Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8w9WYY3HaTR-FwPFDo6WJ_Iu44o.roa
File: 8w9WYY3HaTR-FwPFDo6WJ_Iu44o.roa (raw, json)
Hash identifier: 0J4QdAyUaAKe/b+9fmN6G1VWKDGxawIJsNsgvlKQvs4=
Subject key identifier: F3:0F:56:61:8D:C7:69:34:7E:17:03:C5:0E:8E:96:27:F2:2E:E3:8A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0196517B81DEA932FC6C5C8B4F1972F6C006
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8w9WYY3HaTR-FwPFDo6WJ_Iu44o.roa
Signing time: Sun 20 Apr 2025 04:36:10 +0000
ROA not before: Sun 20 Apr 2025 04:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 89.42.85.0/24 maxlen: 24
93.114.90.0/24 maxlen: 24
93.114.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:7b:81:de:a9:32:fc:6c:5c:8b:4f:19:72:f6:c0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 20 04:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f30f56618dc769347e1703c50e8e9627f22ee38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:92:9b:26:2b:08:82:fa:4e:0a:15:79:bc:
d3:cc:40:59:6b:b1:0f:05:db:2f:fe:b5:e7:ee:2b:
41:16:05:a9:46:eb:85:4b:81:43:f7:f6:8d:0d:e8:
2f:2e:67:4b:b1:9e:ba:aa:a0:59:f8:e0:3d:67:4d:
7a:dc:45:f7:7b:80:2b:e0:95:07:02:34:27:55:58:
7f:c3:11:96:85:6f:23:15:b8:90:64:40:f2:36:17:
26:9a:5b:82:1e:5a:d1:24:b6:07:17:00:b6:12:80:
b1:fb:4c:50:24:4b:5a:ba:cb:be:2d:59:71:15:bb:
ec:56:68:31:1d:1f:c7:f2:f8:e3:fe:34:39:65:4c:
7d:88:b5:20:a6:07:2e:35:48:f9:7b:db:52:99:ee:
38:06:97:49:84:76:73:18:30:fe:4d:94:65:8c:aa:
00:b7:4d:4a:3a:29:44:6a:34:e8:c6:a6:0e:e7:5c:
ef:d9:df:2f:93:6b:bb:28:34:52:9a:d0:b1:bb:22:
1a:ca:84:82:f6:0d:30:68:84:e3:4d:2a:db:6b:6d:
b3:97:a0:1f:51:a8:88:a5:26:2e:49:d7:41:df:27:
c6:e8:8e:fc:e5:4b:e3:7e:ec:c9:0f:1b:ca:f7:c1:
4e:b1:b0:a9:5a:ca:b0:85:94:05:72:dd:19:ac:e3:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0F:56:61:8D:C7:69:34:7E:17:03:C5:0E:8E:96:27:F2:2E:E3:8A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8w9WYY3HaTR-FwPFDo6WJ_Iu44o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.85.0/24
93.114.90.0/23
Signature Algorithm: sha256WithRSAEncryption
28:97:e1:ab:8e:90:14:0b:6a:52:5a:4a:82:ea:94:f2:9e:85:
cf:de:9a:71:44:8b:98:2f:c8:61:38:46:0a:d5:21:c7:91:3f:
e9:1a:fd:3a:62:8a:74:d0:fa:c3:72:32:38:f3:ab:87:80:2c:
08:0c:e7:8a:70:f7:59:11:ea:0c:83:9e:ea:03:ee:4c:89:a1:
c2:14:10:0d:5a:ce:3f:b0:e0:da:df:f7:46:71:6e:41:36:49:
6a:1f:b5:51:e6:46:86:82:7b:ef:5a:23:ee:c9:8e:f9:ca:c4:
c5:09:49:31:81:69:4b:6d:0c:77:82:a9:17:f5:12:5f:2d:cb:
47:1c:0d:03:da:83:ed:af:d4:a9:d1:12:89:da:0f:99:f2:c7:
cf:42:f1:ab:b6:84:0b:c9:32:5c:34:5f:74:88:81:f1:01:4b:
da:72:97:56:ed:bd:a5:b9:d5:45:12:08:a2:16:30:b8:ed:02:
ee:eb:d5:5f:af:4c:eb:fd:f5:68:bf:91:a4:5a:99:8c:d2:07:
ff:e8:9e:82:77:f2:27:e1:62:4a:89:82:00:30:59:44:6d:c8:
b0:b2:f5:cb:2d:d7:83:17:04:14:e3:1c:74:ec:cc:e5:8b:56:
9d:eb:f1:1b:25:36:6d:26:a6:8d:ab:7a:28:e7:37:b0:86:d4:
1a:39:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:42 2025 by rpki-client