Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/9BmVkWHqnPagXm5os2wnNWK9INk.roa
File: 9BmVkWHqnPagXm5os2wnNWK9INk.roa (raw, json)
Hash identifier: 8RngoNykTFTJnIq5oyzFYRTf3TP7cyLKV5cry6M5mgE=
Subject key identifier: F4:19:95:91:61:EA:9C:F6:A0:5E:6E:68:B3:6C:27:35:62:BD:20:D9
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 0194266C37A5CC65505894B884C42D419E69
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/9BmVkWHqnPagXm5os2wnNWK9INk.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208299
IP address blocks: 185.161.218.0/24 maxlen: 24
185.161.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:37:a5:cc:65:50:58:94:b8:84:c4:2d:41:9e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f419959161ea9cf6a05e6e68b36c273562bd20d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cd:55:50:fb:bb:6b:f0:4d:59:39:6f:be:1d:
64:c8:bb:3e:84:01:4d:fa:86:9e:41:17:2d:e3:68:
eb:5c:8a:1e:24:7b:f4:bb:e7:17:c7:e1:28:b9:9b:
8a:63:c4:aa:8e:28:50:16:3c:4b:93:99:e2:fd:40:
b2:34:5d:76:cc:29:dc:20:4c:6f:86:04:b9:7b:42:
1e:17:81:a0:15:e7:98:a3:ed:f0:4a:ae:fc:7f:d1:
3b:76:90:37:e3:c9:90:07:92:a5:b1:85:34:c4:ff:
91:6a:20:2d:1a:20:fb:ef:14:cc:46:86:a1:20:c5:
ce:8e:ce:c8:a4:ae:0e:8d:a6:d5:be:f0:2c:93:78:
92:ab:cf:b3:88:0d:67:3f:89:d0:5b:34:de:1b:17:
34:41:3d:af:a4:0e:7c:72:18:81:50:14:e2:5f:4f:
48:ac:a6:25:f1:3e:44:05:de:21:67:3f:c1:0b:7a:
07:6f:38:ee:b6:39:2d:40:36:19:a4:7b:7d:db:fc:
82:81:8c:89:f6:a6:e4:a8:f4:30:8b:11:13:ea:be:
ba:e0:f6:9f:29:77:2b:e8:65:5f:46:5d:86:69:00:
9b:9f:8e:0e:22:8e:a7:52:b4:b8:a6:b3:a9:ea:6e:
90:e6:45:40:0a:76:7d:fe:20:05:fa:a7:f1:de:98:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:19:95:91:61:EA:9C:F6:A0:5E:6E:68:B3:6C:27:35:62:BD:20:D9
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/9BmVkWHqnPagXm5os2wnNWK9INk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.218.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:10:93:6d:56:47:e4:e5:34:ca:1c:7f:69:00:a3:df:01:5c:
3a:84:a0:7f:44:62:b7:c4:36:e0:20:8b:db:96:a5:b3:d7:84:
3d:13:91:55:a2:6f:b0:a8:a3:e7:a5:d3:4e:f2:07:ba:cd:a7:
5d:0b:c0:14:3e:b5:b4:9b:5f:03:21:59:4f:28:09:d7:07:c5:
84:7c:ed:bc:42:97:81:06:4b:8b:d9:ee:42:20:4c:8a:3f:83:
43:61:10:65:8b:1c:6b:a4:cd:82:f9:45:b8:c0:22:2d:a5:19:
86:6e:17:3b:4d:95:3f:f0:40:0d:57:ab:ca:12:f3:93:70:b4:
13:0b:6c:d9:a5:bd:36:28:31:f5:01:f1:ad:4e:7a:d5:bd:17:
c1:d6:13:ab:a8:42:ab:e5:3a:c6:75:f6:80:7f:67:b6:64:42:
22:6a:48:c0:0d:e2:2f:23:d6:c9:0c:d2:aa:96:28:30:b5:79:
02:87:10:ee:57:04:6a:a7:c3:f9:77:75:2e:1d:e2:d6:40:36:
fa:14:a9:44:de:af:1e:13:94:a9:56:99:b6:99:71:6d:c3:e1:
47:32:e8:e5:6c:82:b5:51:2d:12:b2:0a:1c:b1:0b:5b:7b:22:
cb:fd:27:fb:42:46:e1:5b:18:8a:1a:e9:5f:19:bc:51:99:3e:
0f:f7:0a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:21:00 2025 by rpki-client