Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/9T4D_AYHSTPYWdPSQPfprxFH3CE.roa
File: 9T4D_AYHSTPYWdPSQPfprxFH3CE.roa (raw, json)
Hash identifier: cF6uVzyn8pWS9+OC3Wy6I1hLwEKciDsIddZfVcRTzdI=
Subject key identifier: F5:3E:03:FC:06:07:49:33:D8:59:D3:D2:40:F7:E9:AF:11:47:DC:21
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0195BE89FFCCB78CED0C2B9D2A4CE1A165E2
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/9T4D_AYHSTPYWdPSQPfprxFH3CE.roa
Signing time: Sat 22 Mar 2025 15:47:49 +0000
ROA not before: Sat 22 Mar 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.171.230.0/24 maxlen: 24
194.238.78.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
213.18.220.0/22 maxlen: 24
213.18.245.0/24 maxlen: 24
217.177.0.0/21 maxlen: 24
217.177.32.0/24 maxlen: 24
217.179.48.0/24 maxlen: 24
217.179.56.0/22 maxlen: 24
217.179.72.0/22 maxlen: 24
217.179.124.0/22 maxlen: 24
217.179.220.0/22 maxlen: 24
217.180.12.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
217.180.20.0/24 maxlen: 24
217.180.22.0/23 maxlen: 24
217.180.38.0/24 maxlen: 24
217.180.45.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
217.180.59.0/24 maxlen: 24
217.181.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:be:89:ff:cc:b7:8c:ed:0c:2b:9d:2a:4c:e1:a1:65:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Mar 22 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f53e03fc06074933d859d3d240f7e9af1147dc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0a:39:c5:e0:b9:e6:35:5e:d5:14:f1:e2:f4:
b9:66:d4:51:e6:c1:40:65:76:35:16:56:37:7c:4a:
21:af:f8:3d:ba:8c:63:89:4d:64:15:1e:c9:41:07:
f8:c4:f2:09:a0:13:88:bc:ae:1f:8f:fd:be:51:68:
d9:24:43:f2:f9:7a:ca:c9:e7:3d:0e:ec:3f:cb:15:
a5:37:f3:9a:64:4f:f3:21:af:d7:46:0c:ca:7d:38:
f4:78:f0:8e:87:26:69:f9:6d:4c:15:d9:d5:66:63:
23:a1:54:30:28:e5:7a:fb:be:b3:c5:2e:c4:36:a3:
1d:7f:b6:20:b6:03:42:b9:44:88:e2:a3:a9:86:7c:
ef:7a:8b:d2:4c:8d:cb:cd:e5:6b:02:3e:60:56:49:
a5:3a:fb:da:78:90:f8:5a:c5:f8:f6:82:f9:87:20:
4f:61:d2:fd:66:f1:73:0a:24:21:6e:ef:57:88:bc:
76:d0:19:9b:ea:12:d4:46:6a:ac:41:bc:73:de:03:
5e:0a:c2:fc:91:01:51:e1:a9:c7:e8:85:03:e5:d4:
30:b5:4a:25:86:f4:d7:60:e4:03:fd:08:bc:8e:f1:
37:ee:49:0e:7d:01:30:d1:93:2c:15:54:c2:10:ac:
f7:49:23:dd:1d:61:5a:54:3d:b1:b0:69:c4:0c:17:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3E:03:FC:06:07:49:33:D8:59:D3:D2:40:F7:E9:AF:11:47:DC:21
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/9T4D_AYHSTPYWdPSQPfprxFH3CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.230.0/24
194.238.78.0/23
213.18.220.0/22
213.18.245.0/24
217.177.0.0/21
217.177.32.0/24
217.179.48.0/24
217.179.56.0/22
217.179.72.0/22
217.179.124.0/22
217.179.220.0/22
217.180.12.0-217.180.14.255
217.180.20.0/24
217.180.22.0/23
217.180.38.0/24
217.180.45.0-217.180.46.255
217.180.59.0/24
217.181.80.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:b1:a3:21:4c:81:d0:da:50:0a:3b:d0:7b:ce:24:a6:1d:cc:
0c:37:78:d8:8c:a8:7d:3d:0c:a7:e4:a1:1a:79:5e:82:78:a1:
92:bb:02:a7:f1:d2:ca:1a:d3:fa:2b:a8:43:eb:4a:4c:fc:c1:
1a:37:2c:bd:3b:3a:b0:9a:81:07:e8:4a:b8:9e:21:bc:4d:ae:
a0:81:85:54:1f:55:91:f1:14:b8:bf:b2:a5:55:82:10:8e:44:
16:fd:ab:f1:3c:8d:bb:0e:71:2c:59:10:42:c1:ab:8b:f5:e4:
78:15:75:ec:91:10:a7:a3:76:f7:9f:1c:ab:49:87:83:0a:93:
c9:c4:36:1f:e1:b7:ef:d2:10:ac:97:ef:41:f7:81:ec:cb:69:
66:ee:90:d3:ba:df:5f:4e:58:8d:7c:e3:fe:80:b3:1e:41:76:
28:f5:8a:c9:cd:27:fa:3c:da:ad:48:23:b5:0d:c9:06:d6:09:
d6:3d:5f:f6:ec:f1:3e:23:16:d1:0f:d4:6e:f9:b9:99:6f:db:
df:fc:f5:d1:80:48:ff:c8:ad:e1:e5:74:64:16:7b:9b:0d:df:
c5:dc:76:4d:00:4e:6a:47:6a:d1:1a:c4:94:bb:70:62:db:6e:
a7:82:56:71:44:b1:89:6a:f4:e4:b9:80:73:b2:04:20:44:b4:
5b:05:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:48:28 2025 by rpki-client