Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/9C2OE_UiXlf9d9G1cIpAZTGa-qE.roa
File: 9C2OE_UiXlf9d9G1cIpAZTGa-qE.roa (raw, json)
Hash identifier: r/TntNYFZZscNnR6FrYLxeeivbdyseJ1z7nSB0IzeU8=
Subject key identifier: F4:2D:8E:13:F5:22:5E:57:FD:77:D1:B5:70:8A:40:65:31:9A:FA:A1
Certificate issuer: /CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Certificate serial: 019422202112D74CC7C672BF4D4AD5C35803
Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/9C2OE_UiXlf9d9G1cIpAZTGa-qE.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29014
IP address blocks: 91.198.224.0/24 maxlen: 24
194.37.255.0/24 maxlen: 24
194.145.224.0/24 maxlen: 24
195.190.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:21:12:d7:4c:c7:c6:72:bf:4d:4a:d5:c3:58:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f42d8e13f5225e57fd77d1b5708a4065319afaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:db:c5:48:57:8e:50:fe:39:39:d3:eb:41:ed:
b2:ef:1d:dc:6a:24:fa:d3:a7:91:7e:c2:55:78:5f:
cd:4d:00:9b:18:8f:a2:16:e4:c1:1c:89:5c:1e:24:
4e:88:10:66:ba:a7:54:46:e5:a1:77:5f:29:c9:75:
8e:53:20:ac:92:03:cf:29:96:85:c9:f8:c3:30:a1:
18:87:d6:fa:bf:c7:12:29:d8:71:e9:ec:cc:48:f5:
ba:09:6f:d3:17:f9:dc:dd:ef:6a:50:ac:76:fb:33:
b1:41:17:3b:44:13:cb:ac:b6:11:d9:42:8d:52:b1:
e9:33:f4:4f:ec:ec:f5:b9:d4:60:dd:8a:f3:3d:50:
ad:9a:bd:8a:f3:07:dc:13:33:dd:0a:2e:2e:76:0f:
fd:f4:d4:d5:22:d5:64:cd:27:d6:95:92:4f:86:a8:
bf:37:e5:8c:c6:d5:e4:8e:2f:7d:eb:76:b0:e0:be:
a5:0a:69:67:0d:99:48:bf:8b:c6:52:0b:b9:17:27:
2f:2b:60:87:7f:f6:0a:7a:f3:b3:87:a9:a0:86:4e:
47:68:cb:e4:dc:9d:70:27:da:0a:21:81:b7:9e:2d:
ea:b0:97:97:aa:c6:80:8d:9f:ba:ba:c0:86:a5:1f:
99:71:67:7a:0d:c0:1a:40:3a:a0:21:e0:74:9b:74:
67:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:8E:13:F5:22:5E:57:FD:77:D1:B5:70:8A:40:65:31:9A:FA:A1
X509v3 Authority Key Identifier:
keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/9C2OE_UiXlf9d9G1cIpAZTGa-qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.224.0/24
194.37.255.0/24
194.145.224.0/24
195.190.135.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c5:d0:97:bc:46:69:e7:b9:49:b9:c5:36:51:7c:93:fe:5e:
13:d9:ea:72:b6:57:7e:71:6d:77:4c:f1:69:4a:f5:fb:a8:0a:
3b:7d:28:89:b1:40:60:93:25:95:4f:db:9e:77:b3:07:a8:db:
47:c3:f9:f9:8c:27:55:d1:2d:fb:22:3d:66:0f:7a:29:83:f0:
92:70:38:fe:8c:be:30:56:42:d0:56:a9:22:ca:d1:aa:40:4d:
94:9c:2f:a6:b2:17:d0:2d:af:28:dc:00:ee:b8:64:3d:a8:3f:
86:5f:97:1f:22:37:6e:c1:d7:57:3e:f4:9d:3f:15:bc:00:57:
11:62:17:44:97:71:49:25:4b:96:b4:a2:3e:ee:7b:df:b2:4f:
26:59:14:a6:f9:3c:ea:e3:5f:19:5b:53:dd:2b:86:60:ab:20:
de:eb:42:a6:93:3d:f5:50:bd:b5:fd:b4:12:fb:64:b2:88:a9:
4a:1d:d0:18:95:7a:8f:a7:f3:51:b4:98:65:ca:32:78:88:40:
ae:31:01:45:ca:aa:ce:d6:ca:2d:ee:c4:71:85:b2:f9:52:d5:
d4:c4:d6:9a:f9:2b:f4:06:1e:1b:a7:d2:32:59:57:03:95:34:
e8:22:85:55:44:69:0e:03:6d:66:f4:b9:ee:a3:d1:62:f2:60:
06:eb:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:01 2025 by rpki-client