Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/T1gh1hk6ej12g4Ihw5JL9jevaLA.roa
File: T1gh1hk6ej12g4Ihw5JL9jevaLA.roa (raw, json)
Hash identifier: S9ngvgv1d+3Twe9rVRGrD4AR8LO9wBk9cDUOi8GIi4o=
Subject key identifier: 4F:58:21:D6:19:3A:7A:3D:76:83:82:21:C3:92:4B:F6:37:AF:68:B0
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01968AF986035826A7A1B8235EA50CFE4DAC
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/T1gh1hk6ej12g4Ihw5JL9jevaLA.roa
Signing time: Thu 01 May 2025 08:32:10 +0000
ROA not before: Thu 01 May 2025 08:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 89.187.5.0/24 maxlen: 24
89.187.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:f9:86:03:58:26:a7:a1:b8:23:5e:a5:0c:fe:4d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 1 08:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f5821d6193a7a3d76838221c3924bf637af68b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:ff:3d:52:5f:ec:e4:10:8c:86:93:83:f0:
28:bc:21:67:b7:67:c7:29:ff:d2:47:e8:71:cf:80:
fe:ad:0e:d4:7a:1c:73:90:eb:3c:fc:29:e5:3c:8d:
dc:b9:b5:a8:8d:d3:58:a7:ef:3d:dd:f7:57:94:ed:
99:58:9d:1b:df:64:53:5c:5e:ca:47:55:83:2f:85:
4c:29:2f:31:ad:b7:14:41:9e:55:18:6e:4e:2a:d7:
69:a7:56:f6:b0:ef:81:92:69:3e:b6:d0:8f:40:0e:
36:73:28:59:b4:56:ad:f8:26:78:07:8c:f3:47:8f:
f3:ad:61:f6:fc:7d:22:14:3a:c7:26:b1:4f:1d:1d:
7e:39:5b:8a:3d:04:f9:96:be:0c:f4:9a:9d:73:e7:
bb:69:8a:2a:42:4e:e9:75:49:d5:bf:2b:c6:3b:d0:
df:37:7d:a0:76:0c:86:42:4c:e1:76:9e:be:99:52:
52:54:a8:5f:09:ec:e5:2a:62:c0:33:9b:db:dd:32:
b3:03:55:4d:82:45:3c:77:a2:af:a4:8a:d1:23:1d:
26:2e:11:d8:24:69:91:4f:7c:df:3c:20:c5:90:bf:
f1:3d:3b:d8:44:d9:b3:14:8b:b3:cf:14:16:2d:dc:
44:8f:66:6a:40:18:d7:a1:96:d4:f1:a7:3b:79:d3:
b5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:21:D6:19:3A:7A:3D:76:83:82:21:C3:92:4B:F6:37:AF:68:B0
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/T1gh1hk6ej12g4Ihw5JL9jevaLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.5.0/24
89.187.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b3:8c:1a:38:6a:df:a3:f9:87:1b:c9:64:20:ad:da:36:b7:
be:07:a3:ee:53:22:3a:2e:18:f9:8b:0d:1b:45:71:66:6b:cc:
88:a8:48:df:f3:ab:fc:b4:1a:55:b7:74:03:b5:b0:3c:a6:a6:
be:5f:fe:3e:5c:f2:b8:c1:93:17:b7:13:75:73:fd:e6:93:e2:
e1:91:76:1e:21:a3:7d:a3:ce:21:cd:b7:fe:62:87:b6:51:1a:
aa:b6:c7:b9:2b:a1:86:37:0d:52:26:f4:0e:65:b2:68:5d:e3:
c3:a3:38:40:27:d5:48:b1:4c:18:28:f7:8b:e4:86:69:0f:f1:
63:7e:23:c8:f8:45:28:1d:45:49:5a:c9:d4:43:2d:d5:a8:e3:
82:09:38:6b:1e:93:e1:c7:7a:99:12:57:db:cc:92:2e:4d:a7:
e9:3c:23:34:d6:6d:64:4c:4d:48:ea:12:5b:b8:2c:27:bb:2c:
58:fc:92:19:3a:3e:c0:06:a0:f8:4d:b9:f2:b6:db:19:08:9b:
ad:aa:47:50:17:ab:74:cc:78:32:51:8a:de:12:12:81:45:ad:
48:d8:55:06:35:6c:2a:d6:72:c4:f7:0f:f8:c2:06:37:85:e4:
c3:ce:27:67:28:79:7d:6e:f3:10:ea:e4:ec:40:95:51:4e:3f:
d9:5c:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:47:40 2025 by rpki-client