Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/9_Mv9ZEtP5jzBp-veVmAU5Me26w.roa
File: 9_Mv9ZEtP5jzBp-veVmAU5Me26w.roa (raw, json)
Hash identifier: 7xIRl7rk4EGTHFHDXuf8JFK1gbSXSJDUaqeJThSJ4B0=
Subject key identifier: F7:F3:2F:F5:91:2D:3F:98:F3:06:9F:AF:79:59:80:53:93:1E:DB:AC
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 0194CAE4BA1439CC79D7B036BD67221D6C2A
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/9_Mv9ZEtP5jzBp-veVmAU5Me26w.roa
Signing time: Mon 03 Feb 2025 08:19:35 +0000
ROA not before: Mon 03 Feb 2025 08:19:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 65632
IP address blocks: 188.125.163.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:e4:ba:14:39:cc:79:d7:b0:36:bd:67:22:1d:6c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Feb 3 08:19:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7f32ff5912d3f98f3069faf79598053931edbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:28:f2:29:9d:27:fb:88:b2:61:07:cb:2f:
8a:fb:64:f8:92:c2:b7:62:57:ab:94:e5:a3:90:dd:
ca:85:59:4a:d3:c3:d4:1f:51:e4:80:ca:75:31:e7:
79:ae:f3:b8:0f:d3:a6:e7:95:f4:6f:ea:5d:e0:8d:
95:99:7c:38:8b:c4:c9:5c:49:bb:ce:bb:85:5c:a8:
39:97:2a:f5:4e:75:d1:68:68:ca:fd:38:ae:c2:31:
b4:2a:d1:8b:b9:10:57:fe:0d:67:85:1b:d9:22:b9:
e3:66:d8:70:fb:47:5c:20:2a:4c:cc:7c:4f:2a:4b:
63:1b:4a:9c:c4:dd:bc:b0:87:e7:96:7c:23:a0:e6:
25:c3:80:16:cf:d1:e5:6b:e3:c0:74:e1:85:4c:2c:
9a:17:7f:75:dd:01:74:46:1f:4d:a2:5b:5b:98:06:
48:ff:23:67:9a:a6:ef:fb:f3:42:da:13:e7:9e:b1:
5d:ba:39:01:49:cd:9e:39:e7:e5:e7:e2:d1:d9:c9:
92:1b:ff:49:6b:81:f6:47:27:d4:53:b3:13:e0:08:
1e:ea:e0:63:ea:c5:3f:ca:05:6d:39:50:2e:88:47:
33:e7:d6:0e:f6:48:de:1c:dd:a8:9f:f0:35:c4:85:
12:37:5e:b7:0a:96:0f:b9:3d:55:ba:dc:db:ba:ef:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F3:2F:F5:91:2D:3F:98:F3:06:9F:AF:79:59:80:53:93:1E:DB:AC
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/9_Mv9ZEtP5jzBp-veVmAU5Me26w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.163.0/24
188.125.166.0/24
188.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
16:82:22:56:d3:30:47:ff:5e:98:fd:43:28:87:f5:5e:3d:d9:
c9:06:1e:12:86:33:a2:de:92:03:7c:db:33:05:6c:5c:fc:3c:
6b:d8:1a:25:60:63:56:80:0c:26:93:f8:f0:00:69:54:2d:63:
93:32:a1:94:f4:2a:d1:dc:23:0d:fc:ec:f7:81:47:e9:4b:81:
6b:2b:58:4f:a2:1f:39:e4:e8:f2:17:80:bf:a4:b1:0a:7d:f9:
26:0d:13:82:78:70:79:3b:09:18:1d:f9:37:b4:55:a7:92:72:
41:9a:9a:21:21:15:df:6f:58:e9:fe:b8:89:1a:14:86:a3:eb:
45:aa:31:cf:7a:d0:e3:36:14:13:1b:83:0f:56:fb:25:ed:5a:
57:bb:ed:01:8d:51:c1:08:a1:90:ef:12:b6:1c:d5:7b:99:63:
32:08:f8:59:76:57:77:66:77:86:4d:da:7c:fb:4e:b0:62:ba:
2b:5f:86:d1:ba:91:b3:b7:17:c9:3e:a1:ee:a6:47:c2:fa:eb:
2e:ed:1f:c9:55:7b:e0:40:19:89:05:28:61:8b:cf:d2:fd:80:
53:3f:81:6e:39:bf:33:ad:25:b1:be:0e:8b:a9:2a:bf:fb:67:
dc:42:95:53:86:e3:0b:18:de:04:9b:22:08:e6:8d:21:fd:68:
65:31:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:40 2025 by rpki-client