Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/9aE9E6d_EKy3oeQ-EJ1caU0SXhA.roa
File: 9aE9E6d_EKy3oeQ-EJ1caU0SXhA.roa (raw, json)
Hash identifier: MOajzA51VDkH0OS4p+0GDz6a0fba+85ui1iZQU0NXn0=
Subject key identifier: F5:A1:3D:13:A7:7F:10:AC:B7:A1:E4:3E:10:9D:5C:69:4D:12:5E:10
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 01959BA35E0383583883C9E786300C600FA1
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/9aE9E6d_EKy3oeQ-EJ1caU0SXhA.roa
Signing time: Sat 15 Mar 2025 21:08:49 +0000
ROA not before: Sat 15 Mar 2025 21:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.139.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9b:a3:5e:03:83:58:38:83:c9:e7:86:30:0c:60:0f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Mar 15 21:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5a13d13a77f10acb7a1e43e109d5c694d125e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:48:1b:62:7c:29:98:86:ac:09:47:8a:85:
69:9a:19:81:d6:36:a0:89:ba:de:16:ea:fd:7c:e1:
96:1f:22:c6:ab:af:eb:df:16:d3:67:38:14:df:73:
d7:67:66:8d:b5:66:22:e9:f1:d0:68:dc:83:96:0a:
79:55:e0:4f:57:75:4e:73:0e:a9:89:ee:11:ad:c1:
a8:f9:59:54:05:51:20:06:99:52:f9:f2:8a:7e:e4:
a3:f3:de:16:31:55:e4:07:27:0f:b4:7c:4e:66:4b:
bb:67:f0:03:c6:65:f0:25:30:90:17:78:06:63:5e:
1b:57:60:6d:1a:76:ce:15:9d:44:a2:1e:bc:38:17:
06:d8:b0:b7:47:da:ac:bb:dd:35:02:f8:cc:f3:c1:
8d:ff:47:2c:da:83:60:2c:0b:c9:ed:43:a6:aa:f9:
e8:c1:6d:b0:d7:2e:e4:5e:99:7b:3b:3f:e7:29:a4:
f5:c7:b9:58:b8:45:d3:89:ca:93:28:dd:03:77:88:
dd:cb:2b:69:ad:a3:a7:15:cf:01:42:a3:ed:1e:d0:
66:55:f9:44:1c:96:43:6a:9a:01:89:c4:4a:fe:59:
42:4a:58:df:72:9a:7e:66:6b:14:5d:82:5d:0d:15:
cb:01:80:1c:a5:83:b5:ae:c2:93:83:7a:d3:d2:19:
cb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A1:3D:13:A7:7F:10:AC:B7:A1:E4:3E:10:9D:5C:69:4D:12:5E:10
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/9aE9E6d_EKy3oeQ-EJ1caU0SXhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:dd:c8:d4:90:b9:27:1a:be:65:7b:a2:12:18:0f:02:ca:a5:
57:39:ea:f0:39:16:25:99:fc:b8:5a:0f:9a:8d:0c:ce:e3:2e:
a6:5d:b3:76:a1:9e:da:29:df:f1:c6:06:6a:e6:58:10:82:45:
c4:9f:81:bd:f9:c1:31:5e:53:5f:45:9f:29:47:81:cc:07:5b:
62:c0:a9:91:79:e7:82:d8:c2:c9:b8:65:ec:78:4d:74:ad:69:
d6:d4:3c:56:6d:0a:62:10:8f:42:6d:19:ef:80:09:b2:c4:92:
69:9d:11:ad:7d:a6:4a:ba:6e:78:13:a3:e4:23:52:fc:20:fd:
ff:bf:11:54:74:dc:b1:29:b3:62:d3:f3:ef:8a:3a:55:00:2a:
32:2d:4d:2e:2e:ef:bc:39:c9:60:22:62:59:61:cc:df:ce:fe:
eb:0d:d9:ed:54:68:d4:4b:14:12:27:84:83:cf:76:d1:24:2e:
02:e5:ca:4e:06:d7:d0:af:51:92:f5:02:2b:c9:76:49:47:37:
ad:d0:f9:39:40:85:04:be:1a:c7:23:57:da:04:dd:90:bb:ba:
87:84:80:79:3e:ad:90:8b:aa:56:05:89:c1:8e:1b:90:5a:89:
f7:46:a7:a0:80:de:f4:31:57:a7:15:76:04:0c:1c:cd:ec:fc:
97:db:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:26 2025 by rpki-client