Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/9ustLRCmQrVjSomh2CSbiU8tgAw.roa
File: 9ustLRCmQrVjSomh2CSbiU8tgAw.roa (raw, json)
Hash identifier: iqcE7BuOcWgu3suvDSZKPBILDJpc9DfkSe4omHd7kiw=
Subject key identifier: F6:EB:2D:2D:10:A6:42:B5:63:4A:89:A1:D8:24:9B:89:4F:2D:80:0C
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0194228E0EB041B1AEBA5F0C68352AC1BF68
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/9ustLRCmQrVjSomh2CSbiU8tgAw.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46562
IP address blocks: 176.113.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0e:b0:41:b1:ae:ba:5f:0c:68:35:2a:c1:bf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6eb2d2d10a642b5634a89a1d8249b894f2d800c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:66:9a:ed:6b:b5:6c:44:e5:44:38:aa:e2:f5:
95:12:96:97:d9:ba:76:08:ef:31:1c:d6:7c:27:05:
f7:72:e1:5e:92:04:03:6a:61:0e:26:0d:7c:bf:1e:
af:88:7a:8c:56:63:9e:6e:42:07:64:b3:04:b8:0a:
b4:64:33:2b:2c:56:16:d3:f5:1b:07:5b:8b:83:72:
40:71:8e:db:7f:0d:31:13:2d:7c:4f:0b:28:c9:2e:
81:fa:e0:a3:0f:f7:38:ef:4a:70:dc:79:04:bb:04:
b5:5d:25:31:70:3f:a9:ae:cf:47:80:2a:ac:9d:76:
4a:0b:23:5e:6d:88:33:8c:c9:dd:95:c0:91:c5:58:
02:83:82:a9:41:85:94:6e:8b:8c:ae:15:13:0d:91:
5c:7d:e5:6b:d4:16:d7:55:d3:9f:f4:9a:fa:ff:13:
96:9c:2c:f9:25:06:38:fb:54:7e:0d:6d:45:0b:3c:
5a:f5:42:1e:b4:e8:2f:d1:c2:4f:72:ae:2e:b0:14:
bb:d2:e4:9c:33:b5:64:22:0e:cd:83:a3:0d:6d:e2:
7d:f7:f9:dd:fc:5e:80:ce:7d:74:65:ec:61:d1:3c:
81:09:ab:96:39:5f:71:a4:63:4c:f2:a7:b1:4b:1b:
c0:e6:dc:6d:07:43:7e:96:d7:d5:46:95:a8:f9:e0:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EB:2D:2D:10:A6:42:B5:63:4A:89:A1:D8:24:9B:89:4F:2D:80:0C
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/9ustLRCmQrVjSomh2CSbiU8tgAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e5:f3:fa:54:4c:28:83:3c:8c:0d:d4:6c:25:75:6f:bb:14:
9d:98:1a:57:26:a5:e9:1e:54:6b:72:aa:bf:e4:46:f6:34:3f:
d9:7c:b8:eb:08:98:37:9d:f2:b0:40:e4:af:f7:99:45:d5:e1:
71:00:ae:3b:5c:68:22:13:2d:89:a4:f1:4a:be:b5:bf:db:11:
ab:46:9d:22:53:b1:f2:17:6a:56:0b:37:40:81:97:7d:33:8a:
06:44:01:35:ef:48:ab:8e:6b:68:45:ce:56:f5:81:b7:f1:74:
03:e9:67:d6:e0:2f:b1:4e:38:ea:ee:db:b8:f5:f9:09:87:9b:
36:5f:f8:a2:3c:dc:d4:fc:ca:52:ca:be:21:6e:46:ea:6d:7b:
c4:a7:26:2e:a0:03:77:d1:b6:55:6d:07:35:9e:a3:2c:40:68:
61:bc:f4:c5:bc:41:1c:78:fc:b5:86:9c:57:79:14:8c:6d:70:
62:b9:35:65:5c:a2:09:57:3a:17:05:53:d1:1c:ca:10:eb:98:
69:8c:d3:c3:0f:c1:73:8a:d8:2a:0c:14:66:d6:a4:5c:73:c8:
ae:87:55:93:8f:ca:b1:2f:e8:2d:a1:c9:fb:bc:9c:36:ea:f6:
aa:83:aa:c1:4f:d4:44:9d:1a:a9:2b:15:aa:71:09:d1:29:65:
e1:4a:42:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:56 2025 by rpki-client