Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/9peR5n5QXeylxwcwhSYgLjf27HA.roa
File: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (raw, json)
Hash identifier: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=
Subject key identifier: F6:97:91:E6:7E:50:5D:EC:A5:C7:07:30:85:26:20:2E:37:F6:EC:70
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 0194252202B074A726EB8432A6E1CE22EA45
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/9peR5n5QXeylxwcwhSYgLjf27HA.roa
Signing time: Thu 02 Jan 2025 03:49:33 +0000
ROA not before: Thu 02 Jan 2025 03:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47426
IP address blocks: 195.43.157.0/24 maxlen: 24
2001:67c:348::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:02:b0:74:a7:26:eb:84:32:a6:e1:ce:22:ea:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Jan 2 03:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f69791e67e505deca5c707308526202e37f6ec70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:86:8d:9e:c2:e3:92:2a:a3:7b:97:71:f8:
82:dc:88:69:91:5a:89:68:28:1c:f5:05:ba:0c:6f:
61:6e:00:bc:df:fa:b3:b2:a2:a2:dd:77:4b:9a:84:
bf:44:81:3f:32:f9:8e:d3:9d:2b:a1:4b:10:46:54:
47:2d:cd:d2:78:c0:6e:00:0c:80:9e:08:83:ca:68:
2b:29:20:4e:0c:05:73:7d:f2:83:c4:d8:2e:11:73:
17:6f:2b:b6:f6:cc:c0:12:e8:0b:5f:5e:ee:a5:2e:
47:df:43:06:53:d4:18:d5:ed:3f:de:47:b2:c0:2d:
6a:4d:62:f0:7f:22:76:2a:e7:97:7a:6a:da:ae:67:
63:b9:06:a7:8f:a9:51:a5:61:ec:e2:1f:40:65:0b:
83:7d:90:62:5a:0d:f2:0c:67:a8:05:19:0f:37:df:
2d:eb:28:66:20:bb:1d:31:1b:37:21:79:f9:8e:f3:
3d:18:b2:ee:ef:6b:15:d3:e6:23:52:9e:19:ba:33:
55:37:ee:13:25:07:c2:5e:51:e1:4f:ae:6f:e2:38:
23:a9:b0:74:eb:83:1c:9a:2d:23:07:1c:86:8a:af:
68:b3:ab:12:c0:1e:37:3a:7a:94:d7:89:59:fa:e0:
db:d6:94:5a:8c:48:61:64:3a:78:15:fa:ea:06:e2:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:97:91:E6:7E:50:5D:EC:A5:C7:07:30:85:26:20:2E:37:F6:EC:70
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/9peR5n5QXeylxwcwhSYgLjf27HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.157.0/24
IPv6:
2001:67c:348::/48
Signature Algorithm: sha256WithRSAEncryption
4b:38:3c:fa:72:fe:5f:72:59:58:06:2b:0f:18:f6:09:69:a7:
ab:f0:c1:9f:5d:c6:19:75:56:db:07:40:3b:b7:54:f7:95:ef:
9a:aa:5c:6c:10:c3:71:41:99:76:b2:8f:0d:b8:1e:cb:0d:ff:
4d:2d:35:99:38:08:23:d7:15:0e:60:c3:d7:a0:5d:6e:1b:bc:
00:f0:05:c0:e3:5b:63:bd:d6:e7:6c:c0:3a:12:e0:7c:0c:6b:
1d:12:f6:d0:31:26:9d:b7:54:50:4c:65:c5:66:95:75:90:76:
5f:b7:7e:69:ea:e4:c9:1c:a6:fe:1a:38:33:d1:4c:06:9d:e3:
7f:01:5d:08:84:22:cf:51:01:5f:30:01:0d:2c:0d:82:01:5c:
1c:82:d2:c1:7b:ad:8a:73:a4:10:ee:08:79:32:c2:46:bc:5c:
a1:c8:ed:71:40:b7:c4:1f:8b:ba:14:da:16:80:69:8c:9f:d6:
1c:94:aa:e6:06:4a:47:23:d5:86:cd:c3:e2:90:8d:f9:09:f0:
81:a8:a3:7e:c5:31:36:3f:fb:97:c9:3d:3e:86:e2:cd:9d:c8:
34:25:8c:0c:c8:e9:fb:71:09:9e:28:93:8a:c7:ff:b1:17:37:
dd:f2:b2:06:74:4f:11:2f:bc:dd:db:2c:3e:2d:13:90:f9:0a:
44:29:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:44:24 2025 by rpki-client