Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/CTfbG5cUVxAK6YGRS7EzBAmR6lk.roa
File: CTfbG5cUVxAK6YGRS7EzBAmR6lk.roa (raw, json)
Hash identifier: 9/9ddG2vYIhEQ1W216Nq6dortDlJxKNlmkbqIcHrZlg=
Subject key identifier: 09:37:DB:1B:97:14:57:10:0A:E9:81:91:4B:B1:33:04:09:91:EA:59
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0194941E140B6473516166C81843B9D4889E
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/CTfbG5cUVxAK6YGRS7EzBAmR6lk.roa
Signing time: Thu 23 Jan 2025 17:03:06 +0000
ROA not before: Thu 23 Jan 2025 17:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216358
IP address blocks: 85.209.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:1e:14:0b:64:73:51:61:66:c8:18:43:b9:d4:88:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 23 17:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0937db1b971457100ae981914bb133040991ea59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:3e:4c:ba:47:a5:aa:8e:23:1f:76:b8:d7:
ee:15:1a:60:f4:75:b3:f0:ef:db:b1:fd:34:a5:a0:
16:61:b8:93:c6:00:d7:a2:c2:a7:40:ec:7c:a2:4e:
18:96:7e:28:78:65:c8:3f:04:e2:e3:e6:2a:bd:ea:
af:6c:1f:21:eb:bb:e2:47:5f:a7:50:11:e8:5c:19:
45:a9:48:5d:31:0b:ad:24:7d:8b:e1:fd:41:ed:7b:
d6:a6:5f:96:f5:f2:57:23:54:56:7e:ff:a8:8b:21:
d3:c8:fc:56:a4:81:43:e7:56:76:68:21:7c:8b:f6:
d8:56:45:af:a9:d4:d6:55:41:4e:43:69:38:e2:74:
94:f0:c8:f0:71:10:ee:5d:66:ca:1e:ee:58:a6:e0:
75:c4:88:22:22:12:6f:74:33:b2:84:1b:03:89:76:
e7:fa:80:1d:a2:30:98:09:b6:0c:3a:a6:31:31:62:
f2:8f:08:10:ad:d6:d2:e2:33:47:43:92:f7:6e:b3:
bd:a5:23:ae:ea:1f:be:d6:11:94:77:fd:a9:26:9f:
06:b6:bd:a8:df:64:1b:44:98:5e:9b:f2:00:84:aa:
29:82:5e:26:52:06:95:8a:22:7d:2e:09:0b:25:4e:
dc:62:e4:10:97:87:d4:30:25:04:ba:b2:6f:48:57:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:37:DB:1B:97:14:57:10:0A:E9:81:91:4B:B1:33:04:09:91:EA:59
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/CTfbG5cUVxAK6YGRS7EzBAmR6lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:80:58:a2:0a:e9:90:7b:92:89:10:05:2a:20:6a:9d:b7:2e:
9d:01:78:f2:71:b6:48:61:c2:71:83:b4:fc:b4:91:e2:0e:7e:
15:fe:6d:a8:21:81:60:42:27:9f:41:68:e7:f4:e7:46:24:43:
ef:6c:60:09:63:80:3b:50:08:be:81:1d:fb:e8:dd:22:2e:1e:
59:d9:c2:1d:cb:68:78:15:9d:54:de:a8:35:09:9a:d2:99:c5:
b7:c7:ea:2f:2c:9f:07:2c:a1:e2:c0:ca:34:17:27:15:27:fb:
9a:1a:80:37:13:a3:7a:67:ee:bc:bb:1f:5c:0e:2c:a9:5f:15:
6e:78:49:1b:1b:42:98:15:98:3f:1b:ab:9a:c9:ec:e9:9c:12:
4b:38:7c:08:f6:e7:4d:86:61:3e:4c:b8:08:88:d2:58:8b:fc:
b2:b9:b7:cc:20:7b:42:85:85:24:ca:38:ef:94:71:6f:67:74:
1d:76:5b:33:36:f8:cc:39:1f:52:c0:29:af:4c:dc:81:2f:0c:
b2:ab:dc:0a:06:b8:5a:b7:ed:5d:fc:9e:15:0c:0a:f4:19:b4:
fc:85:98:49:0d:d3:cb:8a:7d:58:4b:1d:2a:67:d6:30:ba:cc:
1a:8e:2f:33:75:4f:0c:9c:7b:1b:2d:65:b0:c1:23:91:70:4c:
f9:67:fc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 17:19:22 2025 by rpki-client