Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa
File: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (raw, json)
Hash identifier: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=
Subject key identifier: F6:0D:A8:34:A3:16:3C:76:98:DF:2A:72:37:71:85:67:1C:CF:7E:CE
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019423697CC19BCAD32ECC3196DC7283B124
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa
Signing time: Wed 01 Jan 2025 19:48:23 +0000
ROA not before: Wed 01 Jan 2025 19:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38981
IP address blocks: 87.237.108.0/24 maxlen: 24
87.237.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:7c:c1:9b:ca:d3:2e:cc:31:96:dc:72:83:b1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jan 1 19:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f60da834a3163c7698df2a72377185671ccf7ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:30:88:3f:46:17:69:82:57:22:d8:a0:9b:
7a:f4:b5:48:79:37:03:bb:93:90:57:14:8c:7b:64:
11:74:14:52:b7:78:a1:df:06:0c:b0:cc:34:8c:98:
96:38:bd:c9:c2:2e:17:37:4a:d2:22:07:e1:a8:42:
96:2c:1c:e5:13:d9:8b:df:16:84:0a:e1:ed:a7:7f:
76:94:47:c6:bf:92:41:8e:dd:00:57:1f:49:85:45:
d0:d0:2e:bb:68:c9:86:7d:51:54:31:9a:a3:18:3a:
3e:0e:33:78:a1:27:58:1f:36:41:e6:dd:38:df:c2:
b5:87:ab:3b:70:a9:59:67:8d:f2:c9:ec:f8:92:fc:
d2:76:93:ea:19:2c:7c:64:ee:ae:66:6c:bf:eb:77:
88:e7:44:0a:8c:81:5e:bb:bc:6a:5a:6b:49:6e:59:
b8:61:37:6c:bd:35:87:12:3a:27:85:63:99:bc:a2:
e0:8b:35:db:2e:a3:a3:e7:7b:0e:6e:9f:80:65:bd:
be:ff:39:27:9d:23:a5:ae:81:68:41:ea:d9:91:8e:
0b:e5:55:65:8d:cf:4f:58:2d:76:10:31:c2:d6:03:
1f:31:a1:8e:c8:c4:86:b9:df:79:13:47:4f:a7:f5:
d8:e2:46:c1:dc:78:85:f4:71:32:5c:e7:83:db:37:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0D:A8:34:A3:16:3C:76:98:DF:2A:72:37:71:85:67:1C:CF:7E:CE
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.108.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:9e:59:65:d8:f3:6b:f6:70:f0:7f:a9:74:52:de:99:af:c5:
a6:52:c9:62:08:c1:6a:0c:12:82:f2:0f:c2:1c:9b:63:ca:48:
ca:46:83:5b:0b:0a:bb:af:c6:54:83:c4:af:8b:86:de:c9:b1:
d4:ba:02:7b:4a:7a:53:1c:e0:aa:6a:f6:e6:f8:47:5e:21:ef:
96:22:9d:bf:98:91:a8:00:74:6c:67:c3:f2:aa:9c:bd:c6:b8:
0e:7c:93:6c:f6:47:f3:74:3a:1d:5e:7b:da:5c:c0:fc:23:31:
a5:5e:cf:7b:c5:e2:6c:f5:8a:b8:8d:b1:e1:1d:6b:35:5c:93:
b9:e4:9e:48:0e:fe:78:be:2c:70:e7:74:32:fe:ad:fc:ee:13:
2a:d4:df:30:fb:ff:4f:a6:8c:75:cd:98:32:cf:42:7f:f5:42:
bb:c0:2b:03:07:d6:ea:26:a3:88:60:58:ee:60:bb:3d:fc:5d:
42:2e:3e:90:fa:52:92:90:07:4e:f0:ce:e6:ce:57:f1:5e:b6:
de:4b:37:29:24:a6:eb:98:88:b8:57:36:b1:cf:4c:7b:ed:01:
c0:40:0e:61:1a:2a:66:58:3a:6f:f3:51:11:81:95:54:a8:04:
bf:92:68:ec:5d:27:27:89:03:6c:c9:7a:77:fd:ef:7a:d1:e7:
eb:6d:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:50 2025 by rpki-client