Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9TdsPHC2qWL6vTlDaJZCzyzdKd4.roa
File: 9TdsPHC2qWL6vTlDaJZCzyzdKd4.roa (raw, json)
Hash identifier: uMFPfNMYo0T5OIZK5tVVj4CcFly+cnbdNzGdZu4HHRU=
Subject key identifier: F5:37:6C:3C:70:B6:A9:62:FA:BD:39:43:68:96:42:CF:2C:DD:29:DE
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747DE0F27EA4A8501093C78E7037235
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9TdsPHC2qWL6vTlDaJZCzyzdKd4.roa
Signing time: Thu 02 Jan 2025 13:50:08 +0000
ROA not before: Thu 02 Jan 2025 13:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205212
IP address blocks: 193.34.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:de:0f:27:ea:4a:85:01:09:3c:78:e7:03:72:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5376c3c70b6a962fabd3943689642cf2cdd29de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:dd:0f:12:13:a0:36:61:4c:20:5f:15:3f:
2b:37:e1:5a:15:f6:ce:a3:c7:cd:5e:e4:41:63:e7:
7f:59:94:80:17:70:02:1a:ff:5e:7e:25:37:e6:a2:
d6:97:25:80:e0:30:d8:33:1c:10:31:1f:62:2b:ad:
cc:9a:1d:c3:e1:5a:33:3c:85:0a:e7:e8:e0:f9:d1:
e9:a8:58:37:76:3f:b1:08:88:d0:a2:77:f9:fe:0d:
00:d4:50:9e:14:d8:9d:91:37:bd:12:0f:3f:ac:92:
39:f0:58:c0:09:22:95:c1:ff:82:dc:38:20:39:6e:
ec:eb:ce:f2:dd:6c:fb:05:52:11:c1:73:04:e5:84:
cb:59:35:49:f6:c7:f7:e2:c9:d6:b3:90:57:ed:24:
da:ad:96:19:7a:55:36:29:a0:fc:f5:e2:79:b7:7e:
c8:de:e2:55:92:60:fd:90:16:98:32:41:8e:d1:12:
42:07:6e:69:f1:a8:46:6f:18:2b:f7:6a:f5:67:d0:
6e:de:77:97:97:73:77:bf:76:b4:2b:1d:c6:68:51:
bb:f1:c9:04:b7:9f:3c:de:1e:e8:f9:ca:77:da:b0:
08:fe:f2:68:37:ea:5c:8d:c7:5e:40:07:8b:32:ae:
c0:96:ad:5d:e5:90:85:b8:0f:d1:6d:9c:9d:83:61:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:6C:3C:70:B6:A9:62:FA:BD:39:43:68:96:42:CF:2C:DD:29:DE
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9TdsPHC2qWL6vTlDaJZCzyzdKd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.76.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:51:01:cb:e8:69:30:85:c3:dc:30:da:98:2c:ed:e7:2c:5a:
9f:95:2b:ff:e0:58:16:c2:cb:7d:58:72:ed:96:44:2c:e8:94:
05:40:69:be:e6:ad:7e:06:2d:de:95:9a:d9:4c:aa:07:76:d9:
c2:d2:b4:1d:01:79:65:33:18:89:90:18:06:ba:34:14:9c:86:
1f:87:e1:fe:e1:4f:67:18:b9:80:fb:72:1a:c8:5f:ad:c8:8b:
a5:6d:30:df:78:6f:4c:69:13:89:1b:3f:0a:47:c3:fc:26:f3:
5d:df:79:ea:11:74:f9:69:8f:5c:a0:a1:c0:95:bb:fe:23:b6:
84:a2:c6:43:f2:01:52:04:37:20:31:e2:f4:17:30:5d:0f:9d:
d0:33:c8:f2:5c:1e:50:ce:cf:77:c0:dd:7c:5e:58:3f:82:a6:
14:53:d2:ea:17:15:78:e0:42:65:f9:2d:4e:a0:a6:a2:77:06:
98:45:e6:22:6e:b0:83:13:7c:bf:b9:81:d7:f4:a3:d5:34:46:
7c:96:93:0e:bb:ac:63:c5:a5:e5:85:2b:95:d7:93:a2:5e:8f:
e6:75:3b:47:43:3c:8c:c6:62:90:0f:9f:6b:58:81:66:1b:76:
f2:dd:ef:e0:2a:1f:39:13:04:d8:35:c1:32:9a:55:7b:bf:45:
64:99:65:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR94PJ+pKhQEJPHjnA3I1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwMTAyMTM1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTM3NmMzYzcwYjZhOTYyZmFiZDM5NDM2ODk2NDJjZjJjZGQyOWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfndDxIToDZhTCBfFT8rN+FaFfbO
o8fNXuRBY+d/WZSAF3ACGv9efiU35qLWlyWA4DDYMxwQMR9iK63Mmh3D4VozPIUK
5+jg+dHpqFg3dj+xCIjQonf5/g0A1FCeFNidkTe9Eg8/rJI58FjACSKVwf+C3Dgg
OW7s687y3Wz7BVIRwXME5YTLWTVJ9sf34snWs5BX7STarZYZelU2KaD89eJ5t37I
3uJVkmD9kBaYMkGO0RJCB25p8ahGbxgr92r1Z9Bu3neXl3N3v3a0Kx3GaFG78ckE
t5883h7o+cp32rAI/vJoN+pcjcdeQAeLMq7Alq1d5ZCFuA/RbZydg2EbfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPU3bDxwtqli+r05Q2iWQs8s3SneMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvOVRkc1BIQzJxV0w2dlRsRGFKWkN6eXpkS2Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSJMMA0G
CSqGSIb3DQEBCwUAA4IBAQCsUQHL6GkwhcPcMNqYLO3nLFqflSv/4FgWwst9WHLt
lkQs6JQFQGm+5q1+Bi3elZrZTKoHdtnC0rQdAXllMxiJkBgGujQUnIYfh+H+4U9n
GLmA+3IayF+tyIulbTDfeG9MaROJGz8KR8P8JvNd33nqEXT5aY9coKHAlbv+I7aE
osZD8gFSBDcgMeL0FzBdD53QM8jyXB5Qzs93wN18Xlg/gqYUU9LqFxV44EJl+S1O
oKaidwaYReYibrCDE3y/uYHX9KPVNEZ8lpMOu6xjxaXlhSuV15OiXo/mdTtHQzyM
xmKQD59rWIFmG3by3e/gKh85EwTYNcEymlV7v0VkmWW4
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:42 2025 by rpki-client