Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/0F9nBENY-UGAf9siVdeKkhNemEA.roa
File: 0F9nBENY-UGAf9siVdeKkhNemEA.roa (raw, json)
Hash identifier: ahT3AXA9+fi05hmBd2SWaBzmpvPk7KSVrdjQyvMBa08=
Subject key identifier: D0:5F:67:04:43:58:F9:41:80:7F:DB:22:55:D7:8A:92:13:5E:98:40
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D25E15418EE2CB4538D78A0ECAFF
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/0F9nBENY-UGAf9siVdeKkhNemEA.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200815
IP address blocks: 212.243.60.0/24 maxlen: 24
212.243.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d2:5e:15:41:8e:e2:cb:45:38:d7:8a:0e:ca:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d05f67044358f941807fdb2255d78a92135e9840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:e5:10:d0:27:55:4f:d2:6d:95:a0:59:37:
70:10:af:25:ef:c8:95:9d:2c:34:28:2b:d8:c7:9c:
1c:52:e2:4b:9c:d2:62:66:a3:93:99:43:fd:e2:ad:
29:a6:46:5c:98:a2:33:06:3b:a5:3d:f7:26:ae:5a:
18:7b:45:61:6f:72:7d:c1:8e:a0:3c:9b:92:5d:83:
3e:d5:23:21:be:8b:07:69:da:c2:e1:4c:c3:ed:a2:
72:74:b0:2e:51:88:50:bd:d2:a6:7f:9f:0b:50:77:
93:b3:aa:50:5a:f9:98:f8:37:de:c2:06:59:b1:c6:
c7:58:bd:25:cb:3f:c4:fd:4a:5e:24:6c:4c:38:90:
2a:8a:63:2d:30:36:24:0e:11:c2:c1:a1:81:c6:69:
8f:34:14:0d:80:82:a5:f4:74:1e:4d:30:9f:68:0a:
1b:75:28:3f:8d:9a:0d:c7:9e:75:53:64:5b:c0:97:
32:d9:72:e5:29:00:78:ef:0d:36:9a:8d:ad:6a:95:
5c:e6:90:e8:2c:c8:fd:72:9c:0c:90:7f:e0:48:a1:
95:9e:e7:98:f0:72:17:dd:84:e4:fc:a2:4b:5c:9e:
4f:f7:b9:fd:8b:7f:66:09:75:a9:6e:58:09:ba:47:
dc:4b:22:5f:70:62:6c:b9:57:56:6f:06:3c:bc:69:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5F:67:04:43:58:F9:41:80:7F:DB:22:55:D7:8A:92:13:5E:98:40
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/0F9nBENY-UGAf9siVdeKkhNemEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.60.0/24
212.243.66.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b5:14:ac:aa:38:1a:82:90:36:83:ad:a6:38:2a:76:53:e7:
27:07:21:30:0b:0e:bc:6d:50:c6:f2:34:66:f1:45:1f:26:0c:
73:c1:8f:97:e4:47:9d:4c:5b:92:0e:1f:a6:ac:07:39:63:6d:
c8:19:63:8c:a3:e7:bb:1d:21:35:53:bc:5c:40:ba:b7:1a:58:
b7:94:65:3e:a4:7f:12:a0:5d:a7:78:74:8d:e1:e3:ae:9b:62:
b8:76:bf:58:c2:30:0a:cb:68:d7:42:35:50:7f:b9:cc:01:0e:
7a:2f:c1:90:48:d6:ee:ea:f7:c7:35:8d:87:8f:61:b8:e8:4e:
e4:23:53:fb:df:7b:f1:4a:1b:ca:a1:63:fe:e2:ef:eb:ab:18:
d9:8a:40:86:28:64:0a:82:f8:f2:0e:75:2a:69:32:7a:51:43:
eb:9b:05:94:3e:fe:ab:79:2f:48:4b:77:cd:37:6b:34:57:b8:
cb:51:48:d5:32:05:26:bd:4b:78:50:02:b8:d5:a6:25:15:16:
f2:5b:42:84:62:7d:9f:42:5e:22:0f:f6:63:93:4a:c5:05:27:
3f:c4:0c:b0:68:7f:4c:7e:34:2d:12:53:fd:69:86:92:b6:f6:
d1:86:5d:98:d1:7b:46:c4:71:bb:df:8b:b6:76:d9:6e:9c:90:
45:55:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:44:17 2025 by rpki-client