Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/a5qYzrR3zVIVKAC39LbmabIVB3w.roa
File: a5qYzrR3zVIVKAC39LbmabIVB3w.roa (raw, json)
Hash identifier: o2q3Ya7UWxN56bJjpdJoNhtkB0KM0BVsZTXuLLBCJLo=
Subject key identifier: 6B:9A:98:CE:B4:77:CD:52:15:28:00:B7:F4:B6:E6:69:B2:15:07:7C
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 019425FD432C9D1759F409C1E17785FE6121
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/a5qYzrR3zVIVKAC39LbmabIVB3w.roa
Signing time: Thu 02 Jan 2025 07:49:02 +0000
ROA not before: Thu 02 Jan 2025 07:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209824
IP address blocks: 85.209.52.0/24 maxlen: 24
85.209.53.0/24 maxlen: 24
85.209.54.0/24 maxlen: 24
85.209.55.0/24 maxlen: 24
2a09:9340::/30 maxlen: 30
2a09:9344::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:43:2c:9d:17:59:f4:09:c1:e1:77:85:fe:61:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Jan 2 07:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b9a98ceb477cd52152800b7f4b6e669b215077c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:5b:93:ed:31:d3:e8:3a:59:22:9d:6b:8c:
c1:9d:13:8d:a4:c6:22:ac:32:3e:8f:dc:5e:61:81:
d8:7e:dc:6f:57:38:3d:5d:87:14:0b:97:8e:94:2e:
c8:e8:6b:b9:52:25:91:f7:57:d2:31:11:50:22:c7:
2f:2d:5a:ed:25:56:f1:26:3e:f4:bc:ab:b0:c8:30:
01:33:1e:a3:ec:51:06:c0:32:26:f6:2b:b8:ef:6d:
0a:c2:08:d2:c1:f1:b9:d9:1b:3e:00:dc:cc:43:ce:
f1:f8:85:37:06:05:7f:a9:20:a9:db:77:0d:6d:a8:
c8:16:98:5c:5f:ec:4c:b2:c0:27:ff:21:40:f2:ec:
fb:36:61:56:58:c5:1b:59:df:a4:54:30:17:bd:c9:
77:f1:6c:de:28:40:9e:35:52:47:78:f0:6b:cd:c9:
09:39:df:fc:22:a1:9f:c2:de:80:71:aa:f3:fe:21:
98:32:2c:29:76:ee:a1:a1:a1:62:44:76:d3:fb:49:
0b:92:9a:4d:f6:3a:e6:a3:0b:eb:14:81:c7:ef:82:
24:d2:29:8e:95:ee:f0:90:f1:1b:b0:e9:f6:26:91:
e1:80:fe:58:fa:da:40:49:c3:3e:2e:e7:12:1f:9b:
3d:1e:e4:1a:6b:95:f0:06:bc:32:a0:56:e4:e1:62:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9A:98:CE:B4:77:CD:52:15:28:00:B7:F4:B6:E6:69:B2:15:07:7C
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/a5qYzrR3zVIVKAC39LbmabIVB3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.52.0/22
IPv6:
2a09:9340::/29
Signature Algorithm: sha256WithRSAEncryption
94:9e:d1:48:4d:b1:e3:5d:9f:c1:b0:ff:29:2e:a3:47:06:dc:
c1:fe:0c:dc:7b:cd:c9:b8:85:f7:34:1f:45:a1:e5:af:12:ab:
14:ac:d3:04:62:9b:c0:6a:09:5d:a7:19:c0:94:cc:95:0a:a6:
9c:0a:70:d9:79:fd:d5:7a:b7:98:3f:09:f4:7e:2d:34:1c:79:
db:2c:61:1d:f4:c7:ac:95:05:14:08:62:3e:65:1b:11:69:c1:
51:73:81:a9:61:63:7e:f9:4d:25:28:d4:e3:a1:0e:1b:4e:d2:
14:80:7c:4d:56:70:4a:67:b5:02:a0:d1:fc:38:29:00:7e:1d:
13:25:fd:a0:7a:b0:43:7a:fe:b6:05:0c:97:4d:0d:56:6c:7f:
40:08:c1:bb:55:b0:e8:b3:ba:f2:f5:72:b4:92:d5:b2:04:0c:
dc:1a:87:1f:02:60:9d:49:e9:bc:f9:cd:7b:5e:64:98:b0:e3:
c7:ea:92:a0:1e:0e:d0:b8:cf:59:54:2e:b6:9c:06:31:59:87:
47:dd:8d:29:fa:72:2c:b7:a3:9e:ef:b1:94:f1:c3:f8:1a:2b:
e8:53:55:48:dd:bf:c8:5e:5a:1b:74:d4:46:17:b7:7f:7e:fd:
b7:ce:ed:32:db:ee:87:6e:29:70:a7:0b:f7:f7:20:1e:85:17:
18:48:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:36:04 2025 by rpki-client