Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa
File: 9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa (raw, json)
Hash identifier: MRgHCGLmmsjnvw7chUeEEH655TL4/pWfw0Bh/13k3RE=
Subject key identifier: F4:F6:34:0B:34:0E:EE:B0:AC:ED:AE:C0:09:63:26:87:E8:18:50:C2
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 019423D7F8331D8BFC37318494AD626D058D
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa
Signing time: Wed 01 Jan 2025 21:49:03 +0000
ROA not before: Wed 01 Jan 2025 21:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8788
IP address blocks: 178.211.96.0/19 maxlen: 20
178.211.112.0/20 maxlen: 20
193.138.87.0/24 maxlen: 24
194.32.108.0/23 maxlen: 23
194.32.108.0/24 maxlen: 24
194.32.109.0/24 maxlen: 24
194.32.110.0/24 maxlen: 24
212.26.128.0/19 maxlen: 19
212.26.140.0/24 maxlen: 24
212.80.32.0/19 maxlen: 20
2a00:e780::/32 maxlen: 32
2a00:e780:2::/48 maxlen: 48
2a00:e780:a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f8:33:1d:8b:fc:37:31:84:94:ad:62:6d:05:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Jan 1 21:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4f6340b340eeeb0acedaec009632687e81850c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:46:dd:29:f4:5a:69:de:80:72:ad:33:82:0e:
bd:85:a6:7f:2d:22:65:1f:78:37:de:b8:c7:99:75:
66:20:e0:8e:8e:c1:54:38:67:af:56:da:f9:7d:d4:
49:53:3e:b4:00:9a:18:51:bc:f0:1b:54:33:b4:74:
28:eb:ec:47:ae:e1:ea:08:e4:b5:e5:4d:66:8f:7d:
43:7f:fd:51:e1:c2:f9:d3:e4:5e:05:fd:74:89:b8:
13:36:d2:46:7c:cb:fa:a0:7f:98:54:0f:df:bb:33:
e7:58:e6:ad:dd:78:b6:40:b4:7b:e1:e0:d6:d9:be:
fb:94:09:48:6f:2c:b0:88:cf:d1:6f:f8:c6:99:b7:
27:41:36:53:bc:96:d7:f9:74:5a:99:c8:08:79:79:
c5:2f:af:1d:c2:1e:bb:f5:37:a0:ff:71:95:a6:54:
fd:a1:32:a3:c7:f6:60:fb:a6:39:2c:b9:a0:1e:30:
a9:b8:37:5e:07:2f:50:42:66:e3:2f:c4:43:f7:44:
62:16:9b:da:36:3d:83:b3:11:71:5c:df:4a:45:7c:
18:5a:7b:51:4b:49:a6:64:e0:42:65:0d:98:5e:b4:
1e:d8:ce:49:a0:40:61:d7:aa:00:8d:95:0a:37:a8:
6a:f1:ea:bd:3b:d1:89:06:28:af:95:65:0b:8e:35:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F6:34:0B:34:0E:EE:B0:AC:ED:AE:C0:09:63:26:87:E8:18:50:C2
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.96.0/19
193.138.87.0/24
194.32.108.0-194.32.110.255
212.26.128.0/19
212.80.32.0/19
IPv6:
2a00:e780::/32
Signature Algorithm: sha256WithRSAEncryption
1a:bf:e2:2a:35:d4:c1:db:29:b9:a2:fe:d3:4b:79:d6:20:03:
b0:6b:83:6c:52:f0:7a:fa:68:6d:4f:db:28:c8:18:44:84:60:
a5:c6:4b:d9:8a:9f:1a:b6:90:84:5e:69:90:be:1a:c1:97:be:
32:09:90:97:60:d4:ee:43:1e:1b:3b:f7:a4:7a:b4:98:b5:b4:
4e:cd:73:d5:e9:c5:fe:92:09:e6:e2:5d:ba:8f:c8:68:66:4f:
1d:db:94:81:b8:0f:b7:d0:56:8a:10:e0:3e:b2:2a:94:ff:e4:
cd:e1:6b:ed:88:52:e3:88:1f:79:69:0c:14:60:29:8b:f5:d2:
66:e1:d6:b8:ea:39:6d:e3:58:75:80:11:1c:47:bc:9f:57:5f:
ee:cc:52:d9:00:4d:81:35:ac:5c:b0:34:13:8b:bd:8c:b3:93:
a8:b1:7f:e9:ae:ae:da:fd:b8:3f:8c:ef:95:a9:c6:c6:83:17:
1c:17:d1:95:9e:a9:8e:41:2e:3d:50:25:4c:80:b4:ee:2a:d0:
4a:c4:78:66:e4:a8:69:8f:3c:8a:23:76:62:01:a1:bd:e8:49:
bf:7d:ad:da:40:b4:84:f6:4c:e3:27:fc:ba:b7:54:57:09:1c:
f8:d0:88:44:eb:92:ba:1c:fa:29:7b:d7:db:a8:60:83:74:79:
b6:5b:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:18 2025 by rpki-client