Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/t9q3JQRIfHPbUTHA-7F2iigGH4c.roa
File: t9q3JQRIfHPbUTHA-7F2iigGH4c.roa (raw, json)
Hash identifier: s2L1muHfCT4EhX7O1DIS6+l6imOYfyQC+qFGEKmez7U=
Subject key identifier: B7:DA:B7:25:04:48:7C:73:DB:51:31:C0:FB:B1:76:8A:28:06:1F:87
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 019421442528599A46C634BB5D53FA568B6D
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/t9q3JQRIfHPbUTHA-7F2iigGH4c.roa
Signing time: Wed 01 Jan 2025 09:48:21 +0000
ROA not before: Wed 01 Jan 2025 09:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34420
IP address blocks: 195.149.119.0/24 maxlen: 24
195.170.167.0/24 maxlen: 24
2a0b:8bc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:25:28:59:9a:46:c6:34:bb:5d:53:fa:56:8b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Jan 1 09:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7dab72504487c73db5131c0fbb1768a28061f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:c1:8b:63:49:1b:87:13:c5:65:4b:2e:f7:
1c:3e:32:a1:aa:ed:ee:f2:55:0c:d8:d8:e9:45:32:
bc:04:93:df:66:8f:19:dc:50:8c:8a:fb:3a:c2:dc:
be:ae:60:f6:e5:4a:c7:49:ad:ad:80:88:df:e3:09:
bf:e7:f6:17:72:23:90:c5:20:83:a0:71:ba:84:1c:
56:e4:8b:65:dc:a7:6f:60:c9:61:18:2a:46:e8:72:
ae:66:1b:ec:95:a2:ee:f5:c3:26:e0:af:36:12:9a:
d0:a1:08:a3:90:9b:93:70:f6:e0:07:6f:4e:59:bc:
df:d7:76:d6:d3:68:c1:b8:36:84:d7:5a:3d:a5:b5:
88:53:d1:4b:74:7c:24:aa:7b:b1:cb:dd:dc:e3:3b:
d4:20:c3:bb:01:58:0b:bb:8f:0d:5a:40:89:57:94:
b7:d2:55:04:f6:98:49:02:6c:3b:3b:cd:d1:f5:55:
85:30:2a:5d:e2:35:c8:0f:ef:8b:e7:0a:32:32:de:
9a:c8:56:7b:cf:c8:68:02:a9:6d:04:ad:b7:32:f2:
d6:eb:da:75:5a:f2:fd:62:35:11:18:bb:9b:02:55:
d1:4c:60:47:6f:17:bb:a8:89:ef:2a:69:cf:2e:c8:
1c:74:f2:73:9a:dc:8a:68:1e:1d:5d:88:22:93:60:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DA:B7:25:04:48:7C:73:DB:51:31:C0:FB:B1:76:8A:28:06:1F:87
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/t9q3JQRIfHPbUTHA-7F2iigGH4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.119.0/24
195.170.167.0/24
IPv6:
2a0b:8bc7::/32
Signature Algorithm: sha256WithRSAEncryption
a6:b6:84:e0:5f:77:da:fa:40:58:ab:91:65:bb:05:d5:0c:ac:
80:e4:28:96:52:6f:d8:14:c1:f7:d2:87:59:14:39:72:84:23:
2e:25:ed:4b:44:be:d5:27:a2:7c:3a:8d:15:45:e4:d7:cd:c1:
df:90:b0:bb:d1:80:1e:3b:28:b4:f0:52:36:b3:e3:15:86:1c:
9d:26:7b:f7:99:1d:6a:b5:d3:ec:32:cf:4e:d3:61:0a:fa:5a:
48:91:e0:6c:1a:04:df:1e:1d:66:66:c7:55:8a:d7:56:6b:b8:
5b:31:e9:31:77:e0:cd:9f:ac:a1:cf:77:d3:4c:ee:ab:96:94:
97:01:03:7d:5b:33:e0:e9:ef:1c:c5:49:5f:f3:0e:45:03:da:
d0:69:3e:0e:d4:76:14:1e:5e:35:3f:7f:5c:12:35:f5:a4:0a:
12:c4:86:16:df:a0:eb:f5:44:af:26:f7:b4:50:e3:31:92:36:
35:d4:8f:d8:d8:18:b3:37:07:c6:c9:50:27:44:14:b0:90:38:
cb:98:69:74:dc:da:dc:c0:b4:42:a7:6c:7a:48:82:f7:c4:3d:
50:0e:40:b0:b6:79:5d:00:db:d2:76:f3:b3:9b:5f:0f:5f:99:
6c:06:fb:55:1a:79:c1:77:48:57:02:84:e4:ed:5a:02:20:42:
89:07:e5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:11:59 2025 by rpki-client