Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u9GvlXnbSfNLfQntSDgP5rvxjNs.roa
File: u9GvlXnbSfNLfQntSDgP5rvxjNs.roa (raw, json)
Hash identifier: AyfgwkQwZrZ4TGubtXrYLrZ3T0CuN0QkZoZQBhshILY=
Subject key identifier: BB:D1:AF:95:79:DB:49:F3:4B:7D:09:ED:48:38:0F:E6:BB:F1:8C:DB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01948D3549032146534CDCA64327E4B37F02
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u9GvlXnbSfNLfQntSDgP5rvxjNs.roa
Signing time: Wed 22 Jan 2025 08:51:07 +0000
ROA not before: Wed 22 Jan 2025 08:51:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 94.156.118.0/24 maxlen: 24
94.156.120.0/24 maxlen: 24
94.156.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:35:49:03:21:46:53:4c:dc:a6:43:27:e4:b3:7f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 22 08:51:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbd1af9579db49f34b7d09ed48380fe6bbf18cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:06:93:b3:60:27:a2:9c:93:b7:19:85:d2:
41:1f:74:c0:98:99:d8:3a:51:4e:cf:bd:e9:e6:1c:
fe:37:f4:fe:f8:bf:0b:e5:1d:93:15:04:f9:b8:c8:
ef:0b:f1:1d:95:f8:d5:50:b0:89:f3:75:a9:9b:d1:
12:46:9e:48:70:8c:6f:a4:7a:f2:23:ac:95:44:43:
7f:6e:f4:90:e7:01:21:0a:bf:e1:70:9e:3d:1d:e9:
c4:bc:7c:80:94:55:4e:57:a3:b2:53:9f:1b:52:09:
0f:23:cf:d7:d3:b2:d2:80:7b:e7:cb:25:31:6e:15:
98:a3:fb:05:d3:cf:50:76:71:79:bf:8a:c5:27:84:
c0:60:07:4b:1e:9a:cc:0d:3d:ac:ed:a7:44:0c:2b:
f6:71:4b:78:85:81:6f:f2:9b:6d:54:a8:ae:df:32:
09:8e:26:21:39:8e:c7:15:df:68:8a:bd:89:57:a0:
41:b9:94:73:7e:43:0b:7d:a9:0e:42:18:f3:f5:30:
83:d7:82:5a:91:55:a7:79:77:a5:8d:76:d5:b1:97:
09:bb:58:5b:71:76:a8:b2:d9:58:ee:67:35:d3:2d:
1a:bd:49:30:b3:09:07:f3:4f:0a:59:90:94:08:04:
e6:d8:5b:78:ad:d4:b2:1a:99:c0:c5:d8:e9:cb:d4:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D1:AF:95:79:DB:49:F3:4B:7D:09:ED:48:38:0F:E6:BB:F1:8C:DB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u9GvlXnbSfNLfQntSDgP5rvxjNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.118.0/24
94.156.120.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:06:dd:9f:7f:4e:f5:2f:5a:6b:1e:66:29:37:33:65:6c:ee:
c5:4d:72:92:97:1f:58:56:cc:1f:75:63:f0:9d:06:01:07:25:
3f:ef:f7:02:d0:ee:39:c1:45:d6:34:ea:47:cf:8e:5b:24:b7:
2e:05:0b:1d:37:d5:81:f8:d7:ea:c0:23:6f:67:1b:b6:87:74:
1c:76:ec:f2:35:24:3e:7f:27:af:8d:a7:2e:4a:06:86:9e:ab:
6a:4c:77:83:f7:cb:9d:c5:95:47:e6:02:2f:d8:c9:91:1d:1c:
f2:be:b3:58:39:d1:d5:89:8c:86:df:23:49:53:01:ce:5e:7d:
20:86:ca:b9:d8:6d:8a:b0:35:5e:7b:a7:78:7a:21:ee:b3:d8:
ba:85:90:17:51:39:5e:11:05:d2:c0:06:e9:6f:bd:72:14:a0:
cb:7c:98:e6:1e:33:c8:44:f8:e5:d8:0e:ba:70:65:94:b4:4f:
f3:8f:28:66:e5:f5:56:ed:34:08:85:fc:da:68:a3:da:5c:38:
1e:cc:77:42:ee:ec:75:27:3b:c7:f4:9e:cb:04:b8:c5:75:3f:
5d:34:25:cd:f1:e8:30:95:e0:86:4e:f6:72:e9:6b:4c:6b:e8:
3d:70:60:5d:f7:7d:1a:69:4b:13:0a:3f:13:02:96:cb:7c:44:
57:10:69:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:54:13 2025 by rpki-client