Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/09n_UvKsiU7NElp_BO4Omi03m8w.roa
File: 09n_UvKsiU7NElp_BO4Omi03m8w.roa (raw, json)
Hash identifier: ODk8S/L/PHsl6EJL3BEgcu1+0LFbdMVBjBsh2Fhu/hI=
Subject key identifier: D3:D9:FF:52:F2:AC:89:4E:CD:12:5A:7F:04:EE:0E:9A:2D:37:9B:CC
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A431726CB57558678E79C8450D9D5
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/09n_UvKsiU7NElp_BO4Omi03m8w.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 185.172.167.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:43:17:26:cb:57:55:86:78:e7:9c:84:50:d9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3d9ff52f2ac894ecd125a7f04ee0e9a2d379bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:0d:ad:02:60:6b:62:de:77:89:18:77:87:
b7:e1:df:b6:3b:15:df:05:ed:1c:2c:56:d6:50:09:
30:5d:fa:30:eb:0c:80:09:a7:9d:3b:de:da:ec:2b:
26:a5:40:b4:93:0d:f8:b5:23:07:bb:7c:1f:6d:ac:
7c:f6:f7:d9:da:57:fc:3e:b9:e7:07:35:e8:6c:37:
0c:fa:cb:e7:0a:5d:30:bc:45:8c:c9:4b:6a:62:db:
c0:95:0c:1c:d7:dd:75:ac:e2:01:df:b1:b8:61:5d:
f2:7e:38:c0:53:d2:d9:c2:de:e5:43:01:de:42:a9:
64:23:e0:fd:6e:11:ba:2f:30:6e:6b:54:82:65:67:
9a:e9:17:24:21:d4:8f:a7:db:84:c0:23:99:14:89:
9f:3f:20:43:f6:13:6b:cd:81:31:f4:d5:9c:a1:73:
49:f8:c4:36:fc:e1:52:b3:b3:70:c8:30:dc:4c:2a:
df:66:b0:2f:79:68:07:24:f8:e2:20:17:ae:61:20:
6c:19:3f:28:5f:64:82:cd:ed:b6:60:4f:2c:47:96:
2c:2b:7d:8e:69:62:ff:74:86:fe:9f:e1:12:81:74:
40:f3:d4:d8:11:30:9b:cc:f8:c2:eb:0a:35:da:10:
32:00:4a:2c:e5:6b:49:02:a2:2d:61:b0:ac:9a:31:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D9:FF:52:F2:AC:89:4E:CD:12:5A:7F:04:EE:0E:9A:2D:37:9B:CC
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/09n_UvKsiU7NElp_BO4Omi03m8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.167.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e3:b5:08:ab:64:99:34:ce:9f:91:b6:c9:9c:75:18:b3:a9:
fa:39:8d:fd:87:c7:2f:81:40:76:cd:7f:3a:4c:37:63:12:60:
70:7a:f0:98:25:6c:66:a3:be:16:b3:1e:f8:d1:3d:e4:2f:ee:
89:f2:ec:78:ad:09:bf:8f:48:58:58:61:ca:b8:58:56:95:42:
40:8d:3d:d6:a5:fb:9b:4c:97:e1:79:2f:84:95:63:a4:0c:f1:
d3:89:ad:4b:c2:a9:3b:f0:2c:a5:ff:22:bd:a3:40:0a:6f:46:
b0:73:84:2a:59:37:f3:2e:42:27:5d:7d:f2:9b:af:b8:1c:36:
85:95:41:ae:30:0a:62:9d:f6:5b:d4:c2:f7:1d:71:e9:12:23:
48:df:aa:b1:e9:bf:90:8a:24:ed:2f:15:55:10:3e:20:b3:67:
06:07:5d:af:c2:08:00:9b:95:b5:b3:0a:9f:3b:95:92:d8:c8:
a5:9e:ce:dd:d8:2a:3b:28:47:35:75:d4:52:59:6b:e9:b4:1e:
6b:64:2d:a9:dd:4d:e2:31:f3:e7:39:cb:1a:a4:c5:4f:a6:4f:
7e:4f:4f:ee:af:dd:b8:23:88:54:60:aa:18:49:3f:e6:4c:74:
f3:b2:33:a0:9c:68:13:d8:f3:15:89:ba:ca:b8:7f:ee:ee:a7:
3d:52:b6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:52:01 2025 by rpki-client