Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/9bpfBQjgK3dw6rgeYBGUGC_KQdI.roa
File: 9bpfBQjgK3dw6rgeYBGUGC_KQdI.roa (raw, json)
Hash identifier: LLXaZp76DD3QRRqXxKgWM7+FKfHGkvTdFTOznhul5ME=
Subject key identifier: F5:BA:5F:05:08:E0:2B:77:70:EA:B8:1E:60:11:94:18:2F:CA:41:D2
Certificate issuer: /CN=53585138107965c389f367b55abd792b531eb9ca
Certificate serial: 019421B1D4AA93C6603EE249C2F0856D9AE7
Authority key identifier: 53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/9bpfBQjgK3dw6rgeYBGUGC_KQdI.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12552
IP address blocks: 80.242.20.0/24 maxlen: 24
80.242.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d4:aa:93:c6:60:3e:e2:49:c2:f0:85:6d:9a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53585138107965c389f367b55abd792b531eb9ca
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5ba5f0508e02b7770eab81e601194182fca41d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:12:2e:7f:a8:1f:d9:cd:46:11:a9:45:d6:
26:ed:ca:5b:ad:54:24:b5:06:c7:8e:2a:01:ea:06:
e3:32:82:4c:1d:52:e8:46:52:7e:13:c4:6c:db:c9:
33:54:24:1f:b4:72:6e:69:55:de:bb:ad:22:f8:cb:
81:02:fd:9e:21:68:7a:25:94:ea:83:7d:96:d3:96:
26:d4:9b:6e:f6:97:e3:c7:b4:5d:73:5c:34:20:e8:
5b:7a:6e:98:b3:91:a4:21:7e:bb:75:af:a4:10:90:
52:87:5b:d1:a8:a6:dd:3c:e6:17:e5:cb:8a:cf:b7:
b1:53:09:6d:8c:39:37:3c:c1:5f:75:c5:cb:94:02:
2d:dc:70:ee:d4:13:46:50:08:9c:b8:bc:cc:0c:ce:
ee:46:85:17:4c:8c:79:eb:e1:13:1e:6b:ad:20:d5:
02:a4:ef:e7:a5:66:15:a6:f7:90:2d:3f:8e:1a:dc:
a2:6f:c2:81:ac:d2:46:d0:b0:0e:f2:33:de:db:de:
ab:11:53:60:b5:bd:04:3f:2d:69:39:22:90:f6:c6:
e9:bf:ec:9b:1b:1d:24:cd:66:83:1e:f7:2d:90:c3:
38:8a:90:f9:cd:cd:fb:5b:4e:e3:47:55:29:f8:f3:
e5:e8:96:b3:57:95:fe:49:be:6a:7e:df:11:6a:b1:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BA:5F:05:08:E0:2B:77:70:EA:B8:1E:60:11:94:18:2F:CA:41:D2
X509v3 Authority Key Identifier:
keyid:53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/9bpfBQjgK3dw6rgeYBGUGC_KQdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.20.0/24
80.242.31.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:6d:89:e3:90:7b:f6:8c:16:11:80:0a:81:d9:75:58:59:0e:
ec:ce:5f:7d:f7:64:d2:f2:ea:a7:5a:a1:74:cf:7a:fa:25:15:
ba:a9:18:61:75:ec:77:b6:8c:c5:19:ff:2a:10:c9:fe:f2:f7:
c6:96:56:a6:a2:81:95:07:9c:4e:ea:e7:08:86:45:e9:a9:2d:
91:80:50:c1:ab:a7:ec:76:ce:ba:ff:6f:c2:4f:cd:c7:d6:db:
00:67:ac:fc:87:db:b9:50:8e:11:53:6f:26:86:1e:d7:d1:55:
32:9e:a2:05:9b:10:e1:92:c7:cd:2e:7d:19:66:b3:73:1d:ef:
10:5f:6c:78:b0:55:cf:23:ec:63:0a:7f:01:d9:42:ff:10:46:
85:9a:08:d2:31:59:24:c9:b4:a3:1b:de:f9:07:b2:84:2c:fe:
37:cd:2e:d5:31:24:d8:30:67:ab:95:50:13:f7:62:cb:09:1d:
5c:13:2f:f9:a3:0a:c1:f1:15:1c:2f:79:70:f9:51:1a:0e:03:
51:74:ca:b1:4d:a2:f9:5c:a8:2b:5c:6b:bc:18:5c:23:3b:ff:
d0:d8:d8:f6:f0:89:0d:18:b1:d6:57:58:85:3e:97:5d:3d:28:
18:74:30:8b:26:c2:45:fb:bf:1a:1a:ea:19:89:bf:95:7b:10:
4a:59:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:46:29 2025 by rpki-client