Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/9pMjaJdgappxiU1Tk0UMIRy3SNc.roa
File: 9pMjaJdgappxiU1Tk0UMIRy3SNc.roa (raw, json)
Hash identifier: KKwO3btWZ5ddNVsSe6VCRqppaOicRKCDauf9ToA7uzQ=
Subject key identifier: F6:93:23:68:97:60:6A:9A:71:89:4D:53:93:45:0C:21:1C:B7:48:D7
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 019428231AFCF5542F07C28F190C084D255C
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/9pMjaJdgappxiU1Tk0UMIRy3SNc.roa
Signing time: Thu 02 Jan 2025 17:49:36 +0000
ROA not before: Thu 02 Jan 2025 17:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203898
IP address blocks: 185.122.0.0/24 maxlen: 24
2a06:98c0:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:1a:fc:f5:54:2f:07:c2:8f:19:0c:08:4d:25:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 2 17:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f693236897606a9a71894d5393450c211cb748d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:ad:28:7a:c3:35:6e:3c:b0:27:92:05:d3:
e8:1b:4f:a2:04:a8:12:5e:4d:12:aa:8e:a0:f0:a1:
72:d3:6a:ca:29:f4:42:0e:c9:6b:8d:24:f4:cb:c8:
9a:01:55:4d:81:f9:1c:7d:62:7f:b3:8d:62:95:d0:
0a:f0:25:78:95:96:a1:6d:e4:91:fb:90:69:22:b5:
22:67:84:d6:f8:01:c3:c1:b2:ac:e7:6e:e2:0f:95:
27:e3:c6:80:e2:19:61:fc:56:25:83:e6:10:a2:f2:
a7:9c:a9:78:c2:e7:e4:8a:1a:46:f0:4f:b3:a9:2d:
7e:e3:3f:98:8b:aa:4a:59:6a:ce:db:0f:37:0c:b2:
3b:96:40:f0:c9:c3:1b:67:51:95:5c:83:f2:25:2d:
f7:5b:43:af:cc:a9:a0:a8:9c:c1:f8:c2:04:fe:28:
18:9f:5f:cf:e9:51:b8:1f:63:f7:a3:b5:93:90:73:
23:91:29:93:de:62:43:9c:dc:72:78:6c:cd:51:0a:
43:04:60:05:d4:cc:c6:4e:f9:86:de:b8:bc:93:ef:
70:87:bb:8e:44:ea:e3:57:81:84:df:ac:69:5c:06:
85:67:01:46:c7:4b:d2:b7:06:be:3b:d4:87:61:94:
1c:12:82:a3:4b:96:be:39:5f:34:5c:02:dd:2c:cb:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:93:23:68:97:60:6A:9A:71:89:4D:53:93:45:0C:21:1C:B7:48:D7
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/9pMjaJdgappxiU1Tk0UMIRy3SNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.0.0/24
IPv6:
2a06:98c0:1000::/48
Signature Algorithm: sha256WithRSAEncryption
3b:ab:d4:8d:bf:eb:14:b5:af:55:91:a2:fc:76:fd:42:6d:be:
c7:9c:75:3c:9e:9a:22:5f:30:0f:9f:4a:fe:7d:21:51:cc:2b:
e9:ac:1e:ac:85:4d:ac:c7:e9:db:be:6a:89:8e:7f:d5:c8:ba:
00:83:b1:25:0e:81:48:4e:43:cc:69:88:b1:a3:33:c2:f7:01:
6b:7d:de:52:0a:79:f4:f0:fc:73:2d:4e:2c:05:0d:69:14:36:
81:34:fb:56:65:03:1f:8d:22:39:89:a5:cf:75:f7:03:bb:de:
d1:ad:ff:6c:59:b3:64:36:58:86:83:4a:4f:48:76:63:21:55:
dc:a4:ff:a4:32:14:f1:e9:bc:91:17:3e:c1:2b:53:63:2c:dc:
aa:cc:f9:a2:d7:8d:c6:eb:8c:db:9b:56:aa:64:79:ee:3a:a4:
39:4f:f3:d1:38:69:2c:08:2d:02:08:c3:72:c6:f8:ba:6f:57:
12:18:e8:8c:d1:7d:d0:c0:bf:74:67:e5:e8:b2:a0:e6:2a:a6:
9b:30:d3:0a:f2:4c:ce:c4:b0:62:4a:c9:3e:9c:62:8a:22:01:
39:84:78:4e:03:ce:4e:0a:4e:09:d6:cf:4d:a4:a5:6b:ee:db:
e3:20:16:40:5d:ea:9d:82:c5:c6:e1:e7:23:b3:b8:ca:65:be:
0b:1d:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:32:25 2025 by rpki-client