Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/9OBeYetI89tN5bzHC0We7nAe0c8.roa
File: 9OBeYetI89tN5bzHC0We7nAe0c8.roa (raw, json)
Hash identifier: JQiGQF8hr3Jc860TYChxUw28nKs7bCAae+7SdCc2ojI=
Subject key identifier: F4:E0:5E:61:EB:48:F3:DB:4D:E5:BC:C7:0B:45:9E:EE:70:1E:D1:CF
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0194221FFFAA9DAED96F647B51ACABA32FA7
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/9OBeYetI89tN5bzHC0We7nAe0c8.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 185.96.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ff:aa:9d:ae:d9:6f:64:7b:51:ac:ab:a3:2f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4e05e61eb48f3db4de5bcc70b459eee701ed1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:b2:2e:8c:12:45:db:51:f9:d7:ed:72:b0:
5d:c8:fc:dd:46:14:aa:74:37:a7:7c:5e:2b:a7:69:
46:a1:a7:62:e4:c3:e4:b4:c6:68:6a:85:6b:89:dd:
d9:fc:a8:75:ef:39:30:db:32:05:15:fa:e3:e2:d1:
44:81:c5:09:3c:8d:87:1d:08:e3:20:9a:0f:19:52:
a1:0c:d7:f0:e4:1b:d0:79:cd:c5:21:2e:60:ca:e1:
ba:c1:65:5d:69:31:46:83:6e:51:e4:b8:63:dd:2a:
d6:e8:e7:2e:bc:12:d0:b9:07:ce:ea:3d:82:d3:5a:
92:58:57:3b:eb:f5:be:65:9a:38:33:a0:09:9c:1a:
90:ba:d4:34:81:cb:9a:1e:8b:59:8b:10:37:9e:7c:
eb:ef:7b:67:b0:eb:b5:c0:43:15:56:45:ab:9e:3f:
ea:6d:43:68:e5:ae:98:82:66:18:af:5c:e0:50:76:
07:a6:27:aa:96:58:fe:0e:3b:0d:44:a3:f0:b8:ba:
41:6b:df:5d:88:98:54:fc:bd:96:38:98:19:80:37:
09:6e:16:39:a1:a1:cf:22:18:3b:c0:0e:19:ed:08:
97:0e:96:19:b7:52:83:72:ea:11:1a:04:08:04:2f:
0c:3d:3d:ee:75:a3:6c:16:be:e6:43:07:78:d8:40:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E0:5E:61:EB:48:F3:DB:4D:E5:BC:C7:0B:45:9E:EE:70:1E:D1:CF
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/9OBeYetI89tN5bzHC0We7nAe0c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:94:07:37:a9:2f:9c:e2:5d:46:76:72:4d:6c:b4:c6:96:0f:
fe:74:3c:83:41:d2:36:1c:29:9f:b3:a0:c9:9f:93:1a:1d:0e:
48:a3:70:dd:04:c3:76:cd:ed:64:21:dd:62:d5:81:e7:da:f1:
0f:f8:4f:dd:a3:84:21:3b:07:0f:ab:fc:b8:90:77:67:ee:00:
4e:f7:88:24:9d:da:4f:89:39:66:9c:b5:84:24:e8:44:0b:a2:
17:44:c9:6f:fa:63:36:98:22:6d:15:95:bb:d6:f1:41:42:85:
74:9a:c4:63:28:53:dd:ec:2c:7e:97:26:a8:f9:4b:ed:ea:7e:
f1:58:41:1a:c4:06:2b:e8:66:b5:33:a9:31:58:59:a1:9c:e4:
47:04:15:06:cc:cb:4e:6c:1a:11:6b:28:98:6e:db:42:bc:10:
ed:68:09:cf:c2:22:4b:05:2a:75:fb:93:2b:88:56:d8:3c:ba:
f7:79:6d:a0:92:60:c6:91:b4:a5:e3:de:13:13:ce:ef:9b:94:
31:7f:d5:7c:f9:88:a3:0d:3b:13:7f:82:ee:98:14:81:18:a5:
77:9c:1f:ad:a3:73:2f:a7:c9:39:06:c6:e1:40:b2:3e:72:ec:
63:b1:51:08:4f:06:fa:d7:01:f6:57:a2:f7:ff:a8:76:4f:fd:
c4:07:76:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:42:46 2025 by rpki-client