Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/9yzy9mXpMQ5QD-YDg0Uyb2L5Y-M.roa
File: 9yzy9mXpMQ5QD-YDg0Uyb2L5Y-M.roa (raw, json)
Hash identifier: DeAtCCdYZGVu5n0NKHrjXKiWtA5FfUQuXNktD8qHN04=
Subject key identifier: F7:2C:F2:F6:65:E9:31:0E:50:0F:E6:03:83:45:32:6F:62:F9:63:E3
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 019427484BE168F05776B397E621875B4CC4
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/9yzy9mXpMQ5QD-YDg0Uyb2L5Y-M.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 85.203.8.0/24 maxlen: 24
85.203.15.0/24 maxlen: 24
85.203.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4b:e1:68:f0:57:76:b3:97:e6:21:87:5b:4c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f72cf2f665e9310e500fe6038345326f62f963e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:6b:80:b2:4c:59:7b:1b:56:af:48:94:14:
d2:19:a1:19:16:8b:43:bb:8a:00:c7:40:18:2e:ab:
cb:47:1b:05:38:68:a0:4f:eb:70:7a:97:a1:16:2b:
b2:4c:5b:1c:f9:ae:b2:c8:2b:74:b3:df:c0:c8:4e:
71:a8:a5:f3:e5:79:3b:9c:e8:87:0f:28:bd:14:c3:
46:b2:47:74:4f:a1:fb:a5:b9:9f:85:cc:8e:98:f5:
5a:18:e5:53:6d:77:78:12:51:6c:e3:9c:26:0e:47:
77:d1:26:b6:f3:c6:f9:8f:ee:1b:d7:d6:bb:74:09:
93:4c:fd:52:cc:89:7d:a0:24:9a:0c:a1:46:92:35:
d1:e8:a4:9b:b1:14:5d:64:35:ce:59:3a:b5:bc:48:
27:2a:63:d2:87:d8:58:8b:01:5a:87:a0:20:2d:e1:
b4:30:8f:3a:5f:44:a6:77:21:b5:d4:a9:8e:19:c8:
ee:b6:74:8d:89:1f:86:ae:25:b7:84:8a:5c:8c:2f:
48:5d:ce:bd:e7:1c:0e:ed:84:2a:5e:93:81:73:26:
3d:0d:55:8f:55:ac:4c:0e:f7:2c:51:4a:0f:69:02:
0f:6f:0b:1c:ab:46:ca:de:a8:a7:0c:64:a7:1b:76:
e0:03:43:47:bf:8b:c0:9b:0b:db:03:24:60:dd:3e:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2C:F2:F6:65:E9:31:0E:50:0F:E6:03:83:45:32:6F:62:F9:63:E3
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/9yzy9mXpMQ5QD-YDg0Uyb2L5Y-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.8.0/24
85.203.15.0/24
85.203.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:36:37:10:fb:f7:7b:83:3d:69:f2:aa:08:ff:75:25:20:cb:
b6:91:38:34:9e:e2:9a:3b:c2:90:a4:bb:c2:29:5a:35:cd:91:
9c:10:d6:70:aa:b9:5f:47:d9:d1:21:91:ff:11:74:a9:e5:e0:
f2:40:26:4b:28:49:28:3d:80:77:44:67:18:e4:ad:7c:e9:a9:
15:00:32:84:9d:99:53:18:3e:59:f1:fa:f6:cc:23:6b:d6:d5:
da:62:82:52:a1:58:2e:05:6b:62:a5:ca:b9:f2:b5:3a:1f:29:
90:04:17:2d:49:1e:a4:cf:25:19:b3:b5:bb:ac:37:03:33:65:
23:93:43:24:7a:9e:7e:18:ef:60:04:60:ba:4d:5b:84:f8:39:
19:52:54:31:b9:00:03:3c:89:02:d2:a1:e5:6b:d5:ed:41:3b:
c9:7d:d9:30:cd:38:ca:8a:18:9d:30:f0:91:0f:4f:bb:98:7a:
a3:c9:85:c1:98:d4:68:7b:db:41:5b:c5:00:bb:a0:36:ed:51:
61:a8:3d:49:55:e3:63:03:19:83:d7:19:91:98:ad:9f:f9:7b:
f3:0c:16:87:bc:5b:c6:e6:9d:3e:a5:e0:a6:25:59:9c:ae:c8:
e3:79:c4:68:5d:69:1d:56:3a:78:b4:f2:17:1d:dd:07:45:33:
5c:11:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:03:02 2025 by rpki-client