Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/9-NB3ppe0EfeL2Nj37oF8VJ41t8.roa
File: 9-NB3ppe0EfeL2Nj37oF8VJ41t8.roa (raw, json)
Hash identifier: ZMKYndtOmSHpSKO5kfkDg42yZItGmF3H5NrIrUVaQPk=
Subject key identifier: F7:E3:41:DE:9A:5E:D0:47:DE:2F:63:63:DF:BA:05:F1:52:78:D6:DF
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 019487E5B946A9422CEDF2BFFA652E07CD1B
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/9-NB3ppe0EfeL2Nj37oF8VJ41t8.roa
Signing time: Tue 21 Jan 2025 08:06:06 +0000
ROA not before: Tue 21 Jan 2025 08:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31368
IP address blocks: 89.107.128.0/23 maxlen: 23
89.107.128.0/24 maxlen: 24
89.107.130.0/23 maxlen: 23
89.107.132.0/23 maxlen: 23
185.173.156.0/24 maxlen: 24
185.173.158.0/24 maxlen: 24
185.173.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:87:e5:b9:46:a9:42:2c:ed:f2:bf:fa:65:2e:07:cd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Jan 21 08:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7e341de9a5ed047de2f6363dfba05f15278d6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:9b:3c:49:c6:fb:84:e2:17:94:d7:74:97:
09:cc:7e:c4:04:a7:98:57:dc:27:5c:f6:c4:01:41:
23:dc:7b:45:9b:fc:32:84:f4:7d:fe:cb:ff:3a:a4:
9f:49:18:5b:e1:8c:d4:d1:a7:85:b7:6f:f7:72:bb:
a9:57:63:7e:25:0c:1b:cf:c8:bc:ef:56:7c:c2:20:
01:dd:22:14:2b:03:62:e2:74:c5:3b:23:ce:98:fb:
d6:69:28:8c:21:aa:10:40:db:bb:c4:3e:9a:e3:7a:
b7:eb:08:ba:74:fe:20:ec:4f:d0:9b:f2:bf:7f:f3:
47:f5:85:e4:79:84:ee:b3:86:cf:b8:f4:da:63:57:
69:d6:43:21:ff:7b:5b:c6:bb:e1:42:6e:dc:80:4b:
ee:db:9a:28:3d:61:83:b2:9a:74:88:4b:de:2e:fa:
68:65:d3:54:a9:57:b5:2d:ae:19:26:d7:c6:95:26:
a8:26:c5:e9:6e:05:a8:17:e3:da:1f:31:03:43:78:
e0:95:cd:2c:f8:e8:71:97:4b:f2:92:63:9f:cd:03:
56:b5:0b:41:02:a5:dc:91:6a:e1:62:6c:2a:47:0a:
f6:4d:cd:ff:7f:42:2f:d9:a8:3c:26:55:58:62:da:
ba:21:72:b8:32:18:b2:24:06:55:e9:41:60:fd:79:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E3:41:DE:9A:5E:D0:47:DE:2F:63:63:DF:BA:05:F1:52:78:D6:DF
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/9-NB3ppe0EfeL2Nj37oF8VJ41t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.128.0-89.107.133.255
185.173.156.0/24
185.173.158.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:24:a6:ce:f0:5c:f9:02:c0:2e:58:35:0a:79:8e:03:0d:40:
68:16:55:ba:f0:34:7c:23:17:0f:31:43:f4:c6:f9:ba:b4:61:
80:25:a7:17:53:62:30:6d:e2:d0:e7:37:92:69:af:6d:49:cb:
8e:f5:40:41:29:29:be:11:c4:99:e7:bc:8b:11:44:93:fb:fd:
1e:c4:0c:bc:e3:68:a0:f0:c6:12:38:90:62:1e:81:ca:9b:cb:
cb:6d:97:5d:ae:b7:93:aa:8c:c4:e3:96:68:54:4e:32:9c:6e:
88:25:2e:38:59:57:1b:fd:ba:19:77:a5:92:9c:e9:34:57:f9:
3d:2e:a5:4d:e3:94:6a:54:0c:5d:95:cb:77:a7:91:66:a1:ff:
55:f2:40:a0:9a:1f:5a:71:0d:09:12:0e:51:b5:80:9e:5b:27:
eb:01:18:d8:b7:f8:6d:f1:62:21:f7:c4:91:74:80:46:3d:86:
86:b4:3a:3b:11:c6:9c:50:fb:23:72:28:6c:5f:b5:d0:ce:3c:
7d:4d:96:70:66:25:f2:8c:96:e9:66:f6:09:77:48:fb:e3:f8:
60:35:eb:09:7e:6e:b0:5a:1f:65:8e:70:2e:cb:a6:4e:be:73:
47:fc:e6:11:4a:8d:23:0a:d1:81:86:88:d5:35:82:be:bb:18:
e8:81:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:55:09 2025 by rpki-client