Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/9kX4GrtqMRWRvdlXwe-ZIc9Ou2o.roa
File: 9kX4GrtqMRWRvdlXwe-ZIc9Ou2o.roa (raw, json)
Hash identifier: 6kYLXGHct4tBz4Kt7RTp0Yq24Dr5ZTh8EftVQx18Anw=
Subject key identifier: F6:45:F8:1A:BB:6A:31:15:91:BD:D9:57:C1:EF:99:21:CF:4E:BB:6A
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 019420D60B2BD706550A5B07D81D75E12EAD
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/9kX4GrtqMRWRvdlXwe-ZIc9Ou2o.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51278
IP address blocks: 195.226.217.0/24 maxlen: 24
2001:67c:278::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0b:2b:d7:06:55:0a:5b:07:d8:1d:75:e1:2e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f645f81abb6a311591bdd957c1ef9921cf4ebb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:48:8b:b6:96:f2:12:a9:7a:90:d3:1a:38:
ca:87:b0:b5:d2:b2:a6:9c:41:c0:ed:11:e7:b4:73:
de:c3:0d:cb:73:67:49:d0:07:41:b5:61:54:21:a5:
56:45:5a:dc:29:a6:e8:86:c1:82:8a:d5:b9:cf:48:
4a:d1:99:48:26:f3:12:6e:0a:2a:de:81:b4:80:a8:
b7:5b:9b:54:13:cf:9a:10:96:47:3c:1a:b1:49:02:
1f:16:29:ef:7f:73:0b:50:9c:13:0c:03:1b:c6:db:
8b:d5:7d:c8:f0:f6:ae:0d:c9:61:79:6a:9a:75:61:
3f:4d:d7:5a:77:bf:f7:6b:c4:96:8c:0c:e1:35:cb:
f6:78:d8:92:41:d4:0e:8f:ef:11:4c:53:49:7d:67:
a3:ce:0e:28:a4:e4:2f:6d:11:9b:08:cb:1c:e1:a9:
41:86:80:e3:92:d3:53:66:b2:11:49:a8:24:fb:ca:
27:6a:fc:6a:3f:86:65:6b:4a:ee:c0:68:97:77:fb:
81:5f:bb:79:38:16:53:4f:91:f0:0c:e7:21:ac:c3:
00:e7:b3:be:f4:38:33:71:2c:da:8b:bd:f9:49:6c:
c4:91:c1:60:90:0b:b6:df:2c:03:ac:95:8d:9c:e1:
2b:ad:1a:8a:55:e3:24:89:72:97:a1:9e:02:b2:ff:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:45:F8:1A:BB:6A:31:15:91:BD:D9:57:C1:EF:99:21:CF:4E:BB:6A
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/9kX4GrtqMRWRvdlXwe-ZIc9Ou2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.217.0/24
IPv6:
2001:67c:278::/48
Signature Algorithm: sha256WithRSAEncryption
9b:0b:41:b7:9e:37:89:f3:5e:3e:b6:28:4c:2d:23:9a:7e:5a:
2f:a5:de:d9:f6:f2:71:1a:91:4c:5f:c0:a3:fd:1d:35:91:55:
bc:1e:38:fa:72:9a:6a:4d:07:2a:f7:d1:f0:05:c8:08:9d:19:
ff:06:6f:78:1d:e7:c4:11:00:ca:01:bf:80:81:34:d7:03:88:
06:09:a0:e9:c1:43:ff:58:a9:ac:f9:1e:52:9f:9c:6d:e3:fb:
b2:a1:23:2a:f3:d3:59:a0:32:d1:60:bd:14:cd:35:33:e7:d2:
65:f0:b9:29:75:29:75:67:2e:02:6d:b4:00:3f:28:93:6a:3d:
aa:e0:3f:82:cc:0b:30:ed:a7:03:3e:61:41:5a:7e:c2:f1:00:
09:a8:7b:7f:45:a8:8b:9b:5e:34:24:81:83:ab:a7:1e:35:9b:
2e:4a:c6:7f:92:77:73:01:5c:18:b1:1f:8e:cc:b6:7d:22:e0:
14:f2:53:d2:95:49:76:6a:3e:45:88:a2:49:48:55:89:9d:78:
9e:db:7f:d2:44:de:06:90:19:97:23:ad:11:b1:0e:81:b2:9c:
3b:d3:06:4f:12:24:39:53:40:5c:fe:5e:34:c0:bc:7b:0a:9d:
40:4b:41:fa:fd:74:77:00:ff:5f:43:2e:1c:65:54:44:f5:c6:
06:ea:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:24 2025 by rpki-client