Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa
File: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (raw, json)
Hash identifier: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=
Subject key identifier: F5:3F:8A:D5:09:B7:6F:C8:29:5E:0C:FD:CC:94:47:AD:EC:93:BE:03
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 019423D6F653DB611DCD43BCAA29421F9FFE
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa
Signing time: Wed 01 Jan 2025 21:47:57 +0000
ROA not before: Wed 01 Jan 2025 21:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 87.238.241.0/24 maxlen: 24
87.238.242.0/24 maxlen: 24
87.238.243.0/24 maxlen: 24
87.238.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f6:53:db:61:1d:cd:43:bc:aa:29:42:1f:9f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f53f8ad509b76fc8295e0cfdcc9447adec93be03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4c:8e:44:78:bb:8e:b6:54:72:f6:6e:5a:12:
2c:27:08:9e:75:b3:cd:00:da:00:a3:98:26:f0:43:
1e:e0:15:dc:ea:2d:9d:b4:4f:1f:10:fb:c7:1e:69:
b7:7e:d1:02:01:cd:a9:3c:c5:b2:01:c0:43:86:5f:
76:da:6c:8a:51:dd:1d:fd:8c:51:f7:d2:8a:d6:43:
d1:fe:b7:e9:29:0d:30:ad:74:de:f4:5e:56:bd:c6:
5b:05:b5:54:50:56:1f:8b:67:f4:51:55:35:c8:99:
e3:99:b0:df:66:1a:12:9e:99:61:8a:85:da:69:74:
bd:65:9d:82:4d:a2:d6:13:da:c3:24:ce:af:be:ef:
12:ed:af:47:f5:4f:be:1a:a7:74:93:13:46:27:85:
6a:39:5c:e5:c3:6c:98:c0:a4:f2:b5:df:c6:bd:04:
c6:2f:d0:6a:92:fe:26:61:ae:7a:9e:42:91:69:48:
51:4a:82:65:9e:d1:08:a8:13:27:5e:ae:2a:c7:da:
de:66:37:16:4c:56:ab:b3:a0:a3:9e:57:52:36:ae:
04:5e:61:9f:36:5c:07:de:85:20:50:4f:57:1f:82:
cb:cd:e6:eb:fa:b4:dd:c4:55:76:01:e0:d7:d2:41:
9d:80:f3:e1:ef:23:fc:b3:71:1a:39:51:b4:8c:0a:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3F:8A:D5:09:B7:6F:C8:29:5E:0C:FD:CC:94:47:AD:EC:93:BE:03
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.241.0-87.238.245.255
Signature Algorithm: sha256WithRSAEncryption
97:3c:4b:78:f1:40:c8:7f:39:1b:1e:d4:80:1a:f6:f5:86:cd:
83:b4:63:c9:19:3a:1e:7d:f1:37:10:46:6c:9e:75:a6:1a:6e:
54:38:2b:ee:59:d0:e7:54:99:b9:16:89:7b:86:9f:a7:26:54:
70:a4:17:89:21:6d:18:6b:9b:a2:b3:71:d1:c5:7d:cd:79:0e:
70:ca:da:3d:59:ac:de:fa:4f:27:a1:70:e0:14:f4:cf:50:d2:
6d:05:a3:b6:f6:54:09:89:51:c3:1e:b4:81:ce:31:d1:d4:ad:
fc:2b:da:50:8e:16:fb:a0:be:8d:3e:a7:18:9f:f4:60:a2:c2:
ae:d2:50:f9:f7:f6:9b:2f:e5:22:10:2b:96:70:a2:5e:08:6b:
d9:f3:de:2f:b9:a9:c8:d9:08:65:d1:86:d4:5b:48:84:67:37:
22:0d:2f:b5:95:1c:d0:5e:ad:38:5b:97:d5:9f:33:73:4f:4a:
94:5e:43:07:08:d4:73:ba:ba:b9:0e:57:f5:07:13:b9:24:c4:
a8:98:5a:bd:f2:86:ed:15:60:18:7a:bc:92:19:38:2c:bd:98:
1c:6c:61:66:fe:42:df:69:03:eb:05:52:c0:76:4c:77:54:dd:
02:21:75:db:6b:9e:07:e5:cf:f7:c9:0c:3a:cd:4b:cc:d7:58:
f7:62:8f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:38 2025 by rpki-client