Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/M0bkyq5zef5SSuo3vpFZ-_PuTSM.roa
File: M0bkyq5zef5SSuo3vpFZ-_PuTSM.roa (raw, json)
Hash identifier: IyFCJ0TRDL7bJsBJpy2b8GOKjktDTvUku0OuxQcwpss=
Subject key identifier: 33:46:E4:CA:AE:73:79:FE:52:4A:EA:37:BE:91:59:FB:F3:EE:4D:23
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0197B0D5D78387C6F2EAEC0CEA65DB5344FA
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/M0bkyq5zef5SSuo3vpFZ-_PuTSM.roa
Signing time: Fri 27 Jun 2025 10:01:33 +0000
ROA not before: Fri 27 Jun 2025 10:01:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:d5:d7:83:87:c6:f2:ea:ec:0c:ea:65:db:53:44:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jun 27 10:01:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3346e4caae7379fe524aea37be9159fbf3ee4d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:58:06:de:f2:3d:ad:b2:d1:05:ad:c2:fb:
39:35:56:d1:14:e9:55:d1:75:4a:e8:2f:25:98:07:
00:3a:2d:38:ab:04:96:70:6e:e1:0f:00:04:3a:1c:
78:ff:d8:2b:0a:c4:88:3c:bf:62:ac:45:9d:76:58:
34:64:13:9a:f4:58:84:90:f3:5b:cc:66:10:b2:e5:
dc:c0:15:24:7c:64:81:5a:05:7d:db:fa:40:75:86:
3f:91:5b:e2:22:ba:14:3b:82:3c:b0:88:ac:7e:0c:
bc:89:f3:0f:b9:95:f0:19:2f:8c:2d:81:19:06:01:
13:af:a2:74:89:6f:c2:fc:ec:56:52:64:2c:5a:f6:
d5:11:ad:fb:bf:1b:16:e2:68:68:46:de:e5:20:8c:
6b:5f:ae:76:30:1f:66:86:59:cc:2b:c4:58:44:79:
52:7a:82:6d:1f:7b:c2:39:91:95:5e:16:26:6a:c3:
c7:9c:6e:92:0e:f4:3e:95:a0:9b:b9:a2:cc:72:22:
35:0d:9f:3e:d8:a4:c8:04:db:f6:92:2e:bc:79:44:
86:2c:f8:27:a4:6c:3c:78:33:2e:97:0d:e5:61:b8:
fc:e4:92:a1:5d:29:59:5d:97:d7:9a:96:4e:84:37:
95:df:46:bb:cf:3e:80:df:cc:55:55:bd:b0:18:3c:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:46:E4:CA:AE:73:79:FE:52:4A:EA:37:BE:91:59:FB:F3:EE:4D:23
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/M0bkyq5zef5SSuo3vpFZ-_PuTSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
24:1a:dd:2e:0f:c1:bc:16:95:6c:6a:d4:91:8e:88:dc:89:cb:
1a:86:49:fc:37:c4:78:74:d3:83:a6:51:b2:75:1f:59:a4:a2:
cb:db:a5:91:e9:f9:e8:da:b2:57:3f:62:fc:96:99:ef:a9:c2:
c5:a3:71:36:fb:08:0a:e6:95:c1:04:6b:65:3a:12:44:6a:39:
2b:47:26:45:5f:62:a0:04:41:6d:38:17:04:83:01:15:35:b7:
45:c7:31:01:ff:a3:f8:dd:15:04:97:c1:62:cc:66:a0:8e:95:
03:6d:d6:48:21:d0:4c:14:7b:07:60:c1:11:76:b2:1d:5e:c3:
30:d1:1d:e8:28:5f:db:83:a5:01:67:39:9b:76:0c:13:51:4b:
7d:12:cc:c5:a3:d4:91:67:dd:d2:16:30:4c:79:d9:b4:86:a1:
a8:84:a7:b3:cf:05:f6:fe:d6:f8:de:86:a0:78:53:22:1f:7c:
fd:3b:fa:d1:8c:7f:9a:cc:dd:e6:78:80:14:e2:7a:51:9e:70:
78:19:3b:ec:d2:bc:33:65:5c:bc:ea:d6:8c:f4:d9:c6:f5:c5:
75:31:9c:85:9e:f4:1c:48:d8:58:36:1a:e5:54:c4:74:cd:b0:
2a:c2:29:dc:47:47:e6:ad:8c:1d:34:f9:1b:a8:de:35:52:d6:
66:4d:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:48:38 2025 by rpki-client