Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Ia9X9H2kajmZK0atKFFz6DCTYt4.roa
File: Ia9X9H2kajmZK0atKFFz6DCTYt4.roa (raw, json)
Hash identifier: r0bTPFzmyz0YN5KR7cgVNJ6XmKkwSmJZQCPpfDKYKpc=
Subject key identifier: 21:AF:57:F4:7D:A4:6A:39:99:2B:46:AD:28:51:73:E8:30:93:62:DE
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01958EED96B792585A621853228EFC61400C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Ia9X9H2kajmZK0atKFFz6DCTYt4.roa
Signing time: Thu 13 Mar 2025 09:54:50 +0000
ROA not before: Thu 13 Mar 2025 09:54:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12310
IP address blocks: 85.120.152.0/23 maxlen: 23
85.121.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:ed:96:b7:92:58:5a:62:18:53:22:8e:fc:61:40:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 13 09:54:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21af57f47da46a39992b46ad285173e8309362de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:9a:c3:86:03:5d:29:f7:80:ab:5a:39:70:
10:a9:4d:8a:21:17:db:a2:3b:57:5e:a9:3a:17:e1:
66:5c:cf:b1:2b:bb:85:f4:88:93:bc:1e:f6:f7:8d:
15:05:84:dd:f8:68:6a:df:1f:d8:51:6e:2c:9f:c7:
ba:aa:ab:e5:3f:3c:9d:c3:96:2b:9e:7f:7b:9b:5a:
70:fe:43:5a:fa:09:1b:34:8e:05:c6:f1:4b:fe:c0:
4a:58:28:0f:58:45:cf:0d:ee:b7:76:37:36:c1:da:
67:6a:2c:43:70:ab:56:28:b5:ae:1a:f4:76:75:7d:
70:3a:47:19:f9:b5:d4:b3:84:2f:e1:fa:09:65:db:
28:0d:76:78:7d:92:99:94:30:6b:40:6b:a4:22:00:
dd:ec:84:0e:83:a9:00:0e:c0:59:2e:e7:de:31:8d:
7e:0c:44:bc:35:c4:53:1c:ae:fa:63:47:f0:bd:e5:
3f:37:2a:8d:32:b8:66:d4:c6:b7:ed:b5:1c:61:1a:
46:df:24:40:dd:c7:2f:0e:69:11:cd:29:8a:e0:9a:
98:61:81:48:3a:d6:76:44:73:b5:4e:02:52:2d:0c:
df:e9:c9:1b:69:03:76:c7:07:c4:2d:fd:b6:93:14:
39:b0:0c:e5:c0:19:20:7a:10:76:8e:41:5d:c3:5c:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AF:57:F4:7D:A4:6A:39:99:2B:46:AD:28:51:73:E8:30:93:62:DE
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Ia9X9H2kajmZK0atKFFz6DCTYt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.152.0/23
85.121.14.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:29:a9:4d:19:0e:d2:b7:1a:5f:29:df:c5:4e:31:f8:c8:d9:
b1:3f:1e:1f:70:45:ea:8b:7e:f2:ef:83:26:61:f7:76:bb:a4:
2d:04:44:90:69:86:b7:15:ec:87:2d:f9:c6:8e:17:5e:b3:18:
68:f3:06:59:d3:fb:20:71:4f:11:1c:e7:c6:e8:f6:34:35:46:
97:a9:6d:ca:ca:06:15:f7:21:a5:83:eb:77:95:cc:b9:f7:aa:
d0:15:47:1a:5b:3c:f5:91:ea:36:40:2c:67:0f:ab:75:29:99:
cf:df:cd:3b:bc:7e:ee:9a:f1:d8:b2:49:cb:f8:bb:4c:88:e6:
13:87:c5:23:46:c1:e3:73:22:80:d0:02:27:c8:5d:7c:55:62:
2e:12:bf:e0:0c:6e:45:7a:bb:b9:5b:fd:a6:a5:ae:01:cf:80:
d9:a1:83:c7:77:37:82:2b:8d:a4:31:0f:f7:aa:a6:0b:b4:e8:
a6:b0:89:75:75:bd:55:ed:33:d5:43:c1:46:81:6d:31:f5:83:
d0:cf:94:c2:bf:a3:e9:0c:70:17:a8:af:33:d3:9c:3d:2a:e8:
20:a1:b3:dc:b5:1c:33:b8:1a:78:8b:3c:de:19:ea:be:2f:4c:
1c:84:30:bc:d8:6d:1a:9b:f3:35:f9:77:a8:77:78:52:9d:47:
75:db:2f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:54:17 2025 by rpki-client