Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1G1vb9L0lDjDYyLdA1cUSZhPbPU.roa
File: 1G1vb9L0lDjDYyLdA1cUSZhPbPU.roa (raw, json)
Hash identifier: 6YsS6j1X2WMMrdVtScr7OOZd3t/Gpic12vXKWm9fJMo=
Subject key identifier: D4:6D:6F:6F:D2:F4:94:38:C3:63:22:DD:03:57:14:49:98:4F:6C:F5
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019644CA4BBB6777CCB8E6A116E024EC2336
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1G1vb9L0lDjDYyLdA1cUSZhPbPU.roa
Signing time: Thu 17 Apr 2025 17:27:10 +0000
ROA not before: Thu 17 Apr 2025 17:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 89.106.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:ca:4b:bb:67:77:cc:b8:e6:a1:16:e0:24:ec:23:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 17 17:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d46d6f6fd2f49438c36322dd03571449984f6cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:e2:af:8a:3b:c0:5b:e7:51:85:86:be:c1:
63:b4:5e:b2:04:bb:42:47:01:39:3b:45:75:53:ed:
09:6d:c6:0f:66:bf:82:88:c1:69:a3:73:32:6c:90:
c9:d2:92:7b:8c:84:b6:db:7f:21:9a:fa:39:31:d0:
51:cf:82:ad:0f:fb:89:53:01:a6:61:11:91:8e:ad:
ba:f7:86:cf:5c:4e:f1:ea:b0:8d:06:d5:fb:96:a8:
62:b9:72:77:ba:31:f4:7e:ab:c5:9f:63:8b:85:89:
83:4d:d0:f6:ce:a7:99:09:e1:11:06:50:ca:69:fb:
c2:bc:5b:dc:9c:9e:7e:ef:b2:a9:07:82:86:13:45:
80:ec:1a:4b:e0:06:da:c4:53:7a:3f:9b:6d:94:03:
7f:d2:04:73:e5:83:42:17:d7:3a:a2:d9:27:ce:f4:
b7:46:0c:f7:47:f3:58:e1:af:26:52:73:89:e2:d8:
18:cb:76:60:70:ab:15:d5:89:80:44:d0:69:2a:ec:
4c:59:0c:d8:b4:33:ed:19:c9:0a:97:0e:07:d0:a4:
ac:61:67:0f:ef:27:80:81:a6:b4:ec:f2:fe:d3:bd:
ce:3a:37:f9:2a:f9:92:13:d8:96:ca:c6:26:8a:30:
d6:3d:31:6b:6b:d3:d0:28:e5:05:1d:77:5f:cd:6e:
bf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6D:6F:6F:D2:F4:94:38:C3:63:22:DD:03:57:14:49:98:4F:6C:F5
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1G1vb9L0lDjDYyLdA1cUSZhPbPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:5b:74:46:ab:e4:25:0a:0b:b8:bb:4a:23:55:ef:b0:56:5c:
92:1d:5c:ce:e2:9a:bf:88:e4:b7:5c:7c:c2:57:8c:7b:59:16:
f3:e6:7a:9a:38:66:39:77:54:67:6a:c0:ba:cb:04:6f:71:2f:
d2:d7:fa:0e:4b:ec:43:24:b7:a4:7c:fb:d4:d7:35:90:b7:21:
a6:ce:b4:50:6a:f0:25:75:00:1f:34:5d:a8:7b:ae:a4:de:19:
57:d9:d7:02:bc:83:79:4d:55:ea:77:5c:6e:97:c5:46:ed:13:
95:be:3c:ff:3b:91:34:20:d1:86:07:0f:b7:45:b0:f9:30:ac:
7c:7b:b6:c7:8f:3f:4a:50:04:15:a5:6f:ce:ea:58:70:31:5a:
b6:13:28:25:4c:01:5d:2b:f0:5a:7c:f0:42:5e:a4:4a:d2:78:
b8:bd:b6:d7:9c:d5:d9:67:88:8c:00:6e:18:92:10:1d:6b:a5:
fa:6a:e0:0d:35:f3:ab:fb:de:dd:60:a6:7f:a0:24:a9:da:8d:
b9:d4:6e:56:c5:fc:09:3c:b2:58:c1:78:e8:17:ed:9b:0a:91:
a5:8d:62:85:61:e2:b6:ff:c8:33:92:79:87:39:3d:3c:a3:8d:
af:2b:eb:30:86:8c:0a:da:b6:28:74:5d:17:71:87:18:3f:e3:
1f:49:9a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:05:26 2025 by rpki-client