Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/9JM6FQ3JNcJAsurX_9l52alhS78.roa
File: 9JM6FQ3JNcJAsurX_9l52alhS78.roa (raw, json)
Hash identifier: a7KiUg0rkGYES5Jq40C4im6HS+LxQ3+rKB9CYqBxCgY=
Subject key identifier: F4:93:3A:15:0D:C9:35:C2:40:B2:EA:D7:FF:D9:79:D9:A9:61:4B:BF
Certificate issuer: /CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Certificate serial: 019424B3E3A085D41626E3CB7BB559669A0D
Authority key identifier: 5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/9JM6FQ3JNcJAsurX_9l52alhS78.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35319
IP address blocks: 91.222.36.0/22 maxlen: 22
91.226.44.0/23 maxlen: 23
185.137.216.0/23 maxlen: 23
185.137.218.0/23 maxlen: 23
185.181.16.0/22 maxlen: 22
195.140.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e3:a0:85:d4:16:26:e3:cb:7b:b5:59:66:9a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4933a150dc935c240b2ead7ffd979d9a9614bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2f:88:36:8a:5d:c8:4f:3e:f2:c9:3d:d4:93:
e4:06:54:02:9f:f4:44:7b:09:f8:0c:ee:ae:f7:a1:
9e:0e:f8:0c:45:ed:cf:7c:8e:92:48:18:bd:1b:be:
a2:37:9b:59:57:39:3b:3f:a7:12:23:91:aa:0c:31:
0b:8f:7d:2b:4a:b0:47:6d:be:a0:01:8a:30:7c:f1:
79:c6:9e:ce:fc:04:f1:ec:92:fd:79:aa:84:fd:de:
56:f2:32:c1:c8:f5:33:1f:53:1d:de:d3:19:f2:23:
ff:38:24:52:e1:d5:61:4d:0a:43:77:22:01:8c:61:
c1:0e:67:94:43:a9:1b:65:6d:17:9e:c1:23:51:6e:
0e:a3:a6:1c:59:b9:5d:00:ab:b3:59:38:96:8e:d2:
02:75:9e:c3:c8:55:27:8e:c8:d3:42:e5:73:dc:59:
3e:1b:26:59:6e:90:4e:40:d6:f0:08:99:c1:c1:5c:
f5:a5:2c:77:f8:56:32:f7:60:13:4f:c5:df:52:51:
54:d9:71:ea:23:e6:48:dd:c9:ca:ef:47:37:c2:83:
ae:66:a0:ed:73:e8:e5:cb:94:e4:90:1f:e7:c1:ec:
fa:b2:b1:75:8a:99:67:18:7c:48:42:d4:30:79:7e:
98:cd:3c:6b:50:d9:88:b1:9a:46:48:b1:49:2c:20:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:93:3A:15:0D:C9:35:C2:40:B2:EA:D7:FF:D9:79:D9:A9:61:4B:BF
X509v3 Authority Key Identifier:
keyid:5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/9JM6FQ3JNcJAsurX_9l52alhS78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.36.0/22
91.226.44.0/23
185.137.216.0/22
185.181.16.0/22
195.140.160.0/22
Signature Algorithm: sha256WithRSAEncryption
43:15:50:4d:cd:b2:fe:0a:15:7f:54:17:5e:3d:cb:29:b3:a0:
42:56:69:1d:33:ec:03:10:50:7f:9c:9e:4b:2f:f6:b7:b3:d8:
cf:50:4d:fd:94:a4:25:33:69:b6:ed:a1:dd:68:ca:77:0e:56:
4d:14:8c:d0:c7:cf:68:dd:da:d8:eb:2d:99:9c:4e:cb:5e:36:
76:96:73:df:a6:df:b2:ff:df:3e:1c:2a:5b:8d:82:01:78:b4:
4d:ea:46:d3:25:f4:e7:2f:5f:25:7e:f0:e8:1d:c9:6d:7a:a3:
19:4f:c5:86:13:98:a9:88:af:d7:64:5c:33:06:1c:b5:fd:70:
42:8b:3b:06:46:d4:e8:b4:2e:4e:b7:9e:ed:32:00:0a:50:e1:
8f:22:24:06:e1:2a:69:17:0c:34:5b:eb:cc:63:d1:0f:e5:da:
3f:89:b0:74:07:cd:a9:5d:9f:23:0a:cc:54:90:96:b7:2f:bb:
85:bd:a4:98:c9:f8:7c:e5:e5:d8:ee:8a:9a:a7:33:75:a3:87:
b7:93:c7:a9:1f:c7:f9:ef:52:8d:15:9c:01:4e:60:ca:7f:fd:
59:1f:9e:53:e7:a9:f8:16:5d:c8:2a:82:43:f3:e8:9e:4a:71:
38:cc:a4:23:29:af:fc:48:b1:32:f4:f8:99:7a:2b:af:74:9a:
49:6f:53:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 14:38:14 2025 by rpki-client