Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/AbKOh9gpXgwFSloJdXfaWSLCFyg.roa
File: AbKOh9gpXgwFSloJdXfaWSLCFyg.roa (raw, json)
Hash identifier: Q+kVnk5rKEmbqNEXqZoiJZUiyaqs6rvEUwmrzWgFMQI=
Subject key identifier: 01:B2:8E:87:D8:29:5E:0C:05:4A:5A:09:75:77:DA:59:22:C2:17:28
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0196A5715717885B11B20C52E4DD54F51686
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/AbKOh9gpXgwFSloJdXfaWSLCFyg.roa
Signing time: Tue 06 May 2025 11:53:10 +0000
ROA not before: Tue 06 May 2025 11:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210281
IP address blocks: 94.137.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:71:57:17:88:5b:11:b2:0c:52:e4:dd:54:f5:16:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: May 6 11:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01b28e87d8295e0c054a5a097577da5922c21728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:99:95:74:8f:bf:db:2a:c6:d5:6a:02:4d:
59:dd:27:92:fe:b2:d7:00:fd:8f:6b:c0:c1:eb:0a:
05:e2:d5:d0:d2:7d:39:a4:8b:be:1e:11:8b:1e:58:
c0:32:45:59:d1:04:46:8a:50:7d:78:34:31:f0:53:
5b:c2:a0:dd:f4:a7:a5:d4:80:98:d2:28:97:0e:8a:
e0:bd:b7:64:6f:9e:99:46:f7:5a:17:c4:15:63:51:
43:a5:6c:f7:d9:e2:56:88:7a:75:0b:2b:ae:aa:f3:
b5:ee:fb:70:9d:3c:e9:d3:c8:19:14:35:c2:99:0b:
1e:cd:ee:61:e2:43:67:90:ae:f0:41:0e:65:eb:93:
61:51:57:31:41:6e:c5:9f:bd:63:31:fe:55:94:8c:
47:e0:ea:63:2d:ed:ad:2e:51:ce:7b:b0:af:d6:4c:
b1:0f:39:a6:ef:37:e8:a5:58:a9:65:95:48:90:72:
fe:10:f1:cb:c5:1a:a2:a7:77:1d:0f:86:fe:12:99:
4e:79:31:6a:f0:ea:d6:89:c8:b2:8c:28:65:87:a5:
e6:ba:41:af:66:9b:35:7c:ba:0f:06:54:0f:4b:b8:
42:58:90:3a:c8:c0:0a:00:38:69:08:b4:32:c4:be:
b3:7a:7c:8a:ee:65:08:56:d3:ec:ab:eb:60:42:63:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B2:8E:87:D8:29:5E:0C:05:4A:5A:09:75:77:DA:59:22:C2:17:28
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/AbKOh9gpXgwFSloJdXfaWSLCFyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5f:92:26:cc:5b:70:c7:b9:92:f3:bc:a8:2c:08:b3:f7:41:
2a:e9:85:f4:de:33:dc:38:8f:40:b3:69:73:23:4f:44:7b:16:
65:9a:7f:a1:9f:3b:03:3f:4b:8b:f1:46:3f:a1:2c:0f:cb:3a:
f6:26:c1:62:55:05:cc:13:25:93:f4:47:1b:fe:3d:a9:e3:ca:
76:c3:28:7c:f1:dd:b0:47:43:d0:2e:3b:50:7a:1c:69:9c:3e:
79:de:c4:e1:77:1e:66:4b:61:e9:5d:6c:43:ae:42:9f:7d:16:
11:87:86:cc:53:48:16:6c:93:af:73:c6:17:18:b8:77:e0:8f:
18:52:90:c6:0d:53:94:85:b9:bd:dd:40:bd:d7:58:6e:92:65:
d2:c6:5e:07:f1:27:e2:d7:de:57:a5:49:24:03:1a:4e:17:4b:
e4:a2:b2:a0:a6:14:71:18:b0:72:fb:18:f5:0e:5d:c5:c6:8a:
79:ab:7a:65:91:d4:3b:97:33:c4:8c:4f:71:bf:e7:de:6d:71:
0c:f2:b3:ac:83:8d:1e:89:04:24:b1:c3:ae:5f:6c:f0:d7:88:
79:de:12:53:29:31:e1:49:53:10:b9:aa:47:48:70:9e:09:95:
dc:7d:2e:6b:83:de:ae:8f:c6:b1:bb:d1:35:42:7d:11:ac:5f:
a4:d1:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:15:23 2025 by rpki-client