Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/9xMeWe1NRlriC37gII2JZoSHiUQ.roa
File: 9xMeWe1NRlriC37gII2JZoSHiUQ.roa (raw, json)
Hash identifier: v9S3o8GCSV8SJhwMOSoO5rVmagcl/wlT4/BQbEi4mBI=
Subject key identifier: F7:13:1E:59:ED:4D:46:5A:E2:0B:7E:E0:20:8D:89:66:84:87:89:44
Certificate issuer: /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial: 0194252095F73CC1CC00A5C60D665CC7A65B
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/9xMeWe1NRlriC37gII2JZoSHiUQ.roa
Signing time: Thu 02 Jan 2025 03:47:59 +0000
ROA not before: Thu 02 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51809
IP address blocks: 45.82.140.0/22 maxlen: 22
63.135.72.0/21 maxlen: 21
67.208.52.0/22 maxlen: 22
185.232.119.0/24 maxlen: 24
2a10:d580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:95:f7:3c:c1:cc:00:a5:c6:0d:66:5c:c7:a6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
Validity
Not Before: Jan 2 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7131e59ed4d465ae20b7ee0208d896684878944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:8a:73:84:c8:73:58:59:b4:b5:9a:eb:63:
0c:40:3f:fb:c2:3a:6c:c1:e0:18:67:d0:dc:c8:b3:
92:fb:c1:98:22:8d:1b:42:a2:0a:a3:4c:37:aa:04:
1a:2e:9d:1a:69:94:8c:a3:e7:bd:f4:42:52:09:5f:
c5:b3:4d:6e:47:22:c7:c7:20:5a:08:29:d1:70:69:
01:24:de:a8:8f:82:07:02:94:8f:59:65:e7:72:63:
f0:1c:79:96:2b:b8:bc:8a:3e:60:2f:60:98:37:c9:
02:83:28:79:61:a4:56:eb:29:91:b7:86:00:4d:c2:
90:fc:5e:1d:c9:99:d3:85:20:71:bc:61:c3:41:05:
15:81:f7:65:10:4b:ff:02:a5:ae:b3:8d:02:1b:6a:
60:4e:3e:a0:be:46:19:b3:1f:63:9d:2b:5f:39:e3:
9e:e8:ec:02:8b:d9:d7:58:ef:37:fb:f6:e0:24:bf:
69:6f:19:0d:34:b1:30:6e:a2:06:61:0a:3b:d6:49:
0c:5f:f0:de:e9:2e:55:19:a2:f2:af:65:ef:71:2b:
9f:6a:33:38:fe:d9:37:50:b8:bd:76:72:d5:d1:1a:
02:63:e2:52:4f:29:9d:cf:41:cd:66:97:06:3a:9b:
bf:1a:18:7a:ff:1f:4f:d3:fe:a5:bd:fd:e8:c8:73:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:13:1E:59:ED:4D:46:5A:E2:0B:7E:E0:20:8D:89:66:84:87:89:44
X509v3 Authority Key Identifier:
keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/9xMeWe1NRlriC37gII2JZoSHiUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.140.0/22
63.135.72.0/21
67.208.52.0/22
185.232.119.0/24
IPv6:
2a10:d580::/29
Signature Algorithm: sha256WithRSAEncryption
28:71:75:97:d0:93:ef:b6:c3:7b:4e:e5:97:c6:14:3e:83:27:
05:27:e1:92:af:bb:f7:0c:b1:f3:0a:a2:88:ae:eb:1c:1d:d3:
ad:76:6c:5f:9f:ec:48:b5:cc:89:7a:c2:19:80:f1:84:74:52:
fb:0d:20:78:85:d7:f4:ed:80:61:be:68:03:ae:6f:cc:9c:66:
5f:17:15:f8:0f:3e:a8:b4:9a:c3:cd:6c:14:cf:7a:66:8f:44:
77:7e:18:5d:36:ce:04:64:e2:2a:b0:9c:0c:d0:50:87:7e:a1:
49:a2:d4:c3:01:95:2b:39:e9:9a:7a:31:64:d3:72:e4:19:a4:
15:0b:ab:21:ce:02:86:01:da:f8:39:d9:57:89:c6:10:07:9c:
8e:20:f4:74:01:4a:b6:2f:a5:87:e2:77:87:27:0e:60:ba:00:
d7:ac:ff:d0:47:ca:cf:07:e5:9f:f9:ed:f1:e9:35:74:dc:b7:
fc:77:39:73:46:00:a2:26:09:1b:8a:e0:b3:5f:93:c3:88:58:
75:64:1b:5a:d7:1d:73:14:0a:03:73:9f:b4:4a:a4:db:1b:be:
10:27:c7:d6:85:e4:5f:98:d5:5c:52:21:7a:19:90:21:a2:bb:
73:32:46:fa:b0:d9:ce:92:4b:4c:c7:da:b5:23:87:79:9d:9d:
a1:21:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:19:41 2025 by rpki-client