Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/1-bzPiIr4uKzM54SlrYIo7KhZ5GU.roa
File: 1-bzPiIr4uKzM54SlrYIo7KhZ5GU.roa (raw, json)
Hash identifier: DDlYF6X7Zxo/Lw4zoc2BnAeUjIBMFJl/7uSpuLTlu7I=
Subject key identifier: F9:BC:CF:88:8A:F8:B8:AC:CC:E7:84:A5:AD:82:28:EC:A8:59:E4:65
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0195064112BFF9F098625B852AFD13E49A7B
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/1-bzPiIr4uKzM54SlrYIo7KhZ5GU.roa
Signing time: Fri 14 Feb 2025 20:58:02 +0000
ROA not before: Fri 14 Feb 2025 20:58:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 185.9.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:06:41:12:bf:f9:f0:98:62:5b:85:2a:fd:13:e4:9a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Feb 14 20:58:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9bccf888af8b8accce784a5ad8228eca859e465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:fb:31:93:bf:71:82:3d:03:14:d5:16:8f:
42:07:13:1a:d6:15:dd:d6:98:25:a6:58:77:e5:60:
e5:13:88:c4:b6:1f:2c:b7:fd:ea:ff:e1:76:b3:ce:
83:dc:06:ca:58:ae:65:8c:8b:85:0a:46:c8:da:f1:
99:d9:ce:9a:2d:48:15:28:d8:42:c5:0a:73:07:9a:
dd:60:85:6e:0f:7c:8d:30:f2:58:cb:39:30:65:14:
82:3f:00:29:51:9a:5a:9e:40:22:35:31:96:e5:a6:
25:6f:22:ee:86:3b:aa:93:f9:63:d7:1b:50:fc:1a:
6d:98:99:ce:b1:7b:ed:68:4d:90:99:c2:19:1d:e7:
5c:dd:f1:2a:e1:e5:46:3b:01:37:ae:20:c5:f4:f8:
37:50:09:6f:1b:a4:93:32:f0:ca:70:5a:93:1b:c1:
90:28:f1:0c:95:27:da:bc:08:e1:78:c7:89:c8:7a:
e3:e1:f3:96:fb:ae:13:f8:c0:cd:63:5a:30:4c:d3:
a8:0d:c9:3b:16:00:3d:23:a8:09:38:57:e0:1f:c5:
d3:75:31:73:b6:b0:91:e2:91:c5:03:87:c4:64:a6:
b9:20:ee:e9:26:ad:19:ac:ec:42:0b:0a:74:81:1a:
bb:28:e9:d9:99:08:0b:1c:8a:23:75:7c:1d:e6:40:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BC:CF:88:8A:F8:B8:AC:CC:E7:84:A5:AD:82:28:EC:A8:59:E4:65
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/1-bzPiIr4uKzM54SlrYIo7KhZ5GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ec:89:6f:96:8c:26:14:e4:89:b6:ce:4b:e4:99:68:6c:62:
6f:7b:cd:6c:59:da:6c:ed:2c:cc:93:c3:92:eb:69:75:67:a7:
89:3a:cb:fe:c9:65:9e:31:c2:0a:f7:d1:a4:e0:08:c1:57:3e:
1b:2c:47:da:22:73:90:9a:c9:61:16:c4:28:7f:a8:ec:28:f2:
57:10:cb:92:7a:3a:8d:f6:f2:c9:e0:70:39:4f:ad:e8:1c:7e:
20:df:52:5e:fa:0b:37:00:ff:b5:d0:45:3b:87:29:e1:d7:03:
d5:d5:30:ac:93:2f:8f:8e:80:46:1c:05:a4:94:5d:08:a7:86:
1b:bf:56:3e:75:51:fe:02:a2:e5:e4:af:1c:76:ff:4d:ed:af:
b4:f6:8f:f8:c0:fa:eb:17:bc:e7:ae:74:20:72:fc:79:99:e5:
34:b9:8d:67:42:38:48:44:d5:53:e1:7b:12:96:5f:4f:f3:34:
ae:8d:c4:6a:87:11:74:89:8c:34:6f:5f:8e:49:17:d5:a5:db:
74:af:48:2e:12:dc:ac:a6:cb:6f:3e:60:67:f9:5d:ef:eb:79:
dd:3d:20:99:d6:4b:d0:57:28:20:f4:84:88:e3:89:7b:48:1c:
f0:4f:09:0d:be:7a:9c:6c:fe:23:21:60:13:18:04:e1:f9:02:
76:12:90:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:21:57 2025 by rpki-client