Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/9jS2v21J95xARBtQOtdTT0EtYBQ.roa
File: 9jS2v21J95xARBtQOtdTT0EtYBQ.roa (raw, json)
Hash identifier: BeiYvaVP67aUM+eVkzjpflxlaHwkNmiJmUTQZAVqkOQ=
Subject key identifier: F6:34:B6:BF:6D:49:F7:9C:40:44:1B:50:3A:D7:53:4F:41:2D:60:14
Certificate issuer: /CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd
Certificate serial: 0195F628477A8168237BB8AE61D87A8DCD79
Authority key identifier: 77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/9jS2v21J95xARBtQOtdTT0EtYBQ.roa
Signing time: Wed 02 Apr 2025 10:59:49 +0000
ROA not before: Wed 02 Apr 2025 10:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60277
IP address blocks: 185.32.252.0/22 maxlen: 22
185.111.112.0/22 maxlen: 22
185.190.204.0/22 maxlen: 22
193.57.206.0/23 maxlen: 23
193.57.216.0/23 maxlen: 23
2a00:ca20::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:28:47:7a:81:68:23:7b:b8:ae:61:d8:7a:8d:cd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd
Validity
Not Before: Apr 2 10:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f634b6bf6d49f79c40441b503ad7534f412d6014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c5:b3:32:10:19:09:e9:a3:e9:85:6b:28:5a:
43:69:69:6e:6d:dd:41:2e:e0:16:3f:6a:e9:1e:c4:
e7:5f:a4:97:f9:bc:96:30:79:d4:33:66:89:0d:94:
d1:75:b8:3b:6d:09:4d:06:a6:ad:e0:fb:35:14:86:
0a:9b:ac:ee:7e:43:9c:b5:76:0f:f9:11:ef:52:ed:
a4:96:00:38:92:27:b3:c5:51:6a:38:d9:ad:b4:fb:
11:61:c6:eb:d0:6b:82:da:a8:cf:f8:ee:ea:aa:fe:
92:05:27:1e:ad:96:bc:6c:ff:18:60:b5:83:0f:da:
42:9c:47:45:f4:8d:e2:d0:51:eb:56:9a:f0:57:1d:
52:22:72:18:9b:2d:f7:2b:d0:6f:b6:46:1a:3a:27:
5d:66:2d:37:b0:1c:65:1c:86:0e:ff:bb:c1:1d:93:
d7:fa:ff:c7:08:4a:4e:05:59:dc:0c:8e:1a:34:d8:
08:86:6a:b4:b9:15:83:bb:53:91:e5:0e:77:b8:97:
a0:c0:f7:ee:2a:c5:92:fe:15:9c:b9:71:f4:f8:e8:
6b:55:80:3d:37:5a:b4:d4:36:30:ff:e6:c4:56:9c:
d9:cd:2c:1f:f2:bd:24:f4:af:9d:77:7d:71:be:3f:
4d:c0:79:9d:00:2e:24:49:9f:9b:04:50:0e:cd:68:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:34:B6:BF:6D:49:F7:9C:40:44:1B:50:3A:D7:53:4F:41:2D:60:14
X509v3 Authority Key Identifier:
keyid:77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/9jS2v21J95xARBtQOtdTT0EtYBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.252.0/22
185.111.112.0/22
185.190.204.0/22
193.57.206.0/23
193.57.216.0/23
IPv6:
2a00:ca20::/29
Signature Algorithm: sha256WithRSAEncryption
55:43:f1:15:1e:8d:a7:12:21:e9:25:17:f9:f4:ac:d4:84:d0:
a0:aa:ce:31:00:0c:c2:71:8e:bd:36:ba:20:2f:4c:88:2b:20:
54:c7:c4:5c:88:ae:ce:b1:3f:67:b9:e5:a2:ff:9d:9f:52:60:
8b:05:a8:4c:bb:9c:98:a8:6f:89:43:0b:3f:5c:7d:15:04:17:
03:19:ab:26:30:65:32:43:63:06:97:69:78:f2:62:30:1c:a5:
c3:0a:55:b9:75:48:42:ac:0f:55:30:1b:f8:e3:ef:4a:48:09:
91:5f:f3:a1:79:ea:0f:bb:ee:ba:d3:b7:27:7b:5f:09:69:b5:
74:76:8e:3c:83:f1:79:42:ee:89:e2:19:e9:fd:c7:3a:b7:48:
3b:38:30:13:86:6e:fd:8b:2e:49:e2:17:29:66:31:15:38:94:
b9:70:cf:95:b1:27:14:b6:f6:2b:00:05:11:55:f7:9f:93:c6:
19:19:44:1c:43:90:28:fc:24:88:c1:d9:b0:43:a1:e5:6f:0d:
5c:fa:de:bd:75:2a:9b:ca:6d:02:b2:95:b1:32:1b:f0:52:08:
38:f0:34:a1:a7:3c:b9:60:bd:9a:93:ac:0c:5b:26:23:dd:41:
3e:0b:8f:26:c3:76:67:c8:91:83:15:4f:c1:3b:60:92:5b:49:
a2:8a:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:53:59 2025 by rpki-client