Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/4D2zuD0Eb8Jo50PCAbIdMhetGWU.roa
File: 4D2zuD0Eb8Jo50PCAbIdMhetGWU.roa (raw, json)
Hash identifier: +8AdCsIbg6QqiShSPx8KF625Srbmwui9ApyKDaSR7f8=
Subject key identifier: E0:3D:B3:B8:3D:04:6F:C2:68:E7:43:C2:01:B2:1D:32:17:AD:19:65
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0196A0D0A524C7E5B2457D735853A91A99AE
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/4D2zuD0Eb8Jo50PCAbIdMhetGWU.roa
Signing time: Mon 05 May 2025 14:19:10 +0000
ROA not before: Mon 05 May 2025 14:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.187.13.0/24 maxlen: 24
89.187.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:d0:a5:24:c7:e5:b2:45:7d:73:58:53:a9:1a:99:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 5 14:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e03db3b83d046fc268e743c201b21d3217ad1965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:54:3d:0c:5e:59:79:8b:24:84:1e:f2:87:
9b:ea:49:0d:86:5f:ab:81:02:5d:ca:54:f7:f7:84:
57:63:fd:23:b1:d1:ad:5c:ac:a9:a8:34:7c:55:4b:
6a:20:41:5b:23:ab:59:d6:af:71:c2:0b:43:0e:80:
57:27:f7:54:97:5e:52:6c:07:cf:67:db:85:a3:2a:
a3:da:45:d2:8e:94:02:5d:74:b6:f7:07:b7:77:7a:
85:68:84:04:04:3b:8d:59:d0:a6:13:1c:5a:a9:5d:
10:0b:6e:25:7c:8c:ca:0f:2c:4c:49:ae:1c:80:5c:
e6:3c:08:9d:19:32:8f:81:3a:cc:ce:6f:91:f0:ec:
92:95:1d:fd:3a:36:bc:7d:9a:90:03:a3:9b:5a:6a:
4e:74:ca:c5:19:2b:60:de:aa:8c:9f:25:bf:9b:15:
ae:df:03:08:c8:58:d7:4b:20:bc:25:3b:4b:e7:c8:
91:01:cd:07:f3:1b:fa:60:30:b8:67:e8:cd:b3:41:
e4:90:70:9f:d5:e3:67:4a:21:8b:da:36:90:23:c5:
68:bf:4d:21:d3:1f:67:43:94:c1:01:10:ab:28:ec:
16:f4:55:99:dd:6a:15:dd:1e:fe:ac:16:fc:a2:d2:
55:aa:ab:21:94:2e:ca:e3:a6:6b:f3:9c:91:87:3b:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3D:B3:B8:3D:04:6F:C2:68:E7:43:C2:01:B2:1D:32:17:AD:19:65
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/4D2zuD0Eb8Jo50PCAbIdMhetGWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.13.0/24
89.187.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:22:d3:9c:6c:9d:19:f5:05:80:3c:bd:2c:dd:48:5d:88:ed:
76:c4:4a:67:88:64:dc:3b:62:09:96:d9:17:31:27:91:39:1d:
9e:21:02:79:07:ed:34:ef:e8:bf:42:40:46:48:19:0a:6b:5b:
e2:26:b3:a5:83:78:84:75:b9:1a:80:ae:41:5f:d1:9f:82:8f:
9e:bc:44:49:26:94:fa:ed:a3:86:69:16:c3:37:7a:b3:22:9c:
46:eb:4b:7e:80:3e:c6:4c:14:27:9e:cf:dc:11:2f:95:4d:92:
48:40:99:8e:ab:6b:0a:58:ac:4f:e0:15:49:4a:f1:28:b8:a0:
73:d2:79:0a:dd:71:3f:98:97:15:5d:0e:f3:49:67:98:ef:00:
bd:21:03:30:e9:d6:9a:37:00:4d:06:24:e1:45:e7:db:1f:79:
83:b7:90:dd:39:3d:14:18:a8:35:5b:72:75:63:ff:74:5e:62:
a0:e0:be:fa:a7:f3:ce:ee:b2:4a:08:9e:8a:69:4a:d4:aa:8d:
17:68:ab:66:7f:9c:f9:bc:ed:85:c6:80:58:37:69:d5:ab:8f:
e1:5f:54:0a:ef:79:bb:10:c1:3f:a5:67:a6:af:75:f3:e1:77:
bf:f3:7e:f7:f2:8b:03:29:0d:8e:f7:3a:68:5a:b4:0e:90:76:
c5:eb:75:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:58:06 2025 by rpki-client