Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/09GZnkjxGgvDG06ywyi1ACESnn0.roa
File: 09GZnkjxGgvDG06ywyi1ACESnn0.roa (raw, json)
Hash identifier: OQnXj0uw0soAxv8LVHnbpIU4f3mVwSfY0iAdMRyXpbU=
Subject key identifier: D3:D1:99:9E:48:F1:1A:0B:C3:1B:4E:B2:C3:28:B5:00:21:12:9E:7D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746A1009859C106AC7154171A87542D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/09GZnkjxGgvDG06ywyi1ACESnn0.roa
Signing time: Thu 02 Jan 2025 13:48:47 +0000
ROA not before: Thu 02 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197428
IP address blocks: 212.68.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:a1:00:98:59:c1:06:ac:71:54:17:1a:87:54:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3d1999e48f11a0bc31b4eb2c328b50021129e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:8e:bb:ab:ad:44:49:34:e1:39:f5:31:84:
f0:82:a5:f5:a6:2b:90:bb:63:dd:ad:e7:af:50:85:
8b:a5:9b:ac:1b:fe:55:98:16:95:f3:05:74:d0:99:
46:34:a6:e6:0e:f7:1d:62:b6:14:7b:0b:66:db:d9:
f9:84:53:32:29:be:ea:94:1a:bd:c2:53:ee:49:f4:
a2:5e:f1:21:b4:10:2d:0b:5c:38:f3:37:e2:d1:c8:
33:79:53:3a:81:48:75:84:d2:28:4b:79:17:1c:4e:
c8:07:0c:b5:49:ae:4f:fa:09:37:9a:d7:92:61:bf:
13:9f:12:ed:9e:96:d1:66:f3:c5:c2:36:10:d0:76:
d6:b5:9a:7a:5c:d9:44:23:84:c3:99:4a:48:ae:c9:
a8:d5:9c:40:54:bf:1e:a1:48:f7:f6:b6:93:38:ea:
e5:90:85:60:be:03:3f:82:ce:eb:b8:a2:ca:55:cb:
84:b4:59:09:a7:95:b7:6f:9a:34:7f:c4:f8:98:8e:
9e:79:43:71:9f:15:20:11:49:53:a5:1d:18:77:83:
53:99:be:96:1b:12:76:35:9a:86:0f:3a:9d:1a:2f:
36:68:df:d6:68:b4:19:c1:14:6b:03:76:10:ed:f3:
c5:58:3f:c6:42:a9:4a:5c:de:82:02:ef:3b:28:05:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:99:9E:48:F1:1A:0B:C3:1B:4E:B2:C3:28:B5:00:21:12:9E:7D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/09GZnkjxGgvDG06ywyi1ACESnn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.48.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e7:ce:da:f3:48:7b:de:af:20:1b:2a:da:95:ad:30:f0:99:
99:1f:0b:be:2a:7f:c3:87:ea:eb:f4:a5:6c:e7:ed:58:42:ba:
f5:e5:b3:46:78:5b:4e:49:a9:47:15:01:25:a7:98:e5:78:84:
6c:69:17:53:60:9f:fc:6d:63:d1:2b:d4:b3:ad:98:b2:7b:6b:
16:fd:6c:56:c9:b6:11:42:5b:07:03:80:cc:53:f5:f1:b9:21:
78:0c:ec:81:b3:f1:74:7d:55:fd:42:71:ca:d2:fd:00:55:26:
23:ba:39:bf:1f:5c:6a:22:65:97:ec:f7:4d:02:38:a0:2f:95:
f9:43:40:9e:02:8e:a7:66:f6:24:c5:5e:af:55:70:27:4c:39:
cb:a3:f8:b7:c1:a2:99:60:07:4e:10:b8:56:57:33:94:77:57:
e2:3e:6d:7d:29:68:82:b0:85:a9:6f:26:2e:cb:ff:f3:aa:30:
e2:0c:94:46:04:5d:f5:06:d5:1c:c8:db:82:2f:d3:76:67:d4:
1e:b9:08:ff:da:fa:5f:4f:0d:e3:c7:f6:e7:9c:81:48:0f:72:
35:1c:c6:8b:d3:3e:f1:e9:c0:40:65:34:85:3f:f9:59:fd:af:
df:6f:e0:37:68:41:f8:39:26:21:26:5e:d2:fe:e2:3e:4d:e5:
d4:bb:7e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:17:32 2025 by rpki-client