fa:8b:f3:38:95:79:3c:98:1c:67:55:57:8d:
d7:e2:e9:56:d7:6b:db:f0:97:e9:42:88:0d:89:f5:
e7:01:7a:c2:3b:eb:7e:ba:00:fb:68:72:6f:fd:c2:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:86:24:69:F8:B7:15:BB:36:50:43:D5:1F:2F:B5:76:4F:D7:64:96
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/nIYkafi3Fbs2UEPVHy-1dk_XZJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.112.0/20
109.236.224.0/20
212.14.192.0/19
Signature Algorithm: sha256WithRSAEncryption
92:d8:bd:dc:98:07:00:5b:28:db:c4:52:4b:92:4a:41:ea:f5:
46:2f:43:3b:0d:27:e8:11:42:cc:e4:81:96:71:19:b2:f7:56:
4b:3f:c4:6f:35:f7:c4:2d:1a:63:47:0c:ff:29:aa:ce:17:9c:
b3:22:7e:d2:84:32:62:63:21:c1:79:d0:38:0e:d1:d4:88:46:
84:31:ea:1f:ed:e6:a5:15:c6:4d:09:be:e5:85:22:e1:23:24:
4b:6b:bf:b2:96:20:4f:4c:93:a0:fe:33:84:03:47:3c:72:2c:
27:f0:bf:9c:ea:45:5b:af:f3:15:f9:db:e6:b0:e7:d0:ea:fe:
dc:f2:b4:2d:0f:3b:0a:1b:51:a5:34:32:c9:9a:e7:a5:9c:0e:
fa:8d:03:69:d9:46:d5:30:ec:d7:fb:7d:a9:6d:53:0d:d5:09:
b1:c6:a1:cd:84:b2:f7:35:84:8c:21:1a:9c:8d:aa:17:66:c3:
fb:10:78:30:8e:47:5d:d9:00:05:a4:55:92:e4:08:d8:89:34:
f0:6e:fa:16:a4:c0:ae:18:99:ec:f6:aa:02:c6:6a:6c:ae:12:
0b:47:05:04:81:13:fa:a6:46:e8:c3:4f:10:af:5f:87:2f:9f:
5d:2c:79:4f:86:bb:2d:f2:bd:63:8f:de:4f:e7:f4:e6:ac:1e:
e2:37:9f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:03:15 2025 by rpki-client