Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9Phn-d542m177DchN7TmsFeb1OU.roa
File: 9Phn-d542m177DchN7TmsFeb1OU.roa (raw, json)
Hash identifier: IvrmWzzrwFdFUhF0cNEpjF77V2C6duqK0wcB3TS357A=
Subject key identifier: F4:F8:67:F9:DE:78:DA:6D:7B:EC:37:21:37:B4:E6:B0:57:9B:D4:E5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C23CD6B32C33838B666BD91F28356
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9Phn-d542m177DchN7TmsFeb1OU.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44043
IP address blocks: 194.102.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:23:cd:6b:32:c3:38:38:b6:66:bd:91:f2:83:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4f867f9de78da6d7bec372137b4e6b0579bd4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b3:d1:2d:a8:c7:5b:b6:83:9a:8f:80:42:47:
26:ea:d5:b6:cb:05:c5:26:c7:c6:b2:64:4e:52:b1:
dd:5d:21:d0:ec:cc:e3:f0:ad:7f:b1:65:19:68:97:
cd:c0:af:21:61:89:44:c1:6a:5a:5b:ec:49:37:85:
23:fa:02:77:36:57:31:60:cb:8b:25:5a:de:6f:a1:
c5:6b:f5:1b:61:0c:03:dc:99:4a:84:46:11:0a:71:
00:95:0d:fa:1a:d7:da:6c:eb:dc:81:b6:43:44:24:
8a:ea:1e:cd:a4:15:34:9f:e6:af:82:d3:3b:72:d9:
a9:7d:67:65:19:ab:f9:bf:48:c1:1f:6a:f0:68:06:
3f:30:55:60:45:62:56:bc:19:37:b4:35:50:53:27:
4f:72:23:9c:b0:62:ff:c9:3d:a8:a5:73:5b:28:c9:
84:c6:09:78:bf:02:51:77:bb:3b:c4:08:0b:c6:e4:
c2:9b:9a:8e:5f:bf:4b:0c:85:e7:29:e1:26:96:07:
10:04:85:a2:e2:a4:0c:45:1e:d0:d8:5b:4c:6d:5b:
c9:bf:ce:94:0e:dd:14:b0:59:93:f5:a4:85:f7:44:
59:80:d5:bd:22:ce:5e:3f:cf:9f:d7:8a:73:3a:49:
56:11:89:f0:51:2a:dc:d7:4a:9f:ec:b6:b6:cb:3f:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F8:67:F9:DE:78:DA:6D:7B:EC:37:21:37:B4:E6:B0:57:9B:D4:E5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9Phn-d542m177DchN7TmsFeb1OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.218.0/24
Signature Algorithm: sha256WithRSAEncryption
42:68:99:89:9f:69:7b:ed:6a:82:1d:53:9c:59:07:c1:7b:d7:
ff:50:79:76:bd:f3:ae:30:7c:11:e9:f9:43:b6:76:da:a4:56:
f7:bf:0d:62:24:2f:5b:20:53:ca:74:19:cb:57:26:45:bd:d6:
e7:d5:31:bd:d0:13:91:b8:f8:90:4a:b8:41:a3:8c:ae:00:54:
32:8d:7d:87:28:48:72:cb:cf:c9:a4:78:39:3b:de:26:ea:28:
10:17:3c:ee:ba:58:41:77:53:e8:be:98:d6:75:f9:66:0c:90:
16:cd:fc:95:7d:b3:a6:4f:c4:18:7d:df:5a:65:30:1b:7e:39:
e1:1a:ac:3e:65:87:bb:61:87:24:26:83:e8:84:ba:fa:48:fa:
63:58:72:80:dd:b5:c4:4d:af:59:03:c8:b7:82:33:3c:d0:68:
c3:79:66:93:3a:85:d6:7f:32:14:54:49:4e:f6:ad:74:79:4e:
44:85:9d:fe:31:ea:b9:ad:22:6e:7d:cd:f3:8d:9d:b0:cb:1f:
38:d7:a5:66:b3:e2:9d:6f:55:e9:5b:f8:6c:60:ab:4a:30:8f:
f3:c3:fc:db:3e:18:67:c4:0d:6f:6a:97:44:8d:48:09:86:a1:
39:64:93:f2:19:52:03:53:e0:27:7a:16:37:67:24:3a:a6:0e:
2e:8b:33:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:50 2025 by rpki-client