Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/nZK_WOZBkx5CjkyneO9yoAn9z7M.roa
File: nZK_WOZBkx5CjkyneO9yoAn9z7M.roa (raw, json)
Hash identifier: dpA6T/m8yk0xZEgRWH2rVz82pLkCcKV+oqNh5OTEUXU=
Subject key identifier: 9D:92:BF:58:E6:41:93:1E:42:8E:4C:A7:78:EF:72:A0:09:FD:CF:B3
Certificate issuer: /CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Certificate serial: 019421443F75399754F4FD8AA1C34521FB79
Authority key identifier: 99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/nZK_WOZBkx5CjkyneO9yoAn9z7M.roa
Signing time: Wed 01 Jan 2025 09:48:28 +0000
ROA not before: Wed 01 Jan 2025 09:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208611
IP address blocks: 185.122.8.0/24 maxlen: 24
185.122.9.0/24 maxlen: 24
185.122.10.0/24 maxlen: 24
185.122.11.0/24 maxlen: 24
185.194.240.0/24 maxlen: 24
185.194.241.0/24 maxlen: 24
185.194.242.0/24 maxlen: 24
185.194.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3f:75:39:97:54:f4:fd:8a:a1:c3:45:21:fb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d92bf58e641931e428e4ca778ef72a009fdcfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:6d:7f:52:0f:82:ad:c2:c7:9f:98:e0:3d:
62:8a:ff:8c:c6:64:ae:29:cd:b0:c9:1f:54:2e:34:
e4:43:75:81:81:1b:bd:35:b1:48:88:bc:22:2d:f7:
cf:74:3f:39:0d:98:c0:5e:09:ca:0e:4f:3f:ff:4d:
bd:ec:98:0c:42:8b:9f:05:a3:78:23:82:b1:30:7e:
77:d9:4b:e5:08:54:ce:fc:39:36:1e:a7:90:c9:63:
0b:e8:9e:3f:d9:31:69:0a:fa:c4:6d:e0:c8:04:7e:
d6:38:bb:4b:09:b5:b3:74:2a:c8:42:31:fc:00:d2:
6b:d9:99:35:07:51:64:d7:81:34:81:9a:e0:bd:a0:
9e:43:c8:20:82:3f:3a:7d:50:c3:63:10:4a:ff:8d:
c6:8a:83:1d:ce:50:db:5a:1e:16:e9:84:dd:ab:45:
cd:98:55:8f:9f:aa:d6:5a:48:c5:03:6a:4f:92:9c:
7a:6b:cd:59:32:90:e3:25:68:2d:b4:2e:00:64:95:
0c:90:ef:d5:71:b5:a4:a0:7b:77:cf:a6:6d:cf:41:
a5:5b:66:5c:7d:4b:4f:f0:06:3e:59:a3:f5:5e:c5:
60:52:b0:4d:97:67:53:2f:29:cd:5f:e3:01:b1:38:
96:1f:6c:a8:b1:be:26:7e:0d:e4:cd:61:b0:12:70:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:92:BF:58:E6:41:93:1E:42:8E:4C:A7:78:EF:72:A0:09:FD:CF:B3
X509v3 Authority Key Identifier:
keyid:99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/nZK_WOZBkx5CjkyneO9yoAn9z7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.8.0/22
185.194.240.0/22
Signature Algorithm: sha256WithRSAEncryption
e4:99:f8:92:e7:5f:69:f4:8f:fa:d4:c5:5f:19:cb:fb:2c:0a:
b4:fe:19:e6:7c:a6:05:4e:8d:95:a7:e7:50:98:64:ce:49:57:
1b:0f:49:2d:a6:88:07:b7:d0:0c:a3:1e:0d:c9:be:0c:0e:38:
30:33:44:a5:fb:31:ad:02:5c:d0:40:ca:8b:b8:16:e2:9d:cd:
cc:04:01:e2:bb:04:f9:34:e3:e2:4f:ca:96:6a:c8:4d:a8:e4:
19:6f:60:74:b7:23:65:6a:b5:61:6e:ab:22:26:0a:36:58:a5:
ed:64:f2:10:96:c0:2c:84:2c:ad:e8:0b:95:23:a0:c0:b8:a3:
28:12:cd:31:4c:c9:0d:fc:04:3d:90:9f:3b:d2:2e:fe:e0:8b:
40:a9:69:0b:d9:73:27:00:18:62:cd:c6:6d:48:e8:5e:ef:06:
22:72:d1:bb:e5:ae:c1:98:11:4a:99:e2:f3:73:df:f2:de:ae:
c3:6f:5f:4b:d5:e6:c8:b1:cd:b0:d2:7d:6d:77:f5:ea:aa:a5:
ec:46:82:4e:08:b0:3c:82:a4:16:0f:18:e4:4b:f2:42:b8:b2:
f6:46:3a:7a:4f:7c:b6:d6:7c:5c:32:d6:f7:11:f1:e6:b4:a4:
77:4b:6b:b2:4b:6a:7e:9f:83:b1:60:ce:01:8f:c4:ef:98:0e:
e7:0c:e3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:48 2025 by rpki-client