Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa
File: GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa (raw, json)
Hash identifier: +PS0Zeo/h7j5Rz8hACgz8q1qwFa7bESNHkPZUu+sEMw=
Subject key identifier: 18:CF:6A:AC:ED:AE:2F:CC:75:65:8D:03:75:6E:82:6E:75:D9:58:1C
Certificate issuer: /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial: 01942143C6268B8E144FAD0D4FC41E384B31
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa
Signing time: Wed 01 Jan 2025 09:47:57 +0000
ROA not before: Wed 01 Jan 2025 09:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5505
IP address blocks: 185.123.204.0/22 maxlen: 22
185.123.204.0/24 maxlen: 24
185.123.205.0/24 maxlen: 24
185.123.206.0/24 maxlen: 24
185.123.207.0/24 maxlen: 24
2a03:9320::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c6:26:8b:8e:14:4f:ad:0d:4f:c4:1e:38:4b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18cf6aacedae2fcc75658d03756e826e75d9581c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:f9:f8:9e:0f:3a:15:4f:bb:6b:9e:04:8c:
c9:5f:e7:8d:88:04:d5:f1:f2:1c:c5:af:69:69:78:
54:c9:49:d6:2f:14:31:8f:2a:90:2b:9a:85:48:70:
74:a1:0d:33:8c:a0:bd:bd:79:b3:b7:50:13:dd:0f:
2a:83:76:29:85:bd:b7:99:cd:9a:2c:1c:29:32:59:
15:9a:fd:b7:b8:ca:3d:88:d5:bb:9a:e4:28:46:ef:
0b:1b:65:74:ec:30:cf:84:63:ec:64:e8:08:56:af:
4a:33:9a:b4:12:e0:f2:b8:9f:fc:d4:f5:75:cf:b3:
e5:5d:53:2e:57:4b:1c:81:a4:a3:b9:c5:9c:80:3b:
d2:22:72:ca:43:66:e5:10:87:15:fb:c1:c3:6c:05:
51:9c:ca:4b:7b:ea:0d:5e:d6:c0:7b:fd:b1:e2:4c:
99:90:a5:55:ed:2b:75:b6:07:85:fe:c1:65:59:a2:
ab:21:b5:e6:ac:c1:af:87:e0:1b:73:84:06:ce:a5:
99:b9:62:4b:43:8e:5d:6a:09:38:70:af:a9:60:23:
91:89:fb:ac:70:cb:dd:3b:e9:bd:74:45:e4:db:f6:
c3:42:31:73:0a:04:c0:29:dd:e2:24:1f:15:71:8c:
96:01:e6:24:be:5a:ed:51:29:1e:06:4a:f0:e1:83:
c7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CF:6A:AC:ED:AE:2F:CC:75:65:8D:03:75:6E:82:6E:75:D9:58:1C
X509v3 Authority Key Identifier:
keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.204.0/22
IPv6:
2a03:9320::/32
Signature Algorithm: sha256WithRSAEncryption
12:84:ea:fb:c1:4f:d3:4f:21:a4:fe:81:55:4f:bf:b7:ca:4a:
2b:f6:3a:0c:7b:ca:cd:5b:1b:fb:bc:08:c0:4b:01:8e:9d:c8:
9f:9e:28:c3:13:4e:cb:af:d2:c1:f3:ea:28:4a:96:d0:32:6d:
c4:19:17:45:77:37:0c:26:5e:d7:4e:46:e8:25:7b:65:1a:08:
e8:26:b0:00:84:0f:10:7a:1c:c7:b0:29:52:9c:eb:73:92:ff:
e7:a1:7f:d1:e4:a3:34:35:65:b3:15:30:97:5b:b9:02:24:85:
b3:26:07:bb:e0:31:79:b9:b8:ba:c0:00:e8:94:55:a7:17:e8:
c1:fd:2f:c6:1d:5a:5d:71:62:99:3e:4b:39:1c:2b:6c:dd:74:
ed:dc:ac:9e:20:db:84:be:fa:6a:55:b8:33:8c:11:14:7a:2f:
ed:eb:d5:fd:8e:7c:8d:37:60:dc:4c:d5:66:71:9d:0a:15:30:
9c:2f:62:91:3b:92:81:d9:8a:a4:d9:06:c3:d9:ab:ff:c4:05:
2c:31:0a:bd:31:f3:4b:f6:1d:38:15:92:29:d1:a7:be:19:8e:
39:9b:c0:d4:b4:15:fa:28:cb:1b:06:ce:9b:fd:47:97:0d:55:
e0:3c:8d:f8:c3:6b:d1:72:6a:81:b6:4b:d1:02:a2:d9:43:68:
7d:6f:8a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:13 2025 by rpki-client