Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/26hYMSP5I24sSK8G8ARAORN91aI.roa
File: 26hYMSP5I24sSK8G8ARAORN91aI.roa (raw, json)
Hash identifier: fE1Nc8BOxk+V3SDxaatTnZ1kS+wI1f9B8qy0zBZMF/Y=
Subject key identifier: DB:A8:58:31:23:F9:23:6E:2C:48:AF:06:F0:04:40:39:13:7D:D5:A2
Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial: 019425FC60DFC9422A009208ED69A934C19E
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/26hYMSP5I24sSK8G8ARAORN91aI.roa
Signing time: Thu 02 Jan 2025 07:48:04 +0000
ROA not before: Thu 02 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203214
IP address blocks: 109.224.0.0/18 maxlen: 18
109.224.0.0/21 maxlen: 21
109.224.1.0/24 maxlen: 24
109.224.2.0/23 maxlen: 23
109.224.2.0/24 maxlen: 24
109.224.3.0/24 maxlen: 24
109.224.4.0/22 maxlen: 22
109.224.5.0/24 maxlen: 24
109.224.8.0/21 maxlen: 21
109.224.8.0/22 maxlen: 22
109.224.12.0/23 maxlen: 23
109.224.12.0/24 maxlen: 24
109.224.13.0/24 maxlen: 24
109.224.14.0/23 maxlen: 23
109.224.14.0/24 maxlen: 24
109.224.15.0/24 maxlen: 24
109.224.16.0/22 maxlen: 22
109.224.20.0/22 maxlen: 22
109.224.24.0/22 maxlen: 22
109.224.28.0/24 maxlen: 24
109.224.29.0/24 maxlen: 24
109.224.30.0/23 maxlen: 23
109.224.32.0/22 maxlen: 22
109.224.32.0/24 maxlen: 24
109.224.36.0/22 maxlen: 22
109.224.40.0/21 maxlen: 21
109.224.40.0/24 maxlen: 24
109.224.41.0/24 maxlen: 24
109.224.42.0/23 maxlen: 23
109.224.42.0/24 maxlen: 24
109.224.43.0/24 maxlen: 24
109.224.44.0/22 maxlen: 22
109.224.44.0/24 maxlen: 24
109.224.45.0/24 maxlen: 24
109.224.46.0/24 maxlen: 24
109.224.47.0/24 maxlen: 24
109.224.48.0/21 maxlen: 21
109.224.48.0/22 maxlen: 22
109.224.52.0/22 maxlen: 22
109.224.56.0/21 maxlen: 21
109.224.56.0/22 maxlen: 22
109.224.60.0/22 maxlen: 22
185.118.96.0/22 maxlen: 22
185.118.96.0/24 maxlen: 24
185.141.8.0/24 maxlen: 24
185.141.9.0/24 maxlen: 24
185.141.10.0/24 maxlen: 24
185.141.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:60:df:c9:42:2a:00:92:08:ed:69:a9:34:c1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Validity
Not Before: Jan 2 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dba8583123f9236e2c48af06f0044039137dd5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:a3:47:47:d7:a1:99:c7:cd:cf:2c:3a:af:
6d:55:05:e6:61:f6:e9:b7:03:ac:f3:0f:49:e4:54:
2f:d2:39:c7:b2:99:8b:84:ae:aa:50:3c:f1:18:d9:
e8:80:34:a9:5e:79:44:8a:69:4b:f1:d4:fb:2d:92:
0b:b1:d8:c9:a5:ba:b5:2b:4f:ea:af:3f:c8:6e:20:
d7:d8:c3:2c:aa:90:ec:50:78:56:6b:92:c1:3d:f2:
dc:50:53:4d:a4:1e:82:9c:49:93:3f:53:27:4e:9d:
a6:05:d2:6b:8e:24:0b:ed:94:66:4c:bb:9b:7d:6b:
86:a3:23:c8:a6:17:af:4d:4a:49:41:65:56:0b:02:
aa:20:25:7d:df:dd:82:8e:e0:42:7e:14:04:8b:11:
71:5b:ea:4d:79:41:3c:68:7f:8f:03:7d:02:47:c8:
3a:4d:db:0f:4e:4e:7e:ab:c1:f3:e3:fb:c5:4f:cd:
e7:89:28:4c:72:dd:f6:a5:01:62:a3:73:ee:de:36:
b8:20:71:37:e6:a7:79:46:e6:cf:c4:8e:c2:54:93:
3e:57:7d:9c:c1:ea:c3:71:2d:55:66:f3:e6:ff:75:
ef:8a:c3:e6:d1:93:1f:ab:45:07:51:6a:e3:14:ab:
4c:c3:22:95:ac:b5:f6:1a:25:b2:7c:55:e2:d7:da:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A8:58:31:23:F9:23:6E:2C:48:AF:06:F0:04:40:39:13:7D:D5:A2
X509v3 Authority Key Identifier:
keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/26hYMSP5I24sSK8G8ARAORN91aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.0.0/18
185.118.96.0/22
185.141.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:b7:a3:dc:49:0d:b9:fd:1a:82:8b:be:8a:8f:37:be:3b:71:
51:41:3b:54:2a:8c:91:c3:c4:fd:da:e2:e7:00:90:52:d5:ab:
21:65:94:ae:58:ff:c4:64:d1:25:5e:f8:77:89:0b:c8:c2:af:
3b:17:a2:ff:71:97:ac:c3:4c:63:39:70:70:1e:39:ef:0b:7c:
c6:5e:3e:32:5a:71:23:4c:e6:47:16:ba:ad:a5:29:68:d4:75:
1b:60:d7:be:e1:1c:5c:b3:b2:64:7a:48:37:87:e5:38:d3:5c:
67:14:4d:c1:23:80:23:b3:02:88:13:49:8c:a3:93:71:ba:0a:
b2:34:a6:e2:c5:b2:6a:0c:7b:1b:da:c0:eb:27:03:7e:e6:f5:
bb:c9:2c:01:54:45:a6:a5:fd:3c:47:8d:8c:88:5d:2a:63:4a:
d6:4a:0b:15:ec:ee:54:4d:13:11:f8:9a:74:14:14:96:4c:7c:
1e:fb:07:e0:1e:d3:df:a4:e0:e8:0c:d4:04:a3:f3:db:40:8e:
77:07:a9:1f:61:5a:9c:8c:31:d8:e1:1a:02:fe:ea:37:5c:20:
9c:f0:fc:92:2a:dc:41:48:01:26:8e:54:55:3b:b1:66:9b:de:
d1:12:80:26:56:65:e9:ea:63:e6:9e:c7:34:09:e8:ea:a1:bc:
24:f0:f1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:14:48 2025 by rpki-client