Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/p9mbWjvEsrcIqVSomscYTSmauG0.roa
File: p9mbWjvEsrcIqVSomscYTSmauG0.roa (raw, json)
Hash identifier: IBGhc99JFArjB5C4B9K5qnxn4EBqunaB7yKbcBq3iJY=
Subject key identifier: A7:D9:9B:5A:3B:C4:B2:B7:08:A9:54:A8:9A:C7:18:4D:29:9A:B8:6D
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019524D794098C7895D525B090F4A706DEC3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/p9mbWjvEsrcIqVSomscYTSmauG0.roa
Signing time: Thu 20 Feb 2025 19:31:02 +0000
ROA not before: Thu 20 Feb 2025 19:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.138.210.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:d7:94:09:8c:78:95:d5:25:b0:90:f4:a7:06:de:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 20 19:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7d99b5a3bc4b2b708a954a89ac7184d299ab86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:c2:d9:02:5e:ee:48:0f:ed:86:7d:83:5f:
f4:7e:49:36:2c:5c:1d:82:4d:d7:15:f5:95:61:94:
41:ef:da:e7:14:a1:47:49:5d:b8:38:1f:b3:5c:67:
30:86:57:0e:7f:50:c7:29:bf:85:9e:77:7f:75:a8:
48:cc:72:ef:21:42:ca:ea:10:1f:3c:b5:dd:a9:1c:
4b:31:b3:8c:ae:a2:ac:a1:d4:11:de:46:59:f8:26:
1e:ca:3a:3d:c0:40:e9:7e:e3:94:94:0c:8e:8a:60:
d9:d6:be:dd:0c:09:0c:7f:e8:44:7a:52:b3:64:dc:
2d:5e:ad:bd:05:db:bb:81:bb:73:bd:ad:fd:b4:d0:
3c:fe:c2:35:19:da:b1:ee:b5:2a:f9:62:73:dd:0d:
05:82:78:85:04:16:11:5b:1e:5c:f8:98:4c:14:08:
92:0f:bf:c6:28:f0:0e:9c:52:1d:d4:19:19:20:80:
0f:d7:3d:de:51:fd:61:25:4f:9d:44:65:24:a9:7f:
62:2b:8b:fc:03:98:cf:48:28:3f:9f:5f:cc:5d:dc:
23:15:c0:44:9a:0b:8e:b5:6a:e2:28:4a:ed:fe:49:
a8:3c:bc:15:ad:6e:03:d1:59:80:9e:6c:62:91:ae:
c5:b8:21:76:8f:10:bc:da:cf:2f:bf:c7:68:b6:73:
48:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:9B:5A:3B:C4:B2:B7:08:A9:54:A8:9A:C7:18:4D:29:9A:B8:6D
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/p9mbWjvEsrcIqVSomscYTSmauG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/24
185.117.21.0/24
185.211.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:33:ec:2d:25:86:32:79:f4:94:89:fc:6c:5b:56:84:22:3d:
a6:e9:8a:9e:cc:19:9e:26:97:21:e8:1a:87:9e:1e:62:06:65:
38:67:a2:49:ee:f6:1a:b4:b2:8e:25:e7:9e:e1:07:23:d9:02:
5a:e0:f4:2c:34:35:7e:59:cd:7e:b4:3a:44:f6:79:a9:a9:be:
8f:2e:3e:89:f4:1d:a2:26:cf:ca:91:0f:33:9d:a0:af:73:14:
92:f3:81:8b:f7:db:68:c5:f0:2a:df:9e:cb:6a:3a:0a:fc:19:
88:b9:15:b7:7e:95:0d:1e:53:e7:a2:89:50:62:f4:a6:e1:cd:
74:4c:20:aa:0b:80:8b:5b:7c:cd:04:3d:b7:d0:af:74:d3:07:
7c:19:47:27:1d:2f:e5:87:4c:bb:b1:0b:73:37:84:27:89:73:
08:b3:7d:51:a4:16:00:a3:53:4c:f1:7a:70:77:9f:36:a3:d6:
97:44:a2:6c:46:4e:f7:f3:33:c3:09:15:a1:d4:25:08:55:7f:
52:70:03:90:f8:49:4f:0d:3f:74:72:e8:4e:f6:11:7b:cd:10:
bd:04:2b:03:71:b9:e8:5c:96:48:89:06:ae:03:13:ea:e9:20:
b0:68:89:12:8b:ec:c5:4e:cf:2c:b1:c5:9f:04:36:c1:49:37:
25:3c:e9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:14:26 2025 by rpki-client