Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9gfeOlX6hDdIo_eYL9vfupCFRA0.roa
File: 9gfeOlX6hDdIo_eYL9vfupCFRA0.roa (raw, json)
Hash identifier: Bmqmd2FknZ/ngoGSIIYM/REpWXQ21HZwzvm2T7+gnA4=
Subject key identifier: F6:07:DE:3A:55:FA:84:37:48:A3:F7:98:2F:DB:DF:BA:90:85:44:0D
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5B1A5A01D3D4159ABFEF51C93A844
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9gfeOlX6hDdIo_eYL9vfupCFRA0.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203196
IP address blocks: 37.139.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b1:a5:a0:1d:3d:41:59:ab:fe:f5:1c:93:a8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f607de3a55fa843748a3f7982fdbdfba9085440d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:cb:d4:31:0d:72:50:af:67:4b:6b:e6:7d:
93:fd:e1:f7:12:0e:78:25:95:42:97:a8:43:e9:ce:
36:b3:a2:42:e6:19:eb:d1:82:41:df:32:de:77:e3:
0f:0c:0e:64:35:e2:ff:7e:8a:4f:83:62:98:fc:b6:
b8:2b:80:5d:d7:be:d8:97:16:10:92:33:24:77:61:
b5:5c:f0:2d:10:94:5c:72:62:d7:2a:28:e7:3b:4d:
34:63:05:68:1f:e6:42:16:ea:de:1e:bf:24:64:0c:
2c:3c:c3:23:2b:b8:5b:ee:30:f6:88:e5:f7:7b:d1:
5a:e2:c9:9a:6d:c6:73:76:3d:07:e0:99:c6:d0:65:
1f:c8:d7:6a:1a:ab:1f:f2:3f:ee:0c:ef:74:7b:8e:
28:3f:8b:b8:e3:74:57:e1:36:79:ef:5c:eb:ba:e6:
9f:ac:0f:18:10:d4:e3:d5:5c:03:71:2a:5c:57:53:
44:9a:2a:a4:50:78:76:3a:47:c4:a9:73:e1:99:d3:
3b:42:76:fd:ae:db:ac:07:da:d9:91:b1:81:43:29:
da:7e:c0:c5:c7:e8:5d:b5:39:eb:41:2b:03:22:59:
79:ed:eb:bb:9b:28:e7:7b:46:cc:0a:06:25:58:92:
8a:a6:87:f4:e5:e3:c8:62:16:ea:2d:9a:0d:27:f3:
a9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:07:DE:3A:55:FA:84:37:48:A3:F7:98:2F:DB:DF:BA:90:85:44:0D
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9gfeOlX6hDdIo_eYL9vfupCFRA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.38.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c4:3a:68:7e:10:3a:25:c1:5c:f5:f5:df:d8:0d:cf:2a:59:
d1:d5:54:a2:95:d2:5a:49:62:1a:3e:de:4c:79:57:d5:5b:3a:
fc:61:2b:51:d4:93:22:ef:32:d0:27:97:23:ef:85:82:b1:a2:
11:c3:f1:b5:65:06:0b:36:a4:76:b0:30:33:d8:36:96:cc:bb:
42:99:ca:23:40:a5:96:4a:47:80:1b:52:08:9b:4a:14:d8:6d:
6a:cf:ce:67:92:d6:f3:d3:8e:69:81:30:9b:a1:ef:33:48:a9:
d6:6b:56:98:37:47:16:ef:25:bf:da:2b:c6:53:30:81:d0:db:
89:63:13:df:5e:26:41:6a:d9:35:a8:d6:80:30:7d:ba:cb:2c:
97:f7:bc:85:70:53:a3:a0:9a:0a:54:30:ef:53:e4:9e:00:db:
a6:04:b0:ed:b5:85:93:58:bc:02:e5:21:2f:a9:84:3d:48:6b:
d4:98:d4:20:7e:1f:94:f7:7e:40:cf:a5:07:2e:70:97:c6:81:
75:aa:6f:e1:2f:31:53:dd:7f:43:5b:3d:4f:7c:ef:a6:60:d9:
11:35:d2:64:59:ad:e1:0e:c6:93:29:9d:e0:73:66:19:56:6b:
36:c0:41:74:72:e2:9b:78:2d:32:ad:1c:3d:6c:50:b1:58:a4:
e0:00:bb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:31 2025 by rpki-client