Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa
File: 9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa (raw, json)
Hash identifier: tm7XoNOtROJxqpd0QLHAYI1n3J02MIzjMbI9J6S5daM=
Subject key identifier: F5:4B:33:E6:68:CB:EC:4A:A0:D8:12:9D:94:A9:BA:D7:FA:86:5C:0D
Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial: 0194266B4ED84404AA8AD7D79E71C174383E
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa
Signing time: Thu 02 Jan 2025 09:49:14 +0000
ROA not before: Thu 02 Jan 2025 09:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211246
IP address blocks: 185.232.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4e:d8:44:04:aa:8a:d7:d7:9e:71:c1:74:38:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Validity
Not Before: Jan 2 09:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f54b33e668cbec4aa0d8129d94a9bad7fa865c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:ca:8d:42:4a:19:49:47:a7:af:4e:12:3b:
05:f4:74:4a:16:e3:b3:04:ff:ee:98:67:ff:28:4a:
aa:99:68:0e:77:21:e0:22:9d:6e:96:51:85:07:ef:
ba:70:0f:05:d9:de:32:f8:41:ca:45:4e:4a:b5:16:
16:78:be:50:fd:16:bc:45:29:09:e0:0a:9f:fc:a4:
44:9d:5d:fa:5c:86:f1:d3:54:f5:2f:db:4a:e2:c6:
02:ff:ad:91:97:6f:9e:a7:d6:b3:b7:cd:d2:3d:a0:
bf:e7:26:2a:f2:ba:4d:ad:93:0f:fb:52:07:5e:cb:
dd:53:60:d2:85:64:4e:09:cf:2f:27:f4:fc:22:5e:
1e:25:9d:36:3c:1b:f5:46:59:a1:43:f6:40:9c:6a:
35:51:1e:cf:7f:2a:fb:ee:11:67:cf:8b:64:d9:15:
15:8c:8e:34:13:e0:5d:d2:86:ef:13:ce:72:ba:4c:
8d:7f:e5:f8:12:be:4a:2d:3e:02:e3:a9:a5:08:72:
52:cd:bf:e9:53:0e:b4:67:ea:5c:d7:9f:49:d2:3c:
22:22:8f:59:72:55:ff:94:e6:69:0e:ef:ac:dd:8d:
a6:11:b3:d7:a0:e9:68:74:4e:1a:c2:df:9b:23:fe:
f6:d4:1d:fa:ba:ba:af:63:c1:48:1c:53:fe:80:5f:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4B:33:E6:68:CB:EC:4A:A0:D8:12:9D:94:A9:BA:D7:FA:86:5C:0D
X509v3 Authority Key Identifier:
keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3c:6a:93:82:f4:ab:de:63:ed:f7:6c:e3:4b:25:d4:75:bb:
bd:71:c9:90:13:f0:c1:20:d8:51:80:9a:95:49:f2:02:47:c6:
c5:bb:83:da:e3:cb:f8:a4:a2:d3:3e:30:c2:bd:fb:27:2c:79:
e1:e3:47:9a:6e:eb:f7:0f:72:86:f7:1e:6c:f1:2c:fe:75:af:
1a:1c:79:87:7f:f2:d4:34:4c:f2:ce:c7:dc:de:9d:dd:1f:b0:
ac:29:ba:00:19:b7:78:bf:ef:a7:75:67:ee:55:ce:4c:53:ed:
29:28:6b:6b:08:e9:18:c0:42:19:2b:90:d2:2d:c2:46:bf:cf:
25:a2:3d:df:ec:da:08:8b:b7:26:34:4e:9e:7e:e6:6a:4b:e0:
fd:9f:20:9a:37:10:18:74:f2:a5:c6:78:f9:3f:1d:c0:2e:46:
1e:26:a2:a1:33:13:1e:2b:68:45:67:1d:06:d4:4a:9f:9b:a5:
dd:2d:5e:9b:08:1b:6d:92:72:54:9f:dc:c0:10:88:d7:61:d1:
56:e6:26:be:6c:3b:ba:4d:fd:ff:c3:8f:74:d2:d9:7e:95:2f:
d7:e6:4c:d3:ae:83:9a:5c:d5:44:b9:36:cf:4f:00:f8:aa:20:
9d:d0:3c:6f:0e:d3:c1:c8:1a:8e:61:4e:f6:3a:80:ef:03:bb:
34:49:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:21 2025 by rpki-client