Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/w9q_FLnEYi6mMGLHNxrzvfLgYJ4.roa
File: w9q_FLnEYi6mMGLHNxrzvfLgYJ4.roa (raw, json)
Hash identifier: tRbBa7QkfAKJaQVPfhVVFf8/W8ntAnk0VCwj65NPw8Q=
Subject key identifier: C3:DA:BF:14:B9:C4:62:2E:A6:30:62:C7:37:1A:F3:BD:F2:E0:60:9E
Certificate issuer: /CN=0f657093f326547bf25a9985c81cf1403140a3a8
Certificate serial: 01941F8C0E7C301CBD602A62B8DB897569CB
Authority key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/w9q_FLnEYi6mMGLHNxrzvfLgYJ4.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207044
IP address blocks: 185.138.112.0/22 maxlen: 22
185.138.112.0/24 maxlen: 24
185.138.113.0/24 maxlen: 24
185.138.114.0/24 maxlen: 24
185.138.115.0/24 maxlen: 24
185.241.132.0/22 maxlen: 22
2a0d:4707::/38 maxlen: 38
2a0d:4707:400::/38 maxlen: 38
2a0d:4707:800::/38 maxlen: 38
2a0d:4707:c00::/38 maxlen: 38
2a0d:4707:1000::/38 maxlen: 38
2a0d:4707:1400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0e:7c:30:1c:bd:60:2a:62:b8:db:89:75:69:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f657093f326547bf25a9985c81cf1403140a3a8
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3dabf14b9c4622ea63062c7371af3bdf2e0609e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:cf:de:a9:bc:d5:f5:04:55:2f:6b:d7:91:
b6:09:12:82:b4:d6:ac:f8:21:96:47:bf:83:ae:5e:
80:e4:de:db:77:68:2b:32:c4:05:ff:24:5d:8b:8d:
00:60:3f:21:74:ae:9e:00:f1:50:62:4a:40:8f:96:
a3:b9:3b:60:ec:30:4b:95:41:8d:70:ff:f8:25:ca:
54:57:00:6c:97:92:db:d0:30:91:ab:76:51:3e:93:
a2:81:c0:af:16:3e:b3:ab:00:f0:c6:48:57:0a:e4:
95:0d:bb:3f:f9:50:ec:26:ef:6e:69:92:ba:f1:83:
b7:8b:9e:fc:fd:19:09:6c:7d:cc:4a:1e:31:36:c9:
0b:15:f8:6f:b7:74:7f:1d:82:d8:18:2c:27:b4:c7:
d1:ae:dc:28:80:ab:93:ba:f0:7f:57:04:2e:66:75:
cf:65:08:17:f1:81:24:bc:b9:4b:b7:5c:06:17:1e:
2f:bd:50:4e:60:35:8c:31:d6:ed:bd:ef:03:16:90:
72:d3:d0:2b:ad:fe:7e:84:81:a1:8b:18:e8:77:57:
fc:a9:8a:f0:e6:b7:5c:4a:a7:2f:6c:2d:cc:f4:7c:
45:1a:b8:36:41:1c:b1:e2:e5:df:67:26:a8:99:7e:
bb:2c:2f:7a:b5:52:61:6e:47:f0:6b:69:2e:6c:1d:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DA:BF:14:B9:C4:62:2E:A6:30:62:C7:37:1A:F3:BD:F2:E0:60:9E
X509v3 Authority Key Identifier:
keyid:0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/w9q_FLnEYi6mMGLHNxrzvfLgYJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.112.0/22
185.241.132.0/22
IPv6:
2a0d:4707::-2a0d:4707:17ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
47:b5:26:37:d7:e0:cc:cf:41:21:13:20:a5:4f:42:9f:1c:ac:
37:47:97:e5:49:1f:9f:f1:2e:51:b7:13:5c:85:ab:a1:67:53:
02:be:e7:2c:2c:ff:58:75:bc:d2:71:dd:4c:60:1a:76:6c:41:
e9:00:51:17:f0:7d:a9:e3:b9:6d:d6:22:42:64:5a:b4:a5:22:
65:68:5a:ed:25:07:e0:a5:d1:30:a2:80:bd:21:a4:f3:85:1b:
3d:02:f1:43:53:94:d4:6d:5f:06:b4:57:1e:51:91:e6:45:ba:
b3:2c:6e:41:80:ec:1b:88:44:f2:dc:86:c2:52:89:f2:a6:c9:
fd:90:e2:b7:81:5d:1e:d8:84:97:a8:9e:3c:a8:26:8b:45:3c:
7f:5a:74:fd:72:ff:36:54:d4:01:c4:40:49:27:6d:75:f2:bb:
2a:7b:b8:b0:d1:52:f9:72:a5:eb:e1:fb:43:96:e1:7a:90:b4:
9e:a4:1c:2d:f6:43:3c:dd:cb:f6:cf:d1:0b:ce:ab:86:7b:34:
2c:30:a8:0d:ee:0b:57:d9:e2:b5:59:f8:16:a0:51:d5:8d:85:
2d:3e:05:25:a9:a2:f2:3c:fe:1c:05:96:be:f7:30:03:ab:54:
71:69:62:a4:e5:2f:da:bb:58:67:e1:60:75:90:60:96:95:86:
ea:f4:17:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:33:19 2025 by rpki-client