Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Tc8ae4F0u8CH09-J14CbQTArK90.roa
File: Tc8ae4F0u8CH09-J14CbQTArK90.roa (raw, json)
Hash identifier: uYXIR3XJvRPmbSR80SjPSUBB6+d7zstGn3SPKsoFuIU=
Subject key identifier: 4D:CF:1A:7B:81:74:BB:C0:87:D3:DF:89:D7:80:9B:41:30:2B:2B:DD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019686A2136FC6415A256902882B73D1C8EB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Tc8ae4F0u8CH09-J14CbQTArK90.roa
Signing time: Wed 30 Apr 2025 12:18:10 +0000
ROA not before: Wed 30 Apr 2025 12:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151338
IP address blocks: 89.213.55.0/24 maxlen: 24
89.213.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:a2:13:6f:c6:41:5a:25:69:02:88:2b:73:d1:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 30 12:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dcf1a7b8174bbc087d3df89d7809b41302b2bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:43:9c:bf:5d:cd:cb:3d:b4:e8:30:50:bd:
47:b4:6d:3b:0e:4c:cf:3d:78:83:ec:bd:f2:79:06:
f4:2b:53:ce:a3:16:2c:8c:97:f0:7b:bc:f3:c8:f2:
cd:46:7d:7f:3f:9c:2e:bc:fb:73:79:21:cc:7e:94:
7c:13:f0:68:e0:cb:be:8c:71:84:0a:ae:80:31:18:
d4:9f:7e:74:1d:7c:86:2c:f6:2f:e7:ef:0a:6a:f1:
86:64:48:ba:84:92:55:ec:a7:ec:5b:39:aa:83:ab:
ea:ab:e0:07:ed:56:5e:9b:07:cd:e1:31:e9:58:c0:
29:ca:69:d3:21:aa:ff:48:56:45:48:f1:75:04:28:
6e:09:eb:d2:40:21:f4:09:89:4b:07:4f:9b:da:17:
f5:fd:49:bb:0c:79:92:0a:60:61:b5:ed:b3:26:92:
db:50:90:35:54:24:1d:c4:ff:86:33:cb:ca:6e:27:
fd:a9:e8:6d:71:89:56:32:a6:6d:2d:35:90:7c:e7:
ce:00:44:5b:e8:3c:a7:d6:4e:c7:c4:47:ed:f1:52:
94:cb:19:23:ff:d7:76:6d:59:50:eb:0b:65:6e:50:
9b:24:1a:d2:f2:49:be:5d:e7:db:ab:da:da:4a:e3:
f2:ab:53:23:dc:f3:9b:87:57:83:e3:2c:d1:90:18:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CF:1A:7B:81:74:BB:C0:87:D3:DF:89:D7:80:9B:41:30:2B:2B:DD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Tc8ae4F0u8CH09-J14CbQTArK90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.55.0/24
89.213.225.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7b:b0:e5:72:ae:93:57:ac:5a:e6:17:59:e4:cb:47:fe:f4:
11:f1:4c:f7:7a:bd:c3:25:65:06:db:12:65:02:bb:21:d8:26:
29:04:b9:2d:4f:22:6a:a4:ba:90:06:8f:1f:d5:eb:0a:d6:c6:
93:c4:1f:de:3e:f6:c1:9a:20:ce:cb:ff:fa:bf:76:dc:36:b2:
d8:7a:37:a5:e6:09:df:9c:8d:2c:f7:f2:0b:7a:5d:13:7f:7e:
0f:3a:12:a5:00:f3:23:1c:d4:6d:d1:68:50:e0:69:66:bd:00:
0e:06:1f:2d:6b:db:1b:d3:60:8a:ca:e5:97:d8:56:8b:e1:f4:
38:ce:36:f3:c5:32:66:93:22:31:7c:0d:86:84:95:b5:2f:3b:
66:11:bf:1c:89:0f:45:fc:74:d8:0f:4e:70:42:91:a1:f4:f9:
2b:28:64:f7:13:6d:50:95:be:2f:86:6b:3f:8e:52:33:60:5f:
99:1b:0c:46:ad:ec:37:98:a2:49:02:53:cf:4e:de:82:ca:b6:
c8:d1:07:b2:9a:5e:d4:29:ad:59:2e:a7:d4:86:27:fe:f6:2a:
7b:02:f9:2f:b8:d7:ba:95:3b:f5:78:6b:18:96:21:85:ed:c4:
f0:87:fe:ca:7b:82:50:29:45:8b:e3:fc:27:18:e3:1c:e5:cd:
ee:c7:7a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:03:39 2025 by rpki-client