Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c6_eDIC64_AudYyj3sJa0H7eFFk.roa
File: c6_eDIC64_AudYyj3sJa0H7eFFk.roa (raw, json)
Hash identifier: ivrHJW1lreXw8aNvHmTZrrp3eUmvuVvbpDaZBOAsCek=
Subject key identifier: 73:AF:DE:0C:80:BA:E3:F0:2E:75:8C:A3:DE:C2:5A:D0:7E:DE:14:59
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019642CD43B29F2EB9E865D31012CB127393
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c6_eDIC64_AudYyj3sJa0H7eFFk.roa
Signing time: Thu 17 Apr 2025 08:11:10 +0000
ROA not before: Thu 17 Apr 2025 08:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 89.213.53.0/24 maxlen: 24
89.213.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:cd:43:b2:9f:2e:b9:e8:65:d3:10:12:cb:12:73:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 17 08:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73afde0c80bae3f02e758ca3dec25ad07ede1459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:90:b8:42:37:56:4b:d2:c6:8c:96:9f:c7:
68:ca:66:1b:08:f1:bb:99:b7:37:0a:25:0c:cc:da:
6d:47:c4:bc:91:d3:cc:6d:58:55:0a:7c:91:96:97:
92:b4:c1:87:5b:11:13:c6:a7:55:0b:9c:fb:c2:8a:
0c:34:fe:ab:fa:04:41:f8:fe:f1:f7:8f:97:47:5b:
5a:60:83:ac:21:ad:60:4b:be:b3:d2:b9:f1:fc:24:
a5:52:54:b1:8a:af:7a:5b:bd:e4:f7:14:b1:27:bc:
e4:55:b8:7b:e0:fa:0d:db:a4:75:09:36:af:5f:97:
90:e1:a6:c1:bd:73:d9:c2:17:26:0a:a1:a4:75:81:
a6:72:01:ed:69:5d:5d:ef:bb:dc:9e:35:5f:d5:55:
13:0d:71:ae:07:8f:fc:d9:ea:4f:29:af:61:d9:13:
45:83:23:c2:d5:35:24:3e:1b:53:41:76:dc:99:30:
17:68:3f:62:30:ac:50:35:61:91:4c:99:58:b2:43:
f3:a7:ef:5a:d1:5c:a6:3e:fa:e4:a3:fa:94:24:ab:
35:5d:c0:df:0e:64:2b:48:00:c8:b1:e3:8b:16:db:
ea:e2:cd:63:fe:6e:aa:ce:26:4c:fc:81:6e:62:4a:
97:ea:bf:2f:1a:fd:f7:a7:fd:7a:3e:3a:77:4c:a0:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AF:DE:0C:80:BA:E3:F0:2E:75:8C:A3:DE:C2:5A:D0:7E:DE:14:59
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c6_eDIC64_AudYyj3sJa0H7eFFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.53.0/24
89.213.213.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:27:26:3b:b3:6f:81:ef:93:22:74:0b:29:b1:4b:a0:89:0f:
5b:c3:d6:a8:05:46:a6:d1:41:a7:11:64:bd:3c:b1:79:51:b6:
56:43:a7:0f:60:05:22:95:83:a4:34:9a:64:50:e5:77:e2:46:
3a:06:c5:d7:28:d9:3f:98:d0:9d:8f:8f:a5:86:eb:fa:00:cc:
38:9f:e9:d1:c2:86:b0:89:55:46:42:69:db:5f:24:73:29:be:
b5:88:28:77:9a:78:a5:e7:44:a1:5f:02:e0:1b:2a:05:2e:b8:
b0:c3:36:d6:93:97:2c:db:2b:8a:29:e5:b5:cc:3e:4c:69:39:
df:6e:00:5d:98:78:ff:b5:df:28:21:4b:e9:33:77:40:e6:e1:
72:bf:09:26:7c:df:1d:7e:b3:0e:d8:1c:c0:53:bc:00:59:77:
e5:fc:4c:ee:68:de:13:9e:3f:23:eb:b3:f5:90:78:98:66:e1:
12:5a:05:db:f8:60:7f:01:98:a4:a0:ba:cc:01:be:85:d1:4d:
0d:4a:cd:a0:7b:64:e3:f4:21:a6:1b:e0:d6:80:e8:e7:f4:36:
46:34:ce:be:62:35:ab:bb:fc:37:8a:af:81:a8:38:90:d3:d5:
7a:08:8e:1c:d5:af:11:17:d5:70:29:bc:25:d6:5c:e3:85:94:
45:5d:8f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:11:54 2025 by rpki-client