Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/vJ-NNcH9s58i_6pVtY2137W58sA.roa
File: vJ-NNcH9s58i_6pVtY2137W58sA.roa (raw, json)
Hash identifier: gaXJVcSt6ugw0X061/2eBl5dxytqTi7AFjDEgazcu8g=
Subject key identifier: BC:9F:8D:35:C1:FD:B3:9F:22:FF:AA:55:B5:8D:B5:DF:B5:B9:F2:C0
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 019427479804C389C75569C039A11BA6A1FF
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/vJ-NNcH9s58i_6pVtY2137W58sA.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212462
IP address blocks: 109.234.80.0/24 maxlen: 24
185.33.66.0/24 maxlen: 24
185.33.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:98:04:c3:89:c7:55:69:c0:39:a1:1b:a6:a1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc9f8d35c1fdb39f22ffaa55b58db5dfb5b9f2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:95:d5:b7:cd:27:9d:8c:eb:68:75:f8:98:92:
59:43:93:e0:f5:49:e8:a9:14:11:ce:d0:11:95:70:
26:f6:2e:09:36:a2:3e:3c:d2:10:f8:46:7c:9b:f2:
41:79:3b:9e:ed:dc:1a:32:7d:3f:b3:b1:37:1b:72:
7d:5c:ad:74:43:9d:09:97:31:28:4e:19:f9:46:d8:
72:a3:4d:25:fa:c4:52:1c:8c:ba:80:fe:1c:57:09:
e1:c8:2e:8d:53:9a:86:82:0f:6c:b6:18:6f:08:59:
19:c0:18:aa:13:d8:f0:55:a8:0d:9e:56:98:51:40:
4d:b0:39:21:cb:3c:c0:dd:5b:e0:bb:0f:c7:e2:52:
c4:73:7f:00:c9:c1:4b:5f:af:9f:6c:8d:72:15:17:
b7:cf:f6:53:68:7c:81:63:a7:f2:dd:cf:e2:c8:b8:
0e:21:8c:cb:fa:a5:8a:23:94:fb:be:2d:0f:d5:b1:
58:13:5a:56:d7:65:b4:06:32:4b:19:30:b9:a9:e1:
2e:f8:43:08:e7:bc:7a:98:56:ff:d1:d3:a7:f4:37:
e4:11:33:bf:30:ca:01:e2:9c:63:8e:0b:10:76:34:
41:96:f6:d0:76:90:ef:74:cb:a8:c2:c6:36:34:89:
3a:3c:d7:7e:2d:97:4d:19:fc:93:c5:5b:26:72:f8:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9F:8D:35:C1:FD:B3:9F:22:FF:AA:55:B5:8D:B5:DF:B5:B9:F2:C0
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/vJ-NNcH9s58i_6pVtY2137W58sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.80.0/24
185.33.66.0/23
Signature Algorithm: sha256WithRSAEncryption
73:0e:8d:5e:bd:e8:25:67:dc:7d:80:25:28:e8:9d:38:a9:b7:
2f:59:7a:06:2d:27:76:23:f8:39:b6:a8:75:4e:5e:cf:e6:24:
aa:46:12:a4:e3:cb:68:94:17:33:dd:e8:bd:ba:4d:db:92:03:
15:1c:10:d0:55:64:12:ab:5f:bf:b6:09:e3:58:fb:d1:57:77:
a7:5a:65:ef:fa:99:da:70:66:f8:a2:d5:94:16:95:7a:13:5f:
ce:e6:df:57:fe:48:b2:03:e5:34:22:04:c3:65:6c:ea:73:a8:
36:1d:05:7d:d7:54:ac:11:af:d9:80:02:8e:7e:fa:c7:38:cd:
06:62:1f:4d:54:1a:b8:f2:37:92:1b:40:83:6f:65:90:da:61:
4a:d7:8e:55:d8:30:fc:36:76:b0:6c:8a:35:2f:78:35:08:8e:
89:93:12:0b:a1:e1:b5:32:60:6f:5e:04:b5:bc:01:33:8f:5e:
79:dc:2a:44:23:dd:8b:57:29:e3:d5:af:88:59:05:4e:4f:47:
ab:f1:3f:fd:63:58:9f:b6:d6:9a:45:aa:88:b0:b3:e2:31:be:
ca:89:ac:fd:14:88:01:72:93:f8:b1:f1:ab:40:87:f6:13:5d:
73:1d:9a:50:2f:4a:e8:1e:d0:d7:4c:34:a8:57:f3:07:6d:7b:
5c:37:bf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:11 2025 by rpki-client