Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/9_JhIw-bjUbjcsXjaRSJlNBXD-s.roa
File: 9_JhIw-bjUbjcsXjaRSJlNBXD-s.roa (raw, json)
Hash identifier: Hm59eKak2mRBLnGzAb7+vw2g+CNCplTmTg9aukFT0JE=
Subject key identifier: F7:F2:61:23:0F:9B:8D:46:E3:72:C5:E3:69:14:89:94:D0:57:0F:EB
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0194236A4BA7296B158D3F3E7CA0B2C4326D
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/9_JhIw-bjUbjcsXjaRSJlNBXD-s.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212396
IP address blocks: 45.84.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4b:a7:29:6b:15:8d:3f:3e:7c:a0:b2:c4:32:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7f261230f9b8d46e372c5e369148994d0570feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:a6:92:48:3a:e1:a4:ac:aa:08:37:d1:a1:
3d:35:70:64:46:42:31:93:34:ab:01:e3:b4:16:40:
62:1b:10:79:29:1f:a1:de:55:bb:37:c6:16:bd:5c:
da:df:3b:50:dc:7f:c8:73:58:c4:4d:38:4f:31:5f:
19:5c:7c:4b:c0:6d:db:ac:93:27:77:b3:53:5b:33:
42:97:1f:ac:9a:a5:45:b4:19:27:ed:ca:98:e3:04:
d2:25:ed:15:28:91:db:fb:82:c7:b0:56:22:60:9b:
65:e8:f2:e0:14:68:22:62:a0:65:9d:39:2a:b0:fb:
44:28:41:a5:c8:a9:35:58:8b:9e:5c:94:96:b8:e6:
67:1e:ee:2f:3f:e4:2d:d3:b2:f1:b2:0f:db:d7:66:
55:d0:59:dc:b5:f5:0e:ae:83:bb:36:0a:a5:cf:94:
be:c3:22:f3:15:4c:6c:97:b0:75:2e:be:23:32:a9:
20:b5:7c:55:6b:0f:36:25:63:86:30:b2:bc:69:c1:
b7:ac:05:f9:fc:04:a3:fa:19:d4:99:d3:da:88:ce:
53:25:a3:28:e1:2c:ca:ad:fb:c0:40:dc:6c:b5:37:
bc:d7:82:f8:02:01:ef:8b:d2:7c:e0:33:52:31:df:
fc:9e:66:4b:7c:c6:2c:2c:c7:b9:3d:41:e2:98:e4:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F2:61:23:0F:9B:8D:46:E3:72:C5:E3:69:14:89:94:D0:57:0F:EB
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/9_JhIw-bjUbjcsXjaRSJlNBXD-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.57.0/24
Signature Algorithm: sha256WithRSAEncryption
96:36:aa:15:f3:f7:21:5b:31:13:84:1b:b8:03:2e:ba:e1:9a:
d9:ef:a6:e7:a7:28:2c:48:91:2c:11:bc:cb:1f:5e:8d:7d:de:
84:21:da:1c:4c:86:ac:8f:93:11:1b:6c:fc:cb:f7:c5:3e:c1:
2b:67:24:8f:8a:ad:61:8a:63:f6:5f:b0:29:26:d1:df:e5:a7:
d5:09:b2:25:1d:c8:9e:bb:90:04:92:69:b7:63:16:ad:c7:56:
9d:61:23:ff:79:ad:07:25:c1:c4:27:9e:b6:3a:71:fb:76:28:
c3:76:b0:89:1e:33:3d:39:56:e0:1a:50:38:76:a8:90:b7:49:
18:b5:1a:a8:92:91:01:ed:84:88:d5:03:f8:d7:51:3a:50:2f:
fc:c6:22:9e:14:03:33:20:c0:74:95:93:ac:26:d1:a5:5a:d1:
84:bc:5c:79:61:22:25:24:62:5d:5f:b5:44:93:b8:34:50:1e:
72:c0:2c:10:02:f6:07:11:ad:56:1f:ab:13:6c:3f:fa:10:20:
7f:ab:2b:5a:28:75:f5:a4:05:a0:2f:df:9f:b1:2a:67:a0:f6:
de:b8:95:9d:8f:31:08:10:4f:c3:87:39:34:a5:8b:32:f5:23:
4e:fb:22:f1:d4:54:3b:ce:c1:e5:f4:28:36:87:9c:b4:2e:32:
4c:0c:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:13 2025 by rpki-client