Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/9B35UfCQ13KtDn51RvM_dp9PjDo.roa
File: 9B35UfCQ13KtDn51RvM_dp9PjDo.roa (raw, json)
Hash identifier: oY5j1jE5bBrwX+DjAZmWx8Oie4fGVA/ZCu+WjsgOPDk=
Subject key identifier: F4:1D:F9:51:F0:90:D7:72:AD:0E:7E:75:46:F3:3F:76:9F:4F:8C:3A
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B9F37C839DD839B1FCCF6263D00F2
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/9B35UfCQ13KtDn51RvM_dp9PjDo.roa
Signing time: Thu 02 Jan 2025 09:49:34 +0000
ROA not before: Thu 02 Jan 2025 09:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206866
IP address blocks: 84.232.40.0/21 maxlen: 21
84.232.122.0/23 maxlen: 23
94.24.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9f:37:c8:39:dd:83:9b:1f:cc:f6:26:3d:00:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f41df951f090d772ad0e7e7546f33f769f4f8c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:cf:1d:a3:a5:51:ca:00:92:be:b3:1b:c9:
96:74:05:44:67:5a:78:72:13:34:62:7b:e2:a6:5b:
99:a1:a5:97:e4:45:8d:48:4e:19:80:6e:7c:75:21:
3f:ec:d5:70:f1:31:9f:54:13:01:bf:78:7f:5f:bb:
9a:5e:72:e5:d0:3e:6f:2d:65:b0:df:9c:68:6c:de:
01:8d:3e:0d:21:ee:03:ec:3e:9a:a4:a2:be:01:ec:
6b:95:93:5a:04:7b:80:9a:21:b6:33:de:ed:9b:7a:
18:7b:2f:2b:70:e9:66:ce:1a:eb:5b:f7:a9:4b:0f:
73:e6:26:18:78:80:c9:a9:00:ac:ac:d6:89:83:68:
af:26:b9:57:1d:69:52:b3:7c:ee:f5:67:54:ba:72:
87:44:8a:ab:fa:07:bf:53:19:4d:fe:d0:be:c7:91:
ed:9c:2d:82:36:1f:6f:af:4b:69:cc:8f:0f:f2:7c:
ed:0f:7e:68:15:41:df:27:f7:cc:f7:11:db:93:68:
98:69:77:81:5f:5c:7a:56:a4:c4:e0:e2:a0:60:66:
8d:d3:92:25:a8:aa:cb:05:d1:50:80:cf:fd:39:3f:
79:ce:34:98:83:79:85:0e:7f:95:14:ff:68:ca:da:
2f:a7:a1:cf:ba:f8:88:57:d9:4f:08:bc:58:57:7f:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:F9:51:F0:90:D7:72:AD:0E:7E:75:46:F3:3F:76:9F:4F:8C:3A
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/9B35UfCQ13KtDn51RvM_dp9PjDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.40.0/21
84.232.122.0/23
94.24.44.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:a5:86:fb:3c:a7:93:16:ef:68:a1:0f:bd:cb:1a:fe:db:ef:
74:94:30:5c:6e:e3:b7:7b:b0:73:55:9b:14:95:b7:d2:d1:d3:
cc:a5:23:41:2f:7e:c0:a7:81:79:6c:a1:2f:d7:85:50:48:33:
21:65:5c:62:d5:68:49:44:8f:bd:4b:7c:dd:a8:dd:4a:4a:84:
3f:e5:6c:2a:c5:2a:4e:fa:40:38:f3:62:8b:17:65:37:47:da:
84:51:85:5d:6f:af:55:54:26:11:c0:84:81:7f:c2:66:51:ee:
4d:70:2c:00:2f:ab:af:e1:09:16:ae:9b:70:8d:7e:9e:f4:e8:
06:b0:0a:85:2a:39:00:58:d3:4c:6a:f9:a3:66:51:9d:61:2a:
24:15:cf:e5:6b:9a:82:59:27:35:57:a4:6c:08:7f:8f:2e:c5:
4a:39:63:dd:f5:e8:f9:9c:5f:79:1e:40:53:ab:66:f6:d5:d4:
f6:2b:5f:10:f2:6a:17:11:ee:97:61:b0:2b:51:2d:e3:15:cb:
02:1a:f6:e4:84:ce:a1:27:7b:21:ed:67:d0:13:f8:78:f9:43:
27:d3:44:49:3c:34:7a:cd:01:a3:fb:a9:01:32:c0:ff:13:4b:
70:ba:55:fc:4d:31:82:9a:f7:40:98:9a:62:11:3e:fb:ce:1d:
5c:7f:85:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:51:24 2025 by rpki-client