Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/c9UMX3iq8tErq5TMlo_-MEWj5uw.roa
File: c9UMX3iq8tErq5TMlo_-MEWj5uw.roa (raw, json)
Hash identifier: 1c2+eOFvPteNDBjZlr3CfkaamwjtVyHeqkTL5YVw+fo=
Subject key identifier: 73:D5:0C:5F:78:AA:F2:D1:2B:AB:94:CC:96:8F:FE:30:45:A3:E6:EC
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 01941F8C246EB44AE5098FA9432C8731CA85
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/c9UMX3iq8tErq5TMlo_-MEWj5uw.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48539
IP address blocks: 109.205.189.0/24 maxlen: 24
146.19.131.0/24 maxlen: 24
178.212.137.0/24 maxlen: 24
194.63.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:24:6e:b4:4a:e5:09:8f:a9:43:2c:87:31:ca:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73d50c5f78aaf2d12bab94cc968ffe3045a3e6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:d8:d2:23:c9:17:d7:fd:01:2b:a4:33:54:
52:24:27:25:fa:34:f5:71:43:cd:3c:aa:2c:17:60:
4b:54:c4:96:24:c5:c7:7b:4d:80:1d:b6:83:06:1a:
6c:20:15:2b:a3:bf:de:4f:62:a8:71:0d:d1:df:c7:
6a:a0:d4:56:3c:7f:d0:4b:2b:65:75:8f:79:81:49:
13:c9:85:e2:fb:c4:f1:c0:b9:44:99:77:05:31:ea:
71:79:ec:e3:99:33:d7:cd:a5:36:a0:90:71:f8:75:
c5:b8:9d:88:41:bd:dd:b2:e6:0d:6e:1f:a5:85:f6:
fa:a0:54:23:80:c2:4b:e0:ef:04:53:3e:4f:cc:ae:
1b:1a:09:2e:66:a4:8e:d5:51:a5:68:73:69:48:d7:
f2:19:a2:8e:63:07:ef:83:fa:8d:06:47:22:3e:47:
f4:48:4e:e8:b8:2a:95:33:5d:7f:8c:04:b2:17:0b:
60:aa:78:9b:5a:4e:8c:8c:ee:9c:73:8f:f4:12:bd:
31:73:0c:a7:29:42:63:bc:f4:d0:dd:94:7d:50:c4:
38:08:24:f7:c6:0a:16:f5:26:30:7c:76:82:81:1c:
93:b0:1b:42:bf:5e:88:1a:fd:78:f8:b6:d2:89:c2:
73:89:19:16:c6:32:7a:8f:2e:2a:93:ce:e4:33:a3:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D5:0C:5F:78:AA:F2:D1:2B:AB:94:CC:96:8F:FE:30:45:A3:E6:EC
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/c9UMX3iq8tErq5TMlo_-MEWj5uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.189.0/24
146.19.131.0/24
178.212.137.0/24
194.63.144.0/24
Signature Algorithm: sha256WithRSAEncryption
60:44:fb:72:40:70:55:7d:7a:0e:f3:31:0e:6b:fe:22:86:0c:
5b:77:1b:42:f2:bb:f6:80:52:d4:01:92:ba:9a:cd:bf:2f:e9:
4c:62:48:37:40:d3:a1:d9:23:de:54:57:e2:7f:b6:3c:a7:80:
5f:61:87:c1:b4:8e:bf:c3:96:f3:05:4f:9b:d9:ce:4e:b1:e1:
7c:a9:b3:21:07:6d:77:3e:f8:36:95:9e:89:c2:74:7f:29:f0:
d2:68:53:64:a0:fd:d3:65:a1:06:c6:e0:15:e0:23:d8:46:b8:
68:06:4f:86:95:65:6f:82:61:bc:ba:0d:06:33:0d:0a:43:c9:
6c:5f:c6:2a:b4:46:76:33:5b:9f:ff:63:79:5a:bf:31:e9:db:
7a:e6:fe:63:27:0a:bc:23:3e:e2:8f:80:94:69:be:9e:03:0f:
2b:8e:cf:66:9c:0c:f6:81:a6:a5:62:7a:b0:bf:8d:9c:46:8c:
1f:05:b8:0b:7b:7f:16:f6:f9:89:78:b9:8f:57:0a:d0:a3:71:
48:46:92:aa:14:7c:cf:1f:06:44:8d:e8:d5:63:28:5e:c7:b8:
16:34:a8:2f:a9:7a:ab:17:65:62:c9:6d:e2:d1:83:2d:92:2d:
fc:d5:9a:91:d9:fd:3e:68:ba:aa:03:f2:5d:6d:26:23:c4:bf:
58:12:66:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:40:09 2025 by rpki-client