Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa
File: x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa (raw, json)
Hash identifier: mAB0u4tnNy3pI1HtMQoSvS+geYvks2ItYBoen25rRrw=
Subject key identifier: C7:FF:72:8E:BE:AB:2E:A4:8D:6E:26:67:8E:65:AA:FA:63:6F:3A:08
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 019427B607CA03C86C80EAA5AF529F5F8166
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa
Signing time: Thu 02 Jan 2025 15:50:28 +0000
ROA not before: Thu 02 Jan 2025 15:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42532
IP address blocks: 94.158.218.0/24 maxlen: 24
94.158.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:07:ca:03:c8:6c:80:ea:a5:af:52:9f:5f:81:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jan 2 15:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7ff728ebeab2ea48d6e26678e65aafa636f3a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:6a:6d:72:5d:8b:92:d5:e2:8d:a0:ef:41:
26:99:f7:eb:0d:0e:93:ff:9f:d2:3d:22:8d:80:0f:
09:76:e1:33:5d:02:97:71:c2:c7:cf:5e:a8:a8:12:
07:24:3b:37:3e:95:90:5f:00:fe:0d:b5:71:83:75:
3f:9d:b6:17:ba:78:e0:ec:c9:b5:2f:c4:39:1a:35:
6a:4c:cf:c3:46:69:a9:b2:89:59:a3:fd:54:55:34:
00:7c:45:33:b2:ac:1f:a1:d1:c8:97:3f:47:51:34:
50:3b:9d:d5:78:8c:93:12:cf:fe:0c:7e:ec:db:11:
01:a9:0a:37:16:58:7c:b8:81:8f:e5:bd:2c:68:26:
41:2e:f6:ac:fa:6a:61:9a:08:e9:c2:4b:91:de:2d:
5b:b1:14:14:98:ba:80:80:36:04:ed:64:7d:53:46:
12:68:d9:7b:ce:8e:61:a0:68:b2:82:50:f9:4f:ec:
75:83:9f:a6:90:c7:64:35:4e:6b:ee:ef:dd:db:90:
e7:92:15:0b:66:11:79:92:e2:4b:fc:2e:71:bd:c3:
19:7f:7a:bb:7e:9b:be:78:55:e6:c3:8a:56:27:72:
b7:94:be:6a:15:5f:d9:f9:a5:e5:24:c4:72:33:59:
4d:cf:a2:99:60:67:52:3d:92:65:03:3b:57:a7:e1:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FF:72:8E:BE:AB:2E:A4:8D:6E:26:67:8E:65:AA:FA:63:6F:3A:08
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.218.0/23
Signature Algorithm: sha256WithRSAEncryption
74:da:ef:e9:f5:5e:71:a8:86:ab:2e:ea:6c:3c:02:bc:92:00:
87:08:85:9b:57:90:ae:85:8d:fa:60:4e:e3:f4:f2:4a:da:8b:
79:9e:f5:cd:3a:42:f7:85:71:fc:c0:3e:bd:d4:29:79:df:ae:
1e:ca:8f:dc:92:a3:88:6b:f3:58:69:11:75:f0:d4:72:9f:17:
5e:3f:4f:fa:31:73:81:40:8e:97:ef:f5:49:e0:28:a0:e3:9d:
a8:eb:6c:31:3b:91:52:08:8d:76:83:4d:0d:a7:20:c4:4c:a7:
5e:42:0e:e1:74:30:60:b5:1c:88:de:d3:17:26:5b:b7:c4:fc:
79:9e:8f:1c:dd:88:32:25:c9:f7:a6:d9:3f:01:2d:de:21:9f:
6b:fb:55:14:2f:ca:41:51:eb:25:16:7c:15:d4:e8:87:e1:47:
67:9e:59:73:e2:6b:1e:f8:6d:b8:03:94:db:22:0a:df:93:f3:
51:fe:59:0a:8d:ae:1b:66:05:fe:6c:3f:0e:ad:19:7a:b8:8b:
8a:5d:b6:5c:b2:01:4b:13:81:97:54:b6:06:cb:60:f9:98:54:
d5:f9:1c:15:13:be:33:6b:e1:52:31:64:be:59:ea:cf:be:c9:
f9:c7:34:3b:23:83:3f:cd:a8:09:01:ca:aa:32:fe:37:9d:77:
7e:99:88:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:44 2025 by rpki-client