Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/g9_cCHOygBfLxiOtroOnxubtMJA.roa
File: g9_cCHOygBfLxiOtroOnxubtMJA.roa (raw, json)
Hash identifier: qU4icAOSJQu8XXxoezDB/ct0KkhMiaQKajapbddY5xQ=
Subject key identifier: 83:DF:DC:08:73:B2:80:17:CB:C6:23:AD:AE:83:A7:C6:E6:ED:30:90
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421441F106CF77786F0F409DFBBA7E7EC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/g9_cCHOygBfLxiOtroOnxubtMJA.roa
Signing time: Wed 01 Jan 2025 09:48:20 +0000
ROA not before: Wed 01 Jan 2025 09:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214209
IP address blocks: 82.153.138.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1f:10:6c:f7:77:86:f0:f4:09:df:bb:a7:e7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83dfdc0873b28017cbc623adae83a7c6e6ed3090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:a5:c4:be:46:fd:bd:66:fc:c7:3d:8d:5a:
6e:f0:fa:9a:be:cf:d7:7f:76:1a:fb:ed:56:2f:e4:
49:48:0c:83:17:b3:aa:9a:f5:8b:5d:62:30:45:ec:
5a:fc:7f:99:cf:7e:93:39:a1:47:3d:86:57:22:76:
57:a0:80:c7:5a:01:ec:61:24:33:d5:f2:43:dc:28:
3e:09:e8:ce:c0:61:db:7b:c5:c5:10:85:9a:cf:18:
89:30:6f:ca:b0:b5:2d:a5:b4:a8:f5:d3:95:f2:3b:
b2:db:e9:55:0d:a3:8c:a2:9f:ed:54:82:ad:97:19:
3a:67:4c:2e:fb:74:58:54:04:7c:28:bf:dc:fa:cc:
c0:88:b2:4a:6e:16:61:a4:8d:4f:59:dd:1f:9c:e6:
be:3a:f2:78:e5:7d:68:61:fe:e0:47:24:6b:99:22:
f8:f2:20:fd:78:ef:bf:0d:65:a5:a2:f9:fd:da:4c:
0c:35:ed:fb:ff:cb:9e:c5:0e:22:c0:5a:b0:66:61:
8c:16:5a:9b:d7:7f:04:a5:29:dc:3c:b3:f0:ae:9c:
ae:0f:fe:2f:7a:02:c1:ea:1b:2b:fb:b2:79:4f:7f:
02:56:ee:4b:29:82:86:71:30:61:19:ee:59:e1:34:
46:2a:19:23:e0:e2:fc:24:0e:18:33:83:54:9b:6e:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DF:DC:08:73:B2:80:17:CB:C6:23:AD:AE:83:A7:C6:E6:ED:30:90
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/g9_cCHOygBfLxiOtroOnxubtMJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.138.0/24
89.213.174.0/24
Signature Algorithm: sha256WithRSAEncryption
69:3c:04:25:9a:5d:79:b9:58:cd:4a:cf:8a:76:6d:c3:0f:2e:
9b:7e:e5:c2:1d:2f:6e:ac:17:de:01:9d:47:f1:72:f8:60:0e:
3f:dc:2a:a5:a9:a7:0f:26:3b:d0:fd:b9:c3:f7:7c:23:3c:06:
dc:09:04:01:8b:6e:43:c2:00:7c:b3:d1:f9:6b:17:be:13:1e:
00:45:73:17:4b:93:2a:60:1e:b2:8f:b4:37:ec:96:7b:8e:6c:
f6:10:91:44:0d:5d:e0:64:bd:bb:45:91:2e:23:f5:bd:10:e9:
5a:ca:68:83:0b:35:1f:0a:5d:ef:4c:7a:67:2f:9f:7c:ed:ec:
ce:43:3a:c9:b5:4c:54:ab:4b:53:a8:31:11:c4:9c:ba:19:39:
67:f3:ba:ad:2c:87:cf:53:c6:db:47:77:e2:d7:79:84:e5:5f:
50:9e:3e:15:eb:e0:07:76:e2:85:62:87:31:f5:5a:83:78:6a:
b2:0c:f4:3f:25:6f:99:77:d6:3e:55:d5:cd:ba:88:5a:6f:e2:
30:68:0c:ed:4c:d9:4c:a8:ff:a0:78:e1:e1:13:79:52:48:8b:
43:b7:85:c8:57:25:a5:f5:74:08:1c:6e:68:5b:6f:da:db:4f:
2b:04:0e:a8:f8:8a:b2:62:72:e9:a5:a8:0f:41:21:b2:0a:c2:
35:a6:42:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:42:53 2025 by rpki-client