Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/9AG_khzlUq_52M_uwAyAT--X2D8.roa
File: 9AG_khzlUq_52M_uwAyAT--X2D8.roa (raw, json)
Hash identifier: j5npHva08ps2FjnGO8hTZ3BTaOYOIDt9K8fTqv+VPPw=
Subject key identifier: F4:01:BF:92:1C:E5:52:AF:F9:D8:CF:EE:C0:0C:80:4F:EF:97:D8:3F
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 01941FFA5C290BC680C2D0FB8F92ABB79C5C
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/9AG_khzlUq_52M_uwAyAT--X2D8.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196880
IP address blocks: 91.226.147.0/24 maxlen: 24
193.104.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5c:29:0b:c6:80:c2:d0:fb:8f:92:ab:b7:9c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f401bf921ce552aff9d8cfeec00c804fef97d83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:e6:99:89:80:1a:31:1b:2f:c7:14:17:af:
31:c5:0b:33:ea:bf:f3:9d:50:26:27:0d:3f:75:76:
a4:d6:b2:3b:ce:42:58:2e:a8:60:6d:a4:7a:64:28:
bb:2a:89:a1:64:30:12:89:1f:61:6a:cb:35:d0:17:
64:ea:5c:4a:66:15:54:c1:3f:ba:a5:9d:d0:c2:bc:
56:60:ec:ed:7d:36:59:62:5a:c4:4b:36:81:04:d6:
ef:61:23:67:42:f3:65:2e:00:44:7f:be:14:73:d4:
be:d2:f6:e3:e8:59:ce:17:ae:ca:34:9d:e2:fc:eb:
6d:82:d7:3f:b2:e8:6c:87:c1:47:7c:39:81:98:bb:
1b:ba:0b:ed:5c:42:49:70:36:62:26:fb:2a:52:8c:
84:41:01:f5:c2:1e:44:da:01:b0:38:a7:06:ae:50:
15:8d:f7:7b:4b:87:91:34:76:20:8e:9f:46:11:1a:
33:ca:21:91:e2:2f:25:95:1d:c8:a8:ad:20:ed:d0:
10:81:ea:c0:2e:8c:93:b8:92:0f:ae:9b:c6:4c:61:
06:3b:be:12:ec:8c:60:09:15:db:1f:db:5b:c9:5d:
45:e1:92:95:ee:fe:8a:d8:cf:5c:9c:05:0a:2e:b7:
bc:c9:45:fb:1f:a9:1f:45:85:fc:bf:01:66:64:7e:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:01:BF:92:1C:E5:52:AF:F9:D8:CF:EE:C0:0C:80:4F:EF:97:D8:3F
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/9AG_khzlUq_52M_uwAyAT--X2D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.147.0/24
193.104.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1a:1b:4d:6d:17:a0:01:ca:5e:cb:c1:bc:4f:ae:0c:c8:40:
94:73:5e:44:97:e6:c1:1f:88:91:cc:a9:05:fe:c5:58:bd:9c:
09:d9:78:a4:ca:68:1b:2f:84:cc:44:2b:e3:1a:9b:16:b5:04:
de:f9:2c:73:0d:ac:56:fd:0d:ef:8a:e4:0c:b5:7f:6e:30:af:
34:c9:79:54:78:a6:c1:85:85:10:d0:03:df:6e:01:92:51:7b:
89:3d:cb:d8:36:8e:8e:2a:c9:15:73:48:c7:07:0d:08:ea:61:
c9:d0:d1:ce:82:d7:6b:b3:23:69:a1:cd:1c:5b:b8:b2:18:c6:
c5:30:ba:29:f0:4e:41:38:a3:84:5c:61:52:e2:f4:b1:71:4b:
09:2b:da:64:6f:a0:c9:cf:67:5b:42:80:58:20:42:6a:38:60:
fa:83:f7:56:19:b5:46:89:35:ca:50:da:37:35:27:4e:88:78:
12:80:61:af:e9:0a:39:27:ff:fb:ed:36:d8:bc:4b:36:b1:ed:
12:4c:4c:79:b7:ee:3e:67:92:d0:23:df:a9:a7:1b:59:7b:d3:
5b:8d:c4:03:d3:30:72:3e:9c:9d:ff:cc:2a:49:e6:dc:a6:7a:
5f:b4:a3:3a:40:57:a4:c7:dc:48:8e:c0:49:26:d8:6b:11:d7:
a7:29:67:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:32 2025 by rpki-client