Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/p9dINsaBxRj5ZfheZSHkUAbJr64.roa
File: p9dINsaBxRj5ZfheZSHkUAbJr64.roa (raw, json)
Hash identifier: jntmT3waIC3WBZyzqGqLNCzc/4GI7KD2z6eLdZU4TJY=
Subject key identifier: A7:D7:48:36:C6:81:C5:18:F9:65:F8:5E:65:21:E4:50:06:C9:AF:AE
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B598E2C5B09CDF1516EE22453ED18
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/p9dINsaBxRj5ZfheZSHkUAbJr64.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61071
IP address blocks: 95.158.144.0/24 maxlen: 24
185.18.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:59:8e:2c:5b:09:cd:f1:51:6e:e2:24:53:ed:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7d74836c681c518f965f85e6521e45006c9afae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:42:11:36:52:e1:de:6c:2a:3c:f7:42:b9:6c:
f7:1c:45:01:16:94:5c:8a:50:60:1e:92:94:b5:14:
5f:a4:49:8c:04:31:53:01:04:10:98:ed:db:cb:22:
28:5c:07:dc:d0:9e:e3:68:32:2a:15:e2:95:cc:8d:
3a:83:1e:9e:f6:1d:2a:8a:06:cf:3a:cb:9b:22:6b:
59:a8:2a:f0:93:72:d8:f6:cd:d1:10:dc:bb:e5:f3:
9a:1f:ea:92:b5:4d:4f:68:81:a5:10:40:f8:91:fb:
71:51:e8:a6:87:13:0e:a7:e3:8c:e7:00:63:f0:46:
9c:8b:dd:5f:27:ae:c5:5e:7c:a3:f2:d4:32:a9:96:
79:79:f9:2b:66:e6:50:b1:c4:af:7c:dd:54:be:04:
a6:1c:eb:44:df:03:2a:01:92:36:d9:93:03:70:af:
08:14:0d:32:fa:0b:f9:c1:2b:88:00:f2:68:54:0e:
71:29:ab:21:6a:2b:7c:de:df:eb:17:2c:cd:84:bb:
01:b3:1a:ae:cc:71:fd:92:ce:5e:06:49:23:c3:4d:
a4:e2:a9:a7:b8:e6:3f:3c:ea:f1:29:3d:46:98:81:
b2:67:76:69:bb:85:3b:54:dd:29:37:8a:0e:95:da:
f3:31:aa:15:f6:2f:56:09:27:f3:bc:02:f1:98:e9:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:48:36:C6:81:C5:18:F9:65:F8:5E:65:21:E4:50:06:C9:AF:AE
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/p9dINsaBxRj5ZfheZSHkUAbJr64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.158.144.0/24
185.18.230.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:8a:31:be:82:fe:c0:ec:e8:e7:4e:85:c8:cd:b2:2a:cf:50:
28:24:dd:7e:97:db:a3:e2:32:17:18:e3:cb:05:bf:b0:38:9f:
fc:a2:59:98:43:bd:aa:ba:3b:b6:d1:a9:cc:7e:3d:06:e5:af:
7f:38:8f:8c:85:3b:99:6c:d3:a8:15:f6:24:85:7b:d4:01:9a:
52:1d:69:b8:07:92:ff:f6:7c:dc:43:eb:10:c8:f9:8a:54:35:
17:3e:ff:e7:2b:2a:ee:3c:df:cd:9d:31:ff:6f:60:2c:44:88:
e4:f1:a9:8f:30:ca:79:c5:dc:0f:55:91:86:6b:e3:7a:f5:c7:
5d:a4:e6:2d:75:75:34:dd:d4:0e:5b:d3:be:54:7f:18:32:ff:
da:f0:ed:0a:bd:ed:4b:9f:1e:91:bb:54:37:2b:8b:47:f5:be:
e1:0e:65:81:25:27:53:a6:80:dc:ec:2d:c3:d6:b3:40:a0:89:
ff:c3:74:97:8b:58:d6:6d:bc:f7:fc:a8:f2:e7:63:40:89:51:
ad:8e:d6:bd:8e:52:71:54:b9:f4:1d:4d:34:18:f2:7f:a1:65:
89:7e:08:7d:ed:e5:62:2d:05:e1:6c:d7:1f:91:19:ae:4b:fc:
30:c7:b7:6c:6f:80:7e:0c:ee:8a:c9:3b:d1:e3:15:e1:eb:17:
bd:66:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:00:28 2025 by rpki-client