Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa
File: kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa (raw, json)
Hash identifier: QA88mloj+h/kCAIWi5WNjJl3VlB1DBIdl1O6jQwCD1U=
Subject key identifier: 90:9E:87:EC:09:88:C9:4B:DD:C4:C4:50:E1:A0:41:E6:CC:51:0F:F5
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 0194221FE3EFB94B3668F326AF84F505A121
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa
Signing time: Wed 01 Jan 2025 13:48:22 +0000
ROA not before: Wed 01 Jan 2025 13:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16625
IP address blocks: 109.230.116.0/22 maxlen: 22
109.230.116.0/24 maxlen: 24
109.230.117.0/24 maxlen: 24
109.230.118.0/24 maxlen: 24
109.230.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e3:ef:b9:4b:36:68:f3:26:af:84:f5:05:a1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=909e87ec0988c94bddc4c450e1a041e6cc510ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:80:38:eb:17:45:e6:3d:43:f7:48:4e:fc:bf:
69:a4:c1:47:82:07:9a:ab:56:88:61:dc:bc:65:ee:
e3:9e:5a:a7:17:b0:dc:0c:09:f1:84:21:b4:23:22:
43:5c:98:35:21:dd:7d:79:a4:4c:d5:b2:bd:ba:14:
b8:d8:3d:2f:c3:27:02:42:d3:fb:87:2d:d6:95:95:
da:40:34:06:13:13:f2:bc:50:d9:53:90:6e:0e:91:
e8:1c:8c:b8:96:af:e0:7e:e0:c3:80:84:77:54:11:
7d:3b:a9:82:6c:e3:ff:20:26:78:cf:a2:c6:71:e7:
98:10:a5:38:73:e2:63:39:cd:77:44:f6:59:5e:25:
27:80:fa:e1:67:49:0c:ce:33:e4:9f:a8:bc:44:c9:
88:c8:d5:73:4c:c4:31:ee:99:31:5d:d5:28:c2:0b:
74:f0:90:93:60:6e:c8:01:aa:f8:f4:3d:04:80:18:
c0:a2:8b:57:8d:bc:0d:63:e6:86:49:19:10:68:33:
4f:5a:5d:ef:fa:dd:6a:e7:cb:f5:6e:cc:04:c4:5e:
f6:2e:c5:e1:3e:4c:55:15:2d:fc:4f:9b:12:c3:1e:
32:f2:5f:41:40:c2:be:fe:58:ea:8d:b0:83:78:c7:
37:0b:5c:ab:79:2e:29:4d:76:41:d2:99:ba:fd:e5:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9E:87:EC:09:88:C9:4B:DD:C4:C4:50:E1:A0:41:E6:CC:51:0F:F5
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.230.116.0/22
Signature Algorithm: sha256WithRSAEncryption
81:35:fc:86:37:5e:6b:c4:86:dc:3a:2e:9b:96:3b:d8:88:12:
91:d6:db:85:67:ad:2c:9d:27:ab:4a:79:36:a9:9f:60:13:bf:
0b:18:7e:f6:d2:b9:e6:d7:bd:cc:2b:fe:a2:bb:78:c8:74:35:
d6:de:15:e1:3c:5b:9f:3b:23:2a:a4:e4:21:7b:69:a9:b6:b1:
b5:65:ef:b8:10:5d:82:1d:f1:a3:6c:5b:47:bd:ed:e6:9b:53:
24:38:cf:5a:9c:87:e2:50:67:7e:40:8a:6b:e1:0d:d0:fe:f5:
e0:dd:2a:f4:40:32:c6:b2:62:0e:0e:87:37:78:95:e1:a6:57:
b3:e8:31:9d:e5:3d:d8:9b:21:41:3d:e0:29:fa:67:2c:e7:f6:
3b:3a:28:f9:95:1a:23:36:26:ee:06:d9:a5:e1:c0:16:47:02:
b2:4d:c4:8c:cf:b8:ff:e2:e7:cb:3c:1d:cc:00:17:a6:c7:fc:
40:ea:57:42:ff:b4:5a:0d:39:ea:a2:93:9a:39:5f:63:ff:ae:
d8:ec:c0:0c:cf:38:b4:3e:5c:e2:e5:38:01:63:42:26:6c:8c:
06:dc:f2:cd:93:4a:fd:3a:60:aa:d9:7b:0c:84:b0:ae:66:b0:
5c:63:43:b7:41:e0:ed:e4:57:f6:c6:44:89:10:52:6e:ff:41:
2a:57:c8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:42:56 2025 by rpki-client