Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9nW_fZV9yHCEjnUIYcfhJBr_9BU.roa
File: 9nW_fZV9yHCEjnUIYcfhJBr_9BU.roa (raw, json)
Hash identifier: P1cn8LQ9QZwhSibxiIjzPuAfqp1oUDRR/Popy1Fgrss=
Subject key identifier: F6:75:BF:7D:95:7D:C8:70:84:8E:75:08:61:C7:E1:24:1A:FF:F4:15
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747DFBE12AEB799361FFB11963EC4FD
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9nW_fZV9yHCEjnUIYcfhJBr_9BU.roa
Signing time: Thu 02 Jan 2025 13:50:09 +0000
ROA not before: Thu 02 Jan 2025 13:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206446
IP address blocks: 185.186.66.0/24 maxlen: 24
193.31.29.0/24 maxlen: 24
194.56.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:df:be:12:ae:b7:99:36:1f:fb:11:96:3e:c4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f675bf7d957dc870848e750861c7e1241afff415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:d0:c3:6b:ee:01:94:20:11:1a:fb:a3:df:
4f:51:20:97:16:7c:53:9c:f5:64:a0:6c:e7:c5:3b:
a5:a9:6f:c8:d3:57:bb:5b:8a:7a:c5:f9:87:d2:c0:
44:4c:b8:07:f5:ba:f6:dc:d7:d8:07:80:41:db:37:
47:23:9a:c8:8a:a2:d1:44:54:e2:46:12:36:c2:ad:
dd:83:d3:b9:6a:f1:63:9e:7b:01:8f:c4:77:56:88:
cc:b5:fb:c8:91:3d:75:e8:08:1b:f2:0a:6f:1c:fb:
12:da:4b:6d:18:6d:f4:41:14:ff:88:d2:96:8b:a9:
66:e8:eb:92:07:42:5c:b0:50:f8:c7:26:5f:cb:bf:
e8:2d:59:13:cd:7b:f8:df:05:cf:5b:d1:54:96:c2:
7b:40:42:e2:00:31:e5:e0:b0:34:84:b5:fa:5e:d5:
06:b8:95:e8:35:2d:98:c2:10:98:11:22:9c:74:7f:
a4:18:77:b6:4a:9c:7a:32:6f:4a:16:02:f6:ba:00:
ab:7b:e7:f3:41:8d:06:48:47:50:55:e5:fd:0a:31:
30:83:d9:de:1d:72:6d:04:6b:69:e4:83:af:55:54:
88:0a:02:c6:06:ee:00:cc:5f:da:bc:91:68:68:14:
21:49:a4:8c:b5:11:59:70:10:a2:2c:7a:23:c3:0d:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:75:BF:7D:95:7D:C8:70:84:8E:75:08:61:C7:E1:24:1A:FF:F4:15
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9nW_fZV9yHCEjnUIYcfhJBr_9BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.66.0/24
193.31.29.0/24
194.56.227.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:a4:90:fc:d9:46:cc:44:51:bb:93:e0:95:c9:8a:06:43:4a:
9e:7a:49:a8:18:12:a9:8e:32:71:16:f1:69:c4:b1:08:48:41:
71:ed:a5:c0:57:8b:66:85:b8:1a:ce:28:83:8e:b1:b7:03:dd:
35:0f:39:a0:30:fd:d2:75:87:fc:31:1c:96:6b:8b:68:52:01:
e9:ce:bf:40:ec:2a:bb:a1:f5:c5:c0:a0:d7:bb:09:8c:43:74:
22:3c:3f:e6:75:1e:28:19:92:91:cd:60:88:79:d9:22:25:cf:
86:f1:45:16:36:b1:80:3b:b7:16:65:89:32:05:83:88:68:fe:
5f:44:b9:aa:66:ce:7b:0f:7c:c8:ca:03:44:09:3a:0d:b3:b4:
35:cf:85:0d:72:d0:ab:08:05:b5:a7:e1:b2:dc:d6:f6:b1:d5:
fc:70:64:26:b2:fa:8a:ec:10:8f:a9:82:78:99:31:92:30:7f:
4c:86:d5:f9:ab:ec:9a:13:b5:73:f3:ad:ae:a9:8e:1e:f6:35:
4b:95:8c:b3:ab:94:0a:10:ad:76:fa:9d:8b:26:bf:c6:79:1e:
dc:34:11:12:76:b5:36:fd:f3:cb:38:92:26:7a:11:3d:58:77:
f6:aa:ce:2c:52:78:18:79:13:6d:3c:b9:5f:74:4c:f5:1e:d0:
68:13:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:00:36 2025 by rpki-client