Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/9kL7_n6oe34Z8vviGq3YICiBLSs.roa
File: 9kL7_n6oe34Z8vviGq3YICiBLSs.roa (raw, json)
Hash identifier: Qoh6yw8Pp+9Lcz6TEmDxMm/MIOz5l9NoByWV46axgEE=
Subject key identifier: F6:42:FB:FE:7E:A8:7B:7E:19:F2:FB:E2:1A:AD:D8:20:28:81:2D:2B
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F20DBB35FA59DEFD489EA3CB6D1B2
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/9kL7_n6oe34Z8vviGq3YICiBLSs.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213309
IP address blocks: 193.140.143.0/24 maxlen: 24
193.255.92.0/24 maxlen: 24
193.255.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:20:db:b3:5f:a5:9d:ef:d4:89:ea:3c:b6:d1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f642fbfe7ea87b7e19f2fbe21aadd82028812d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:6d:f5:b2:98:82:03:76:92:6e:81:19:b5:
72:b0:1a:5b:8c:bd:fa:a0:00:31:c1:d6:6c:07:bf:
cf:95:14:a0:a8:03:5e:a3:10:50:14:76:97:54:7f:
87:2c:d8:4a:f9:4c:50:dd:e9:5b:9a:8a:e0:52:96:
6d:cd:87:2b:e5:c1:af:e8:01:76:ed:12:36:7d:aa:
0f:5a:d7:e9:cf:1f:02:e8:14:0c:bd:04:6d:20:0b:
84:d5:e4:d4:7d:90:0c:41:aa:2e:a4:da:d0:c4:79:
44:3c:12:da:3e:3b:ec:69:d8:12:cf:68:ec:cf:78:
e7:8f:9a:f3:90:89:ac:95:14:71:d0:ed:6f:1b:8a:
53:3a:31:a8:0d:ce:bb:ce:83:0f:8a:88:fc:ce:93:
01:d8:f9:95:de:06:c0:d5:e9:a5:0a:73:f8:79:aa:
9b:d2:38:87:06:50:01:3b:9f:7c:2c:03:37:49:65:
35:ea:8b:2e:94:f9:34:13:ab:e5:ff:71:78:92:cd:
91:13:90:1c:7e:90:28:0c:b1:04:4f:19:72:47:c9:
e4:cf:4d:65:3f:85:a3:0b:63:67:c4:a4:9d:29:d1:
aa:eb:23:a6:56:ea:82:63:b4:78:05:52:3a:41:91:
8b:46:d2:69:ae:52:f5:5e:18:59:56:36:d8:de:a6:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:42:FB:FE:7E:A8:7B:7E:19:F2:FB:E2:1A:AD:D8:20:28:81:2D:2B
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/9kL7_n6oe34Z8vviGq3YICiBLSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.143.0/24
193.255.92.0/24
193.255.175.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ee:c3:6c:20:b3:f3:ef:a4:07:f0:22:4d:8c:be:cb:5b:a8:
1a:d6:62:2a:03:e3:18:61:02:74:80:c4:cb:eb:7f:4f:68:2e:
2e:0a:ef:e2:03:e2:6f:18:9b:aa:cd:0e:af:08:03:70:ff:13:
96:cd:4b:53:8c:17:b4:4b:aa:21:84:15:e9:85:c8:8b:7d:31:
f4:c5:16:fc:1d:6e:90:70:ed:30:16:88:78:9f:4e:b2:55:43:
cb:d7:a2:a7:f8:3c:30:e9:3c:9b:7d:ae:34:a1:4b:59:50:0d:
1a:94:95:a2:9c:9d:64:5c:81:65:17:10:3b:5d:44:b3:18:7c:
d2:45:e7:30:89:9a:c1:f4:71:38:04:2a:78:14:0f:92:0b:ac:
24:97:f9:f9:d4:0a:d8:4a:63:c4:9f:95:75:6c:b6:24:cd:da:
ef:e1:14:48:0b:e1:53:10:1d:97:de:ca:07:05:79:43:6c:dc:
90:e8:80:d2:72:df:4a:90:92:9e:69:59:06:10:91:21:98:05:
64:7b:84:cb:4c:8a:f2:1c:cd:40:d9:bf:cd:55:a7:05:3e:16:
9b:76:07:a5:35:1b:7b:b0:18:56:a1:8a:e9:bc:ab:b5:b5:72:
9f:56:8b:64:82:9b:4f:f4:81:b5:ad:a3:be:61:d0:eb:49:05:
20:7c:8e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:14:31 2025 by rpki-client