Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/AYE9RP6khvfye_7uC2vRmqzDees.roa
File: AYE9RP6khvfye_7uC2vRmqzDees.roa (raw, json)
Hash identifier: VO7W7FrsKeQNaTvLKPgJFYccrl9+5IT8HgXKnTlUDg8=
Subject key identifier: 01:81:3D:44:FE:A4:86:F7:F2:7B:FE:EE:0B:6B:D1:9A:AC:C3:79:EB
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01965CB38369BC28DDB7572C1454E14C5215
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/AYE9RP6khvfye_7uC2vRmqzDees.roa
Signing time: Tue 22 Apr 2025 08:53:10 +0000
ROA not before: Tue 22 Apr 2025 08:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 89.221.203.0/24 maxlen: 24
95.215.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:b3:83:69:bc:28:dd:b7:57:2c:14:54:e1:4c:52:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Apr 22 08:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01813d44fea486f7f27bfeee0b6bd19aacc379eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:1a:25:3c:6d:e4:8d:97:f7:dd:7d:bb:f3:
5a:97:db:09:71:84:e3:6e:b0:8d:00:54:ee:c9:d7:
86:9a:c8:b2:d9:fb:a4:a4:98:3a:d8:de:c4:52:b7:
9e:30:d1:71:13:49:4e:24:8e:00:95:3b:06:57:5b:
c2:38:86:db:d2:e5:13:04:1a:60:0f:3a:d6:6c:e4:
bb:f3:ef:cb:e8:b0:cb:91:ea:14:6e:7b:e6:b4:d8:
cc:2b:80:fb:cb:74:66:fa:85:57:6f:5f:f6:65:27:
22:53:91:b8:1f:7d:23:72:3b:d0:dd:be:fc:f8:1d:
4c:5a:cb:42:e6:64:ad:44:e1:61:8a:1d:0f:a6:e4:
3c:04:53:d4:4d:32:eb:53:8e:c9:f3:89:ee:15:7c:
fa:3b:6f:73:3d:33:bf:e6:32:ce:0d:e6:bd:93:53:
0a:2c:c4:a9:fd:87:82:86:c3:42:2b:71:d4:0d:c1:
07:5d:f8:1f:2e:da:63:db:e4:cc:5f:5a:04:94:0a:
65:76:8b:e4:ce:92:f4:af:bc:4d:96:51:fb:89:08:
1c:aa:21:70:17:7c:eb:43:8d:74:51:2f:8e:42:ef:
7d:fd:bc:f0:2c:62:41:66:d9:f1:cf:70:a0:e7:a2:
79:a3:ee:05:8c:65:e0:3a:b9:66:6f:08:b0:9c:a2:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:81:3D:44:FE:A4:86:F7:F2:7B:FE:EE:0B:6B:D1:9A:AC:C3:79:EB
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/AYE9RP6khvfye_7uC2vRmqzDees.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.221.203.0/24
95.215.108.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d0:d7:70:fc:8d:99:a5:e4:07:01:c4:12:41:9f:da:4e:03:
a5:a8:5d:1e:76:66:c6:91:c9:ea:fa:ab:8d:c1:3f:ec:73:a6:
e7:2e:e5:16:58:51:d3:46:89:e7:5a:d6:b4:6a:ec:15:66:6b:
b1:fe:2b:71:bf:1e:09:b8:b8:dc:69:1e:2e:d3:b4:bc:57:62:
08:e8:65:89:a1:ac:fc:9c:09:06:7e:76:6b:6a:26:22:6b:18:
b2:88:c9:67:ec:a2:f1:11:ee:a3:20:b5:74:79:c1:4e:38:35:
f2:20:86:3c:e2:19:45:9c:20:f1:2e:e7:3c:b0:02:f0:9e:98:
62:9f:04:64:1b:bf:b2:04:43:17:0b:32:57:1f:38:2f:ab:24:
9d:a9:e4:67:83:b4:8a:14:55:9b:e7:af:f1:b8:21:cf:07:01:
4a:df:c9:52:9f:1e:20:20:5c:fa:a7:7e:ac:98:d0:af:00:38:
7a:cb:7a:2b:b3:ca:64:b6:21:38:0f:19:82:9c:cf:06:82:09:
d7:8c:83:45:4c:bd:2c:a7:21:6b:38:2b:b9:8d:71:1c:d0:b7:
4c:82:f1:5d:33:a0:56:cf:2c:83:1e:43:74:7a:fb:dc:df:d6:
01:34:b3:17:29:44:ab:85:e2:0e:73:85:a2:e4:2c:fe:4a:79:
ed:66:f3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:02:03 2025 by rpki-client