Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/9u-rsDWtE_83E-zt9uyk1Tmhx_c.roa
File: 9u-rsDWtE_83E-zt9uyk1Tmhx_c.roa (raw, json)
Hash identifier: e8hWv5F2Yw7MHTSO7w0icoPmtLInDJiNFNJcyngC6B0=
Subject key identifier: F6:EF:AB:B0:35:AD:13:FF:37:13:EC:ED:F6:EC:A4:D5:39:A1:C7:F7
Certificate issuer: /CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Certificate serial: 019422FB51DC8CDF8509D0F180E48AC41A7F
Authority key identifier: 5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/9u-rsDWtE_83E-zt9uyk1Tmhx_c.roa
Signing time: Wed 01 Jan 2025 17:48:03 +0000
ROA not before: Wed 01 Jan 2025 17:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215398
IP address blocks: 192.109.176.0/24 maxlen: 24
2001:67c:e1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:51:dc:8c:df:85:09:d0:f1:80:e4:8a:c4:1a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Validity
Not Before: Jan 1 17:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6efabb035ad13ff3713ecedf6eca4d539a1c7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:55:8e:19:dd:8f:3a:6e:ef:14:78:99:f9:
5f:e8:17:1b:e8:8a:0b:e9:9d:5d:54:b7:15:d0:cc:
ca:3d:42:43:5a:77:67:3f:bb:6f:ae:5d:15:87:30:
92:78:e5:a0:86:9d:84:64:bb:4e:62:bd:f5:34:c7:
63:0b:13:f3:f7:25:fd:95:27:53:8d:95:38:95:6e:
83:ba:d0:dc:dc:d1:33:94:40:97:2a:cd:f1:07:34:
01:4b:41:51:3f:05:be:93:80:ff:d4:73:c4:ef:0c:
ac:ab:02:87:60:2b:3a:ed:e6:0e:9f:97:a9:b5:aa:
93:bf:89:58:4d:24:ec:f0:2d:00:b5:26:d1:09:6c:
56:c4:53:f5:04:38:87:ea:17:50:73:cf:6f:94:59:
a5:ba:c4:6d:c5:96:96:08:46:bb:91:19:3e:d1:e2:
95:b8:68:ce:2c:a8:dc:b9:8f:d1:f4:93:99:a3:b3:
fe:79:a7:45:24:5d:77:90:67:b8:b2:fe:33:f6:11:
be:57:03:1d:71:e9:1c:8d:e8:f8:3c:19:74:43:0b:
07:8f:01:27:06:29:b4:a3:77:ee:20:69:9b:77:a4:
89:8d:5a:bd:60:8e:ff:36:13:f9:26:cb:c1:d5:22:
47:2d:ab:82:83:04:5a:cf:7c:41:e0:db:d7:50:eb:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EF:AB:B0:35:AD:13:FF:37:13:EC:ED:F6:EC:A4:D5:39:A1:C7:F7
X509v3 Authority Key Identifier:
keyid:5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/9u-rsDWtE_83E-zt9uyk1Tmhx_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.176.0/24
IPv6:
2001:67c:e1c::/48
Signature Algorithm: sha256WithRSAEncryption
7a:c1:bd:d9:0a:77:64:e8:97:16:4b:3a:cd:33:03:35:c8:13:
06:b8:d0:ca:9f:02:c9:88:8f:67:93:61:34:db:bf:a2:4f:9d:
d5:8b:d9:a8:bd:c1:0a:0a:79:9e:58:28:60:2e:b4:eb:00:6e:
2c:1c:72:b4:44:72:67:85:ee:74:68:d6:cc:d1:d0:6b:14:78:
44:ec:92:46:d0:7e:84:e9:e0:1c:22:c2:d6:cc:95:dd:70:3e:
22:15:19:8d:70:e0:5b:59:26:71:0a:29:75:bd:d0:c5:e1:65:
26:93:c3:6e:68:c4:b2:b1:f6:b3:a9:d4:5d:76:f2:1e:e5:3d:
20:77:4a:a0:95:f6:8e:21:b9:c5:61:f8:26:9b:a0:4c:54:8d:
8b:a7:1e:62:ef:8a:4c:4a:ee:ef:93:bf:27:7e:b9:aa:e1:9d:
fa:96:fa:27:55:99:81:84:42:95:e9:5a:6d:7c:04:a9:07:6c:
9e:2c:d1:77:83:ad:25:56:c1:1d:ca:43:17:7e:b6:1c:57:eb:
14:98:cf:14:cf:0c:77:1b:8b:f2:4a:43:35:ac:c8:2c:b1:85:
ce:d0:72:db:e3:df:6f:ee:80:21:10:ef:cd:e2:48:46:ef:1c:
8e:e8:4c:b1:c8:85:41:2a:0b:e8:d7:be:de:98:eb:6e:ea:ab:
6a:a3:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:33 2025 by rpki-client