Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/9N71vXZ6iYuqWW-If0CgsO_Wjpg.roa
File: 9N71vXZ6iYuqWW-If0CgsO_Wjpg.roa (raw, json)
Hash identifier: plP8bbCihgTmT1C8mtLaGAuAfGPMZ93aIA1Z/LkRd90=
Subject key identifier: F4:DE:F5:BD:76:7A:89:8B:AA:59:6F:88:7F:40:A0:B0:EF:D6:8E:98
Certificate issuer: /CN=3406a12ecc53a251a75ce7bacaac9e41aee8b4ca
Certificate serial: 01941FFA60FF7A8D38032CAB9AFF285BBCD5
Authority key identifier: 34:06:A1:2E:CC:53:A2:51:A7:5C:E7:BA:CA:AC:9E:41:AE:E8:B4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/9N71vXZ6iYuqWW-If0CgsO_Wjpg.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206767
IP address blocks: 185.171.12.0/24 maxlen: 24
185.171.13.0/24 maxlen: 24
185.171.14.0/24 maxlen: 24
185.171.15.0/24 maxlen: 24
2a0d:580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:60:ff:7a:8d:38:03:2c:ab:9a:ff:28:5b:bc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3406a12ecc53a251a75ce7bacaac9e41aee8b4ca
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4def5bd767a898baa596f887f40a0b0efd68e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:f5:dc:e6:df:d1:91:01:58:2b:c5:2d:af:
d9:f4:fd:f8:06:7e:cf:9f:17:b2:17:20:5d:5b:3b:
ae:b8:26:ac:70:20:72:a6:ab:41:05:e2:a5:3a:fe:
e0:3a:6f:0d:b3:ba:6d:ff:89:26:69:30:cf:d9:0a:
e7:db:9d:ef:f7:fb:d2:60:85:e1:3c:ae:ba:0b:d3:
1c:d5:d3:76:c2:b1:e0:8e:3f:36:9c:ba:17:b8:85:
47:1e:2b:10:39:87:8c:b4:f9:65:c1:55:37:41:7e:
ce:b9:01:2c:3c:2b:84:26:55:da:30:87:e9:23:ac:
56:a2:7e:3d:6c:c3:07:5f:cd:a6:ee:39:43:94:05:
07:c7:f2:4b:b6:23:d5:45:5d:87:32:17:81:e0:5d:
4e:fc:5d:69:23:27:68:00:cf:e0:a5:11:7b:2b:a4:
74:95:0f:0d:50:be:55:ae:99:e4:a8:f7:94:bd:9b:
a0:dc:61:e6:7c:2a:65:ed:97:b9:c1:d1:0a:ed:bf:
d6:1b:b7:93:6d:45:f7:7a:74:4a:8f:06:02:dd:11:
8c:ad:9b:b7:d0:9a:0b:77:8d:b1:85:5c:c5:cb:49:
2b:8b:7b:bc:45:11:5b:22:64:2a:24:7f:5c:94:0f:
28:ca:f6:7f:14:02:9b:ff:63:21:77:31:10:31:65:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DE:F5:BD:76:7A:89:8B:AA:59:6F:88:7F:40:A0:B0:EF:D6:8E:98
X509v3 Authority Key Identifier:
keyid:34:06:A1:2E:CC:53:A2:51:A7:5C:E7:BA:CA:AC:9E:41:AE:E8:B4:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/9N71vXZ6iYuqWW-If0CgsO_Wjpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.12.0/22
IPv6:
2a0d:580::/32
Signature Algorithm: sha256WithRSAEncryption
cb:71:6b:89:bd:cb:fd:10:be:a6:d8:4a:76:f3:4e:eb:d1:51:
a2:72:9b:e6:f6:d9:b6:24:ce:ad:e4:bb:39:2a:50:eb:16:9b:
1b:72:56:8b:36:f3:d0:1d:b4:d2:21:28:5e:0c:01:7b:03:f0:
94:13:59:c7:86:6b:19:86:84:8f:6b:6c:8e:ff:d2:98:42:0e:
f1:65:49:11:d8:72:8b:f3:1d:41:d0:3f:dd:70:7d:95:b1:98:
64:6a:3d:92:85:0b:a4:f6:d2:69:84:17:e0:66:43:8c:40:03:
06:b2:e3:41:29:b4:51:92:59:dc:ef:08:28:14:c0:c7:a3:e6:
5b:e7:d8:17:4b:b7:b4:bc:fe:d6:2e:52:d3:de:92:46:95:04:
a4:66:e2:0c:a6:c4:3e:c2:61:41:0e:51:ab:86:5f:13:f3:96:
44:3d:5d:8a:79:03:b7:97:ec:d2:97:ca:18:15:c6:6a:c2:0f:
08:c6:3d:f7:55:71:bf:9f:98:a9:f3:24:a4:aa:a8:da:51:b5:
06:f1:e5:ec:ef:98:84:e9:ce:cd:b2:b2:6b:7b:32:84:00:81:
df:b2:94:04:00:97:f8:3d:1c:39:f7:b5:e8:fd:ed:a1:a4:4f:
98:32:aa:c9:81:95:5a:02:5a:0e:49:43:e6:0a:92:08:57:20:
e8:6e:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:18:49 2025 by rpki-client