Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/r9s7fXucz9mO0YyEmbifHibXOH8.roa
File: r9s7fXucz9mO0YyEmbifHibXOH8.roa (raw, json)
Hash identifier: olEHRUah1tN94c158LVnuHzTLQlemfg4kV3xxznq7aw=
Subject key identifier: AF:DB:3B:7D:7B:9C:CF:D9:8E:D1:8C:84:99:B8:9F:1E:26:D7:38:7F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C43842BE3890505015EDE3C1C5C27
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/r9s7fXucz9mO0YyEmbifHibXOH8.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213323
IP address blocks: 80.96.48.0/23 maxlen: 23
81.181.232.0/23 maxlen: 24
194.102.150.0/23 maxlen: 24
194.153.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:43:84:2b:e3:89:05:05:01:5e:de:3c:1c:5c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afdb3b7d7b9ccfd98ed18c8499b89f1e26d7387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:91:30:b6:4f:2f:ba:4f:25:ff:b5:03:c8:
6b:13:2e:8d:a5:3d:03:86:eb:e6:61:44:99:a3:e0:
a2:6e:7d:b3:cb:e2:3a:3f:a6:14:a7:2d:2a:bc:d8:
ba:2c:5b:71:39:2b:7a:06:d1:c8:46:db:a9:fe:70:
22:7a:5d:00:6b:e2:a5:95:9d:1e:bc:50:1a:f0:b6:
52:90:b3:fc:66:a1:75:bc:61:4d:d8:3d:a3:7f:29:
93:2c:df:b2:65:ca:23:1d:3c:1a:cc:98:9f:8f:0d:
1a:9b:ac:b2:23:ae:d6:fc:86:37:6f:27:05:6f:59:
76:ea:54:cd:99:96:c5:7b:c0:79:31:6d:53:e4:fb:
13:0f:14:04:cb:2f:90:b7:d5:d5:66:b3:fc:8c:82:
b1:8e:ef:94:a1:d0:3b:7e:e6:a4:86:93:f7:68:15:
96:32:f4:61:86:15:a4:e5:01:e7:e7:cd:08:78:82:
c8:b1:7d:46:5f:b6:88:60:b3:9b:fe:d9:45:72:ac:
8d:b3:b6:1f:9a:c2:f8:fc:df:d6:71:36:86:1e:92:
7a:0f:11:f8:91:ba:ee:44:06:42:27:58:ca:c1:e7:
40:76:a6:fb:44:20:a2:b7:08:98:e8:f1:29:ae:ea:
14:7a:3d:8e:e7:79:23:44:4f:c8:8b:e7:ba:dd:76:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DB:3B:7D:7B:9C:CF:D9:8E:D1:8C:84:99:B8:9F:1E:26:D7:38:7F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/r9s7fXucz9mO0YyEmbifHibXOH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.48.0/23
81.181.232.0/23
194.102.150.0/23
194.153.228.0/23
Signature Algorithm: sha256WithRSAEncryption
85:93:b6:fc:02:3d:53:01:20:18:ae:48:60:df:32:55:cb:22:
0d:45:3a:d1:e1:3e:9c:30:96:af:85:ba:39:7a:ff:ac:ef:5a:
c1:e4:3f:41:6b:6a:35:af:f0:44:c0:94:60:66:d0:98:f7:b2:
84:98:a5:db:72:14:21:c5:bb:ff:74:e7:4e:01:87:1c:72:3d:
4f:4e:b6:b6:17:a6:6e:0e:d9:30:05:be:88:d2:e5:fd:44:76:
24:02:36:ae:92:09:3c:2f:56:72:41:07:96:0c:e4:fb:bf:38:
fa:4d:fb:0a:2f:43:c1:6c:80:75:a5:89:43:31:69:62:07:d0:
c2:ed:ec:80:63:f1:d1:7e:c2:85:c5:49:81:1f:c8:7f:96:49:
92:3c:d4:01:3d:f6:de:a3:57:a1:e9:24:36:1b:00:ee:59:65:
2d:b7:da:7c:43:6e:d2:9a:be:b0:2d:94:0b:ff:ae:1d:88:d7:
2f:af:5f:3f:94:b6:04:07:1a:d9:3e:05:68:df:7e:c4:75:ef:
f5:66:6d:2f:c7:ef:e2:99:e9:60:c6:4f:c2:dd:51:ef:9c:c4:
18:1d:f1:60:8e:a4:54:e5:ea:a3:ed:f5:4c:23:25:a5:94:71:
25:a8:c5:cc:ac:a7:be:a0:bd:db:1c:13:44:bf:61:81:d5:55:
25:77:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:14 2025 by rpki-client