Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9tQg-DLKVkFzQ6GzY6sLR5Em1bE.roa
File: 9tQg-DLKVkFzQ6GzY6sLR5Em1bE.roa (raw, json)
Hash identifier: 1yyvx10+fRjZpQQpAmZ26m+93A+cIHDqrOipN1wdkYs=
Subject key identifier: F6:D4:20:F8:32:CA:56:41:73:43:A1:B3:63:AB:0B:47:91:26:D5:B1
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420684E9068D3A10D14E5466BC81A5CB3
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9tQg-DLKVkFzQ6GzY6sLR5Em1bE.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202999
IP address blocks: 193.233.9.0/24 maxlen: 24
193.233.56.0/24 maxlen: 24
193.233.57.0/24 maxlen: 27
193.233.58.0/24 maxlen: 24
193.233.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4e:90:68:d3:a1:0d:14:e5:46:6b:c8:1a:5c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6d420f832ca56417343a1b363ab0b479126d5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:b5:ad:e6:86:56:2f:d7:a3:84:c9:94:a7:
fb:3e:0e:38:29:b4:e5:84:1a:16:0f:2c:19:b9:d0:
37:d3:a5:db:1b:4d:4b:1e:bc:4a:b2:90:5a:80:06:
50:aa:57:22:97:c8:ec:3f:bc:1d:80:a2:27:55:88:
c7:ff:94:93:ba:3e:19:81:b3:dd:d1:a8:09:f1:d5:
e9:72:2c:dd:b5:c4:1c:22:02:cb:eb:e0:6d:34:be:
2f:6e:e7:f6:c8:c4:97:6e:04:bd:70:74:8a:fb:d1:
c5:b1:de:c4:5c:de:90:fd:8e:b4:e6:49:dc:71:8e:
67:50:ba:43:28:3a:4e:d0:b3:cb:44:86:46:fd:4d:
ae:8a:cd:da:80:bc:0b:1e:00:a9:e2:02:97:a3:19:
05:56:34:71:b2:cf:e8:e8:ee:fc:48:49:3f:17:c1:
90:c1:37:23:f4:1e:67:bc:32:c8:48:bf:3a:7a:ec:
ea:19:2a:f2:43:58:68:5c:39:98:2c:1f:4a:57:0e:
66:24:b1:5c:33:ac:f2:a9:68:1e:6b:42:ea:18:25:
95:28:a6:c4:47:fb:72:83:14:54:5e:81:ec:cb:c9:
cb:74:08:9b:d3:17:bf:9a:7d:ec:dc:67:a3:3c:a6:
65:04:ed:1f:52:7f:24:87:ce:3b:1c:91:5c:b2:1c:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D4:20:F8:32:CA:56:41:73:43:A1:B3:63:AB:0B:47:91:26:D5:B1
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9tQg-DLKVkFzQ6GzY6sLR5Em1bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.9.0/24
193.233.56.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:de:14:84:9a:a7:66:15:84:1e:f3:f5:be:f8:08:14:d6:79:
c8:4a:79:56:9a:0f:12:04:79:85:43:7b:d2:98:94:b0:7b:8e:
a9:9b:45:ca:43:ae:21:e3:a8:dc:74:e1:49:21:eb:11:12:ad:
ee:5f:a2:32:b1:98:9c:c2:8f:8a:89:51:8d:27:11:54:f9:a5:
f4:01:69:90:1e:d6:6c:54:1b:f4:a6:08:af:e5:74:cc:5d:4d:
c0:39:7f:52:8f:0e:3a:f0:d3:2a:c1:9e:37:55:ee:18:ed:b6:
27:b0:c7:e3:79:11:1e:0a:65:ed:2a:de:ad:78:5f:03:4c:2c:
1f:1f:8b:9f:8e:19:32:08:79:90:08:34:f1:f1:91:d1:41:ca:
ba:72:38:a5:f2:61:e5:1a:6a:a5:b2:94:8f:53:0f:72:80:23:
ca:40:78:40:5c:d6:d6:b4:d7:a1:8d:2d:71:20:a2:2b:17:8d:
af:78:1e:6a:23:23:2d:14:c6:33:98:49:f1:04:9b:58:4b:7e:
6c:ed:66:d0:f4:e1:c1:de:df:89:47:59:4b:3b:26:6b:9c:fd:
f8:24:4e:b4:60:69:61:b9:df:74:be:f0:ca:62:b9:38:83:fe:
a7:c5:d1:d0:db:40:1d:40:04:06:6b:fd:28:40:2c:b4:d0:6a:
b9:c3:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:22 2025 by rpki-client