Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/irpSjSWdEKb_OV-gxKhRSgd34PI.roa
File: irpSjSWdEKb_OV-gxKhRSgd34PI.roa (raw, json)
Hash identifier: I3zS2CdChMWSoDjrcdQUp7eCjRbei9chApPVguHG1pA=
Subject key identifier: 8A:BA:52:8D:25:9D:10:A6:FF:39:5F:A0:C4:A8:51:4A:07:77:E0:F2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196CA1FE9287288F53C940E362EC0C362F6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/irpSjSWdEKb_OV-gxKhRSgd34PI.roa
Signing time: Tue 13 May 2025 14:50:11 +0000
ROA not before: Tue 13 May 2025 14:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32043
IP address blocks: 89.213.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:1f:e9:28:72:88:f5:3c:94:0e:36:2e:c0:c3:62:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 13 14:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8aba528d259d10a6ff395fa0c4a8514a0777e0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:ce:a5:f8:f4:5b:c2:e6:bd:d2:f5:63:ac:
ab:6c:49:18:82:5c:dc:a8:6b:87:16:a0:11:a6:81:
45:08:7e:aa:31:37:01:29:42:8c:9a:0e:98:61:d9:
e4:36:eb:e3:dc:2b:63:31:93:f5:76:93:53:11:81:
be:46:9d:77:79:63:c2:26:9d:c7:a7:4a:8e:24:74:
f6:5f:d2:8b:3a:4e:13:2e:eb:46:88:90:86:0a:00:
76:5f:38:81:27:95:d2:97:67:17:e1:a2:ad:47:4b:
58:30:15:94:6a:16:d5:f7:f8:60:d9:6c:bd:7a:5d:
fd:15:2e:e3:a3:d1:57:77:5a:4e:d1:22:49:ae:fb:
de:e3:f7:1b:b6:fd:52:4a:b4:51:e8:52:2a:53:7e:
f8:e5:7f:f8:e4:80:0d:0f:54:c2:4e:49:de:2c:21:
a8:24:ca:11:05:84:cb:0e:0e:75:cc:ab:b6:43:bd:
73:93:78:42:0f:f9:1f:5e:7c:24:dd:b8:90:62:98:
17:f7:da:6b:4b:0a:76:55:c3:33:ad:4e:6f:f3:2c:
71:ce:0c:1f:e9:72:ff:68:56:25:d8:c3:ee:ab:53:
e0:ef:07:78:7d:aa:14:2e:45:83:c1:ca:01:21:42:
72:24:dc:ed:6e:d8:8c:2f:ee:35:f2:1e:a4:ee:b4:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BA:52:8D:25:9D:10:A6:FF:39:5F:A0:C4:A8:51:4A:07:77:E0:F2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/irpSjSWdEKb_OV-gxKhRSgd34PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.206.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:41:85:7f:8d:56:62:91:99:b9:1b:8d:c2:59:b1:bd:d6:17:
43:2d:1f:04:fe:cd:f1:9d:dc:fc:8a:2e:69:80:4e:d7:45:16:
a8:d0:82:cc:a6:a7:dc:1f:cc:4e:be:d2:c5:09:24:c0:f7:ef:
cf:21:4f:17:86:5c:35:8f:c1:57:c4:0b:cc:ff:25:26:83:eb:
54:5a:0e:53:64:e0:f9:37:63:67:7d:e4:2e:e3:65:ac:92:7a:
92:34:fc:69:57:5b:bd:14:de:29:75:1f:fa:bd:b3:47:47:0a:
23:8d:f4:f9:20:cc:dc:17:ff:18:07:35:09:6f:85:6f:27:fd:
1d:f7:aa:55:af:93:e8:58:15:3f:1d:f3:bd:67:ff:12:2e:d6:
78:83:c2:f8:ce:50:fa:bb:fb:07:b4:9b:d0:7b:43:29:32:4f:
f5:7e:da:e6:b0:f9:be:0b:ee:ec:0a:eb:db:8d:cc:a4:53:7d:
03:93:c3:e3:7b:87:f7:25:e4:fc:94:7f:98:3f:e9:67:10:ec:
a4:cd:25:ff:37:a0:e2:3b:79:7a:c2:3b:01:99:6c:c6:4e:67:
6a:0d:d9:08:58:da:0a:c4:3a:8e:72:a9:de:93:c0:99:1a:9a:
00:fd:9c:08:b0:78:da:26:aa:6b:2b:ff:f6:5a:b0:40:43:0b:
63:92:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:14:48 2025 by rpki-client