Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/m09Q3jOZRSTE-FdvQUkBR3XIKzk.roa
File: m09Q3jOZRSTE-FdvQUkBR3XIKzk.roa (raw, json)
Hash identifier: XLPF+3wh4y3SbqH9rmLaw8G9WMXj7xl5WG3PO3HNUzA=
Subject key identifier: 9B:4F:50:DE:33:99:45:24:C4:F8:57:6F:41:49:01:47:75:C8:2B:39
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 0194274827F60B0242EE524FB4218BB320A1
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/m09Q3jOZRSTE-FdvQUkBR3XIKzk.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31287
IP address blocks: 109.121.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:27:f6:0b:02:42:ee:52:4f:b4:21:8b:b3:20:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b4f50de33994524c4f8576f4149014775c82b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:95:19:1e:71:ec:c9:29:a4:0f:93:31:7b:
2c:6e:57:e9:de:eb:5f:ea:97:f5:9d:a4:51:9e:7e:
d9:dd:98:97:88:a4:64:5d:18:50:00:b8:b7:f1:c1:
bd:f9:34:f2:9d:b9:36:26:b7:63:6c:57:42:0c:91:
e5:6f:d6:68:95:fe:d1:44:2e:f3:9a:f3:99:eb:44:
b8:68:7a:be:db:e2:ce:e4:dd:e3:6f:ee:6a:92:3c:
03:a7:c4:33:00:06:5e:11:40:db:4e:1f:ff:45:68:
da:1f:83:36:00:fd:4b:00:d2:8a:6e:b6:26:ff:b6:
26:19:2a:09:72:77:ef:f8:a0:6e:4c:97:fd:b7:db:
85:5d:52:1a:91:07:b7:e6:5c:51:46:da:f2:ba:fe:
59:91:72:3e:d3:7d:d4:96:2d:d6:37:d5:c8:8f:80:
28:e9:b4:0e:58:c3:ba:96:b6:d1:21:55:2d:90:13:
61:84:d9:26:a9:89:a9:02:d0:70:2b:2f:6e:ba:76:
e9:fb:32:42:07:de:dc:8d:d1:2c:0c:e9:9f:3d:42:
7a:53:54:12:d1:f6:25:84:e9:10:f3:63:17:08:7e:
53:80:34:92:c2:87:f1:91:a8:be:8f:c8:20:0d:ea:
cf:fc:4a:ca:00:ec:5c:63:e5:a9:2d:45:90:00:56:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4F:50:DE:33:99:45:24:C4:F8:57:6F:41:49:01:47:75:C8:2B:39
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/m09Q3jOZRSTE-FdvQUkBR3XIKzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:66:d5:3f:b3:90:bf:b8:05:e0:bc:0b:e6:81:d0:88:e0:2d:
9a:90:05:0e:43:0f:69:6c:48:5e:24:dd:68:1b:98:67:1f:0f:
d0:20:22:56:13:49:a8:85:c7:c0:18:1e:e7:fe:8b:84:fe:27:
cb:c9:19:9a:85:d8:df:a6:8c:b4:95:7f:d5:bc:a9:c6:29:22:
7c:48:6e:c3:00:02:ce:3b:fc:ca:9b:40:8a:53:34:de:aa:4f:
bc:3e:6b:f2:3d:45:53:e8:5d:07:5d:fd:08:02:b8:de:cd:48:
b6:f6:a1:70:17:e6:ce:58:fe:1c:de:bd:ed:04:1f:88:a3:50:
39:b6:90:36:54:db:86:97:ba:68:f5:c9:33:94:29:67:76:14:
4d:c1:b2:5b:8a:63:1d:13:c6:c8:43:88:29:33:2b:39:13:ec:
6a:73:1f:f8:da:39:78:5a:53:c7:33:2c:2f:3e:52:75:e1:ff:
cc:9c:5e:a2:c7:c7:9a:e3:f8:30:88:bf:3f:07:39:fb:3a:43:
1f:92:4d:f2:d1:b3:bb:2e:0b:07:b6:3e:df:3d:f4:65:14:ea:
e6:2e:39:6d:72:a4:89:16:7b:85:6f:5b:82:e4:17:f0:6a:db:
21:a8:65:e0:91:bf:68:30:40:d9:49:81:97:71:5d:db:31:5a:
79:63:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:49:35 2025 by rpki-client