Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/9VCWXkatYJ3ESMbCaKx1Q3PgSTU.roa
File: 9VCWXkatYJ3ESMbCaKx1Q3PgSTU.roa (raw, json)
Hash identifier: ZMgX7WnteThsvsNnKSDN1aaNlfhZg64e4j4Ovh8Mbfo=
Subject key identifier: F5:50:96:5E:46:AD:60:9D:C4:48:C6:C2:68:AC:75:43:73:E0:49:35
Certificate issuer: /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial: 0194266B626855F1FBA27E119489CED5B2F8
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/9VCWXkatYJ3ESMbCaKx1Q3PgSTU.roa
Signing time: Thu 02 Jan 2025 09:49:19 +0000
ROA not before: Thu 02 Jan 2025 09:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29226
IP address blocks: 91.240.242.0/24 maxlen: 24
193.105.93.0/24 maxlen: 24
195.43.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:62:68:55:f1:fb:a2:7e:11:94:89:ce:d5:b2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Validity
Not Before: Jan 2 09:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f550965e46ad609dc448c6c268ac754373e04935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:a4:46:a3:a1:d9:a4:0c:b9:3b:6d:58:08:
7e:e7:cf:ab:f2:bf:0e:56:c3:ca:a7:c5:05:07:bd:
bb:eb:23:7d:22:0a:68:6e:ad:79:5c:48:d6:4b:34:
02:9b:1f:69:33:97:b2:97:bd:13:15:2c:d8:e9:bc:
c8:7e:de:94:87:0b:65:34:89:0f:9d:57:cc:48:2e:
f3:c4:84:af:9b:26:6d:13:56:0c:0e:15:e0:76:86:
b4:63:f0:38:12:6a:9c:05:9d:a8:99:71:76:4c:3e:
38:f1:3a:78:ac:26:1f:4d:7e:e5:24:e4:86:e1:31:
94:06:03:f9:34:94:13:82:85:0d:3c:72:99:4f:05:
27:0d:ac:53:3c:2f:24:9f:03:b6:1e:97:77:ea:84:
b8:e5:df:65:e3:ef:40:54:1a:36:af:19:4b:b6:d7:
e5:62:00:aa:3c:12:29:36:6b:40:f1:f0:ee:ea:33:
8d:b2:76:c4:46:20:ef:4e:b9:83:cf:fe:db:5e:74:
fc:9f:25:fb:42:2e:83:d7:0e:c0:0e:01:e4:9c:d7:
5c:d9:86:2c:28:6a:1b:ff:bc:b9:27:84:f6:b8:4a:
d8:0a:e2:18:ae:14:5e:98:30:5b:8e:c2:33:83:c5:
6d:11:3a:7e:b9:16:de:c2:31:e7:7a:01:1c:bb:1f:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:50:96:5E:46:AD:60:9D:C4:48:C6:C2:68:AC:75:43:73:E0:49:35
X509v3 Authority Key Identifier:
keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/9VCWXkatYJ3ESMbCaKx1Q3PgSTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.242.0/24
193.105.93.0/24
195.43.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:38:8f:9b:4e:23:26:05:4b:8f:e8:78:61:9e:49:a6:05:f6:
89:66:2d:eb:d7:b3:78:dd:8a:1d:b3:bf:57:7c:71:2d:3b:a9:
68:65:ef:61:f8:da:46:9b:52:82:b8:06:86:66:7e:eb:84:2c:
ba:09:4f:7d:07:79:06:c6:80:10:b0:f1:8c:db:da:4e:6b:4a:
5f:b0:6f:08:d6:96:7c:58:11:eb:2c:ac:82:ad:bf:71:c7:6b:
33:cd:70:56:ff:bc:43:2d:3f:6e:c4:50:b5:39:cb:d8:e6:49:
e3:31:41:40:51:d4:1d:0f:1e:25:a5:33:36:a2:61:df:dc:7f:
4f:49:f8:10:ea:e2:bb:b0:e4:d5:8b:a3:95:f6:74:ab:d0:6e:
16:6d:e2:81:bf:76:19:8e:de:67:08:1a:4a:c1:dd:9b:6d:05:
0f:7b:f6:16:a9:d7:38:bd:c5:b8:4a:38:cc:43:3f:5a:fa:57:
57:83:fd:20:6b:5e:6c:32:f2:df:a3:fc:f9:be:88:d8:32:e1:
08:3f:67:40:d9:b3:a2:f1:68:64:a2:69:4a:cd:6c:3b:09:46:
bc:29:3e:26:ef:4f:e0:0c:da:db:3a:d3:71:0b:bb:67:28:36:
b5:c0:ed:e6:63:84:12:97:85:5f:36:4f:df:a2:b2:19:a9:eb:
a2:25:7b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:31:30 2025 by rpki-client