Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/f9hfmHvrY5AwY36q7MIQ4falWVM.roa
File: f9hfmHvrY5AwY36q7MIQ4falWVM.roa (raw, json)
Hash identifier: poIPC46neVOYvv7bF8o92LK9XXWLEMpfpDFVMKy16AU=
Subject key identifier: 7F:D8:5F:98:7B:EB:63:90:30:63:7E:AA:EC:C2:10:E1:F6:A5:59:53
Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial: 019427B69215B4499D0944B938F06E9378D2
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/f9hfmHvrY5AwY36q7MIQ4falWVM.roa
Signing time: Thu 02 Jan 2025 15:51:03 +0000
ROA not before: Thu 02 Jan 2025 15:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200776
IP address blocks: 194.11.128.0/22 maxlen: 22
194.11.128.0/24 maxlen: 24
194.11.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:92:15:b4:49:9d:09:44:b9:38:f0:6e:93:78:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
Validity
Not Before: Jan 2 15:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fd85f987beb639030637eaaecc210e1f6a55953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:36:30:c6:9d:c6:fa:27:46:e1:bc:ac:92:
25:e7:4c:3d:4e:83:40:05:71:36:c2:2e:3c:6d:d2:
36:7a:89:b0:2d:6c:2a:9d:e5:66:ae:45:b1:7b:55:
63:94:8e:d6:dc:00:b2:b1:f7:63:a7:b2:36:23:6f:
fb:c2:04:b9:d3:23:3a:6b:ed:8f:e2:d2:b8:d3:80:
15:11:2b:0e:6a:f6:1f:f0:27:c2:c6:df:da:31:d2:
ec:3f:d0:e6:90:7c:7b:14:a6:b8:d6:04:8b:e2:7b:
3e:f2:4b:81:3d:f1:db:03:59:1f:67:36:1b:b4:6f:
aa:53:b2:f4:be:7c:1b:1a:88:64:b0:4b:f1:c0:de:
01:a2:52:2a:34:d0:b5:90:ca:4c:15:4c:ae:80:80:
65:4f:3a:a7:54:24:47:58:3a:50:43:3c:5a:fe:64:
be:f3:19:d0:a9:d5:d6:f5:f5:56:b6:bf:90:7b:da:
d5:ef:62:6d:31:0c:47:c0:15:2a:b4:3f:18:68:80:
c9:b5:1e:c2:66:86:c0:82:f4:6a:8f:98:01:3b:68:
88:33:e6:78:a4:94:b7:3f:1c:06:d0:bd:59:a0:86:
36:4a:ec:f1:35:81:54:3f:d1:d4:16:35:16:bb:db:
ba:1b:eb:d4:3d:8e:30:9f:49:88:a1:e9:b1:89:1e:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D8:5F:98:7B:EB:63:90:30:63:7E:AA:EC:C2:10:E1:F6:A5:59:53
X509v3 Authority Key Identifier:
keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/f9hfmHvrY5AwY36q7MIQ4falWVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.128.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:b0:ae:f5:ff:3a:40:e0:31:6e:b8:38:a9:f5:84:07:0c:8e:
cc:26:c4:c5:a9:a5:d9:84:f9:a1:9f:77:e2:d0:d5:24:51:e9:
a9:1d:d0:80:4d:d9:cb:76:22:9e:4f:b1:c2:63:7b:c7:cc:f9:
3d:1a:24:87:98:9d:48:92:65:73:cb:9f:a9:5e:c1:88:d5:e9:
1f:a3:c2:2c:3a:52:6c:7f:71:a3:cf:9f:c6:d7:f7:f5:22:a2:
1a:ce:f1:b1:8e:16:a7:9c:74:cf:5c:9a:1b:9f:ae:e2:0e:1a:
0b:23:9a:6e:ca:95:7c:83:0f:58:dc:08:98:5b:40:4a:1a:47:
34:47:3b:f7:76:54:6c:38:d9:0a:16:0f:98:0a:21:ca:79:05:
88:41:97:00:fe:36:be:4e:42:ef:43:83:4f:1f:e8:30:e0:41:
6d:5e:a5:da:60:6b:6a:7d:f1:f3:4d:9e:3b:28:50:4e:9c:0b:
fb:07:0d:54:93:d1:4e:7b:29:2f:76:ba:0d:e3:52:85:29:79:
7c:d4:1a:7e:2d:f0:da:55:19:59:1e:ce:25:49:7b:ae:f5:e9:
f1:04:f0:a0:f3:d8:36:03:6a:f0:90:2e:ea:9f:8f:fd:28:1c:
e3:a5:9e:94:1a:97:49:ac:dd:8b:ac:93:aa:95:c7:ff:65:31:
0b:c3:1e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:12:31 2025 by rpki-client