Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/v09qYAN-IMsl6EBKjgkiMaHhZSE.roa
File: v09qYAN-IMsl6EBKjgkiMaHhZSE.roa (raw, json)
Hash identifier: zMEVsCP+B2S7th53KWc0sjU1YadJttiqYzpn7D5i8ko=
Subject key identifier: BF:4F:6A:60:03:7E:20:CB:25:E8:40:4A:8E:09:22:31:A1:E1:65:21
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424448BB3080E221932AEE3FD798DE45D
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/v09qYAN-IMsl6EBKjgkiMaHhZSE.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35536
IP address blocks: 94.124.116.0/24 maxlen: 24
2a09:6:6::/48 maxlen: 48
2a09:7:2003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8b:b3:08:0e:22:19:32:ae:e3:fd:79:8d:e4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf4f6a60037e20cb25e8404a8e092231a1e16521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:13:a0:b6:f2:5d:01:93:e7:6d:bd:7e:6d:97:
92:54:c1:64:39:66:56:9b:36:9c:66:5d:d2:20:98:
cc:1e:e5:24:93:2d:ae:a8:ea:03:87:a3:bf:6a:5b:
c6:f0:50:00:c6:32:6a:b3:6a:a7:f5:85:ca:c0:51:
25:23:41:52:53:63:62:ec:92:b1:40:10:f7:51:0d:
b6:c8:ff:05:45:6b:98:c2:62:fa:57:19:c0:2d:41:
bd:d4:34:35:5e:35:31:ce:56:f5:79:c4:a5:3d:37:
26:e7:bd:4b:4f:4a:ef:9d:7c:43:e0:d4:9b:38:c6:
8e:18:69:a3:a6:db:94:bd:73:7a:33:5d:03:75:89:
6d:59:8d:9c:dc:2a:49:30:c6:f0:44:16:db:ff:cc:
00:b4:29:ef:a4:8b:ea:66:a1:26:5a:ad:63:1c:02:
1d:2e:e1:dc:72:b2:d8:16:42:f2:e1:f6:3c:5d:ef:
fd:a2:e2:f0:29:d0:38:b6:10:8b:2a:d1:52:74:a6:
08:67:b7:e4:6a:85:0c:8d:58:e8:9f:05:16:4b:db:
72:06:26:97:1c:09:f8:25:6d:bf:86:02:97:45:74:
ce:af:a8:7c:29:f5:c6:f9:51:52:e2:a3:f0:49:28:
69:22:12:9f:2c:39:79:07:6d:ff:42:b4:44:b5:ef:
78:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4F:6A:60:03:7E:20:CB:25:E8:40:4A:8E:09:22:31:A1:E1:65:21
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/v09qYAN-IMsl6EBKjgkiMaHhZSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.116.0/24
IPv6:
2a09:6:6::/48
2a09:7:2003::/48
Signature Algorithm: sha256WithRSAEncryption
58:99:8b:dd:52:30:ec:8e:ea:48:3f:69:99:dc:95:6c:af:6e:
00:54:44:40:a0:f0:5f:44:12:56:45:51:55:a0:75:02:d3:30:
67:f0:a9:38:97:05:d7:a1:03:b8:a4:4a:1a:84:d8:78:fd:50:
dc:9a:82:d3:24:40:48:69:d0:53:89:bc:c0:f1:7d:7e:ea:eb:
56:9a:26:87:69:24:50:b0:f9:f9:14:55:07:53:62:ab:55:66:
93:e3:e6:99:0b:8e:79:80:d2:5a:26:3d:d7:02:c6:1a:94:64:
df:e6:89:f5:0c:b0:d1:db:4b:4b:2f:44:51:9e:2c:a1:c5:bd:
2e:03:4d:5d:da:4a:bc:3a:14:e8:9b:97:97:5b:ec:bb:cd:13:
d3:3f:6f:63:cb:7e:19:f5:1b:66:bf:d8:c2:b2:ca:15:53:e0:
07:c3:2b:03:bb:f8:37:8b:1a:cb:09:0b:54:6e:12:b2:6d:ac:
14:a3:72:b9:cd:60:15:ac:71:d0:4a:ea:c5:53:2e:bb:23:e7:
ce:be:62:a0:ad:0a:33:5a:7f:53:76:ff:e6:40:37:ac:cf:2e:
d4:29:65:d7:f1:15:62:11:50:c9:f4:95:e3:fe:59:1f:e8:e3:
8d:a1:f8:2f:8c:6f:3f:af:a8:c5:12:67:e7:7d:4c:06:74:ff:
b1:34:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:02:15 2025 by rpki-client