Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa
File: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (raw, json)
Hash identifier: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=
Subject key identifier: BF:D1:34:BD:C0:0A:F1:41:FE:93:C8:F8:9D:7D:95:E0:6D:E1:64:31
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 01941F8C59E659AA7D7C34E68C509DEC15B0
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9145
IP address blocks: 194.31.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:59:e6:59:aa:7d:7c:34:e6:8c:50:9d:ec:15:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfd134bdc00af141fe93c8f89d7d95e06de16431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:fa:27:c2:66:82:00:df:fe:47:e1:7c:03:
21:a1:9d:16:a3:d6:e7:0f:eb:8e:38:0d:35:fb:b6:
8f:66:76:92:b9:55:c0:90:72:c5:62:57:9a:31:2c:
b8:3d:2f:15:d6:15:ab:63:e3:89:02:3b:df:e4:47:
53:ce:0c:f9:01:23:fe:0c:5a:24:d2:99:fb:b7:a0:
ec:23:ec:16:91:ea:b6:89:d4:83:f1:b5:d3:dc:e7:
d9:de:b7:65:1d:ce:cc:d6:8f:a2:d9:ab:5c:eb:62:
42:43:85:03:17:f2:52:84:a1:ce:62:3b:e6:f6:d5:
73:f3:49:de:dc:3d:61:25:6d:7d:de:ab:84:12:d1:
d0:27:c7:68:b6:42:90:6d:e7:4f:b9:4e:d8:a0:47:
ea:78:fa:0f:a0:b7:92:ba:f2:82:e8:b6:50:40:38:
86:0e:b2:d3:af:5c:9f:9f:ef:30:8c:00:dd:3b:ba:
9e:92:82:64:a8:34:b1:16:a8:f5:47:57:54:41:b9:
06:8c:ff:13:ea:7e:f1:6f:b7:3b:a7:12:83:e1:2b:
ae:40:37:6a:34:e0:96:6a:44:a3:6f:e0:1a:09:68:
7a:fc:7e:98:70:83:23:dc:31:94:8b:5d:61:67:f3:
91:82:63:e4:fd:35:37:2a:8f:28:80:80:e3:d3:83:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D1:34:BD:C0:0A:F1:41:FE:93:C8:F8:9D:7D:95:E0:6D:E1:64:31
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.94.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:1b:d0:c7:73:f4:62:19:cf:b3:0e:d5:fa:d9:0d:1c:a0:c0:
d1:f4:ca:a1:d4:49:16:e1:92:11:34:fc:1a:a2:5b:d2:bd:67:
75:1b:b6:a9:b4:d9:a7:01:fe:9e:d4:4a:ad:e6:45:eb:25:df:
69:3b:15:c5:fe:b9:18:8c:05:68:a0:29:6e:17:97:f8:64:12:
c6:55:1f:18:e3:df:9a:7a:24:ff:66:c0:f8:49:b0:0a:7e:b3:
0e:27:b6:cb:68:d2:e2:fd:eb:73:83:b7:f9:a8:78:70:19:f4:
64:7c:47:a1:a0:7c:16:5d:5a:c8:ce:c0:7e:9c:62:4a:bc:32:
5f:ad:98:ad:ab:20:1f:53:be:53:e3:27:f1:1d:8b:19:11:e6:
8d:6e:48:6b:1f:b9:b9:7e:02:a7:7b:8f:4b:8e:10:a7:41:b4:
48:92:ac:ee:40:b8:82:4a:4b:8a:6d:bc:45:41:ef:19:f8:0e:
60:95:43:44:b2:48:b0:8b:d7:15:52:57:95:f0:94:28:1e:f4:
2d:75:fe:b5:2a:73:5b:70:6f:05:26:5a:ce:86:29:47:da:ca:
ab:b1:77:46:89:35:93:a7:8e:ce:9c:59:c2:d3:41:26:ba:05:
3e:c6:fc:8c:6e:00:46:ae:a0:67:48:c2:ea:e8:50:9e:d2:4f:
c6:7c:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:20:56 2025 by rpki-client