Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa
File: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (raw, json)
Hash identifier: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=
Subject key identifier: 5F:D3:2F:3D:B2:9B:40:95:04:C9:B9:BD:88:06:29:49:0E:EF:FB:4B
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 01942747FD46DC093A077EA5433903D86D3A
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202302
IP address blocks: 31.42.190.0/24 maxlen: 24
91.219.60.0/24 maxlen: 24
91.219.61.0/24 maxlen: 24
194.61.52.0/24 maxlen: 24
194.61.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fd:46:dc:09:3a:07:7e:a5:43:39:03:d8:6d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fd32f3db29b409504c9b9bd880629490eeffb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:f4:79:54:62:59:3e:b5:fd:82:72:de:c8:
06:f4:b0:2e:7e:35:06:a2:48:63:42:ba:32:e0:51:
fb:73:36:18:8b:f7:6b:34:f4:51:92:36:11:8b:9a:
96:45:bb:b2:4a:1c:9b:5a:aa:ba:fb:8f:c7:13:25:
a3:b7:16:c8:4c:3d:5f:6e:00:19:59:16:76:dd:fd:
a5:9b:13:08:ac:db:ce:0d:91:59:8b:3c:fc:a0:f2:
1e:a3:0d:71:4e:71:f5:e5:59:61:44:36:5f:28:04:
32:a4:67:98:b8:b3:03:c3:53:ad:66:78:24:46:50:
76:e6:48:c2:30:34:8c:2b:50:16:60:fb:ff:08:c8:
48:eb:9b:c3:31:46:96:82:3c:58:24:be:3e:d7:6b:
4d:c6:f8:d4:8c:12:66:a0:1f:21:b7:93:55:f1:f3:
d3:a0:41:ec:a2:ff:1a:74:67:14:57:23:83:a8:5e:
32:ef:b5:b0:f8:91:9c:3a:dd:c7:27:a3:46:ea:a4:
86:d8:5b:0b:fa:20:f5:4e:61:6c:04:ce:20:c6:3a:
04:fa:09:e6:d2:20:31:94:30:41:e2:da:2e:75:3d:
15:03:0a:2f:13:29:ef:9f:8f:14:3f:8d:30:bc:89:
4c:e6:57:5b:c3:55:9a:43:80:a1:38:2c:d1:b9:85:
0f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:2F:3D:B2:9B:40:95:04:C9:B9:BD:88:06:29:49:0E:EF:FB:4B
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.190.0/24
91.219.60.0/23
194.61.52.0/23
Signature Algorithm: sha256WithRSAEncryption
52:89:09:de:e4:4f:0b:e8:52:a0:e7:61:ec:96:91:02:ff:d7:
88:05:20:4e:5f:d5:b3:77:a0:9e:50:65:fe:b6:c9:70:4e:0c:
f0:a3:a3:37:b5:f5:ac:41:b0:99:89:ab:ab:3f:a9:69:0a:19:
b5:7c:65:1e:05:eb:ee:1d:d4:dc:bc:9c:2b:d7:dc:fa:b3:cd:
5f:27:86:d4:49:be:5d:60:28:18:ea:66:74:11:f8:9e:b0:64:
eb:32:ec:5b:64:9f:dd:18:28:00:da:c1:71:af:0f:4f:d9:25:
42:83:0b:35:6c:2b:dd:cf:0d:a4:72:9c:b8:51:ca:f5:e5:95:
f5:b5:f4:eb:1d:49:0b:42:9e:f8:a1:42:cb:1f:72:f4:04:79:
0d:87:50:36:23:36:68:df:e1:0a:8c:8a:bb:08:37:35:93:e3:
e6:93:a1:94:c7:91:0e:68:ad:db:65:3a:b5:78:c4:59:ee:9b:
34:4d:65:c5:7f:5d:ff:e4:45:9a:56:6b:1e:6c:f0:54:b1:c5:
b6:f4:b5:dc:a8:f4:42:9b:de:8d:23:3e:9c:7f:1c:6b:d4:5e:
ca:c4:12:88:29:48:f7:1b:01:95:a4:b7:fa:d0:fa:11:17:a4:
67:06:9b:fd:95:37:d8:86:8c:97:af:04:f0:ec:2c:f1:91:a7:
ac:7f:5c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:51:13 2025 by rpki-client