Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/Q9sEsE6z5GIibO-Hp9GTHh0HWPI.roa
File: Q9sEsE6z5GIibO-Hp9GTHh0HWPI.roa (raw, json)
Hash identifier: 9CRQgbCX8o+HtsLamnfC8peoHYzNHS3coeIlAetbEPU=
Subject key identifier: 43:DB:04:B0:4E:B3:E4:62:22:6C:EF:87:A7:D1:93:1E:1D:07:58:F2
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01942823355E2DD0D7ED8608A1D53F3591D7
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/Q9sEsE6z5GIibO-Hp9GTHh0HWPI.roa
Signing time: Thu 02 Jan 2025 17:49:43 +0000
ROA not before: Thu 02 Jan 2025 17:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 212.113.99.0/24 maxlen: 24
212.113.107.0/24 maxlen: 24
212.113.109.0/24 maxlen: 24
212.113.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:35:5e:2d:d0:d7:ed:86:08:a1:d5:3f:35:91:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 2 17:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43db04b04eb3e462226cef87a7d1931e1d0758f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:89:9f:6d:8d:85:86:0b:61:af:7d:48:bd:
ff:d2:8b:c6:ba:11:eb:4d:36:ff:68:c7:9e:95:7d:
18:1e:6f:ca:3a:ed:7d:3c:48:c6:2b:5f:0d:b7:a6:
86:a1:c7:39:94:30:8f:a3:99:2f:c8:9f:e8:31:ca:
2b:9c:b5:4c:9c:45:cd:9a:37:9e:47:15:1e:57:96:
39:3f:5d:e3:09:bd:61:6e:78:31:09:2b:cd:7f:a4:
0f:02:01:4c:ac:46:c6:15:07:12:59:e1:77:ed:ea:
60:29:b7:ad:ab:bb:08:30:05:57:1f:84:33:5b:f3:
9b:0c:e9:27:cd:fc:cb:fa:1a:ea:3d:5b:bd:07:b2:
b0:11:2f:f0:cd:92:9a:24:a8:70:ab:df:96:e6:f0:
b6:a9:70:01:59:fa:5f:e5:f4:f9:3d:bf:01:a1:65:
28:12:04:04:6c:52:47:40:ce:9a:b9:92:54:3b:08:
61:37:ff:f0:d4:b5:32:bf:25:ef:cf:74:0f:f2:9c:
4f:50:b8:54:30:13:aa:2b:9d:9c:82:5b:d3:ac:2e:
9e:70:0d:95:6c:e5:2f:c1:e6:c0:c6:3c:23:0f:73:
fe:47:4d:b4:b7:e8:e5:67:11:05:6b:1e:66:83:ec:
e9:86:e5:54:68:ec:29:55:50:5e:41:0f:e9:84:7d:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DB:04:B0:4E:B3:E4:62:22:6C:EF:87:A7:D1:93:1E:1D:07:58:F2
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/Q9sEsE6z5GIibO-Hp9GTHh0HWPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.99.0/24
212.113.107.0/24
212.113.109.0/24
212.113.112.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:be:64:81:ca:34:5a:45:7c:f7:20:e9:eb:6c:8b:71:49:e5:
80:ab:26:d8:da:89:23:ab:a0:44:be:39:34:9d:d5:55:1a:a0:
0d:80:25:3a:c5:ea:01:68:03:71:ac:09:f6:dd:26:13:e3:1d:
29:55:f5:2b:a2:2a:c0:35:a2:e7:00:3d:31:7b:7c:2c:47:49:
0a:c8:f9:40:ca:95:26:01:c1:4f:2d:80:cd:68:6f:a0:5a:38:
a4:18:87:5d:d0:03:a8:ab:b7:9d:b6:c8:7f:ee:78:3f:28:ae:
29:8b:3e:aa:2f:32:49:47:88:82:01:c4:b8:2b:85:b0:49:71:
6d:0c:9b:a7:32:8d:0e:c8:43:78:31:b4:b9:81:fd:9d:0b:0b:
8e:36:9f:58:26:e8:89:0b:06:9f:35:9d:c6:4c:7f:bc:ea:02:
12:66:47:c6:c8:79:5e:16:a3:84:f9:a1:99:c8:e6:e9:4a:f4:
8e:d2:50:e3:a3:31:93:39:4b:9f:c6:db:98:e0:10:80:65:27:
a3:82:49:38:5e:55:91:d0:8b:8d:cd:a0:63:27:88:14:e3:fa:
82:3f:76:d3:16:c9:82:8b:ef:88:93:04:a4:32:84:09:5b:4e:
1a:6b:c6:b0:77:da:b0:8b:5d:e1:19:fa:78:0b:99:12:42:94:
fc:a0:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:58 2025 by rpki-client