Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/cJspXZBTRkOp7Qt_iJd_u0-CVXM.roa
File: cJspXZBTRkOp7Qt_iJd_u0-CVXM.roa (raw, json)
Hash identifier: +Q93BMqAczWnkXHr2ly5zbZ8kF90gI/c8DRSS/XTs0A=
Subject key identifier: 70:9B:29:5D:90:53:46:43:A9:ED:0B:7F:88:97:7F:BB:4F:82:55:73
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C4C4CDC94314CB9E5B96222329B21
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/cJspXZBTRkOp7Qt_iJd_u0-CVXM.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58121
IP address blocks: 85.9.94.0/24 maxlen: 24
95.215.160.0/23 maxlen: 23
185.155.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4c:4c:dc:94:31:4c:b9:e5:b9:62:22:32:9b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=709b295d90534643a9ed0b7f88977fbb4f825573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:f4:b2:e4:00:2d:8f:08:37:6e:d8:b9:a9:
a9:4a:aa:fd:f2:88:76:1e:9c:21:70:3b:b3:2d:3a:
f8:36:1e:aa:21:3c:aa:d9:c1:b1:11:0e:28:02:0f:
25:7d:33:85:78:0f:8e:25:97:a9:c1:30:84:40:64:
4c:81:82:59:1e:33:c1:cf:50:5e:5f:8e:5d:a4:e8:
21:9f:4f:66:02:ab:db:97:59:ac:15:e9:95:8d:1b:
94:b6:f2:57:13:23:dd:a9:dc:41:18:f2:04:b9:ff:
42:ae:dd:79:a7:07:b8:32:bf:96:ee:4c:aa:f3:f3:
20:50:62:cf:5d:e2:29:61:9f:d4:ef:e8:06:54:0b:
85:74:e2:85:84:39:78:af:2d:f9:af:8a:9e:3f:89:
43:f8:f8:e7:97:7e:b6:25:1e:1f:6b:6d:6f:02:f8:
4f:c1:51:e7:3a:e2:7d:b6:93:50:30:12:42:62:c2:
26:27:60:39:4a:8b:b5:6b:fc:42:ec:6a:57:4d:ec:
d7:d3:b0:50:a5:d2:a0:7a:c1:14:a6:40:d8:e6:88:
3d:2b:c7:fa:a8:91:7d:11:52:97:73:56:d3:84:4b:
e3:84:79:91:31:02:d4:a4:58:e8:98:42:3e:00:51:
11:55:72:ea:0e:a1:b3:0f:28:87:0b:63:d9:2a:47:
5c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:29:5D:90:53:46:43:A9:ED:0B:7F:88:97:7F:BB:4F:82:55:73
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/cJspXZBTRkOp7Qt_iJd_u0-CVXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.9.94.0/24
95.215.160.0/23
185.155.14.0/23
Signature Algorithm: sha256WithRSAEncryption
99:9b:c9:59:7f:a0:4e:fd:bd:12:5a:3f:f9:0f:ee:7f:ec:c0:
21:2a:24:8d:6e:a4:ac:d2:5b:3b:18:ea:31:9e:f8:51:3e:87:
ca:ff:c1:b3:d2:e1:94:35:ec:e1:96:aa:00:6a:16:6a:7b:af:
89:42:d2:20:46:7d:d7:e2:fd:49:05:6f:6c:5c:6a:d7:1b:f2:
98:f8:4e:3e:6a:0e:03:ef:ce:c5:2b:fb:61:66:39:a6:2c:a0:
f9:fb:79:b6:1c:d5:11:96:4c:44:5f:70:4e:47:ef:f3:11:7d:
8c:40:46:bc:fb:0e:89:c1:d7:34:c7:90:aa:2c:60:66:86:8f:
3d:18:39:09:a7:46:7e:d0:03:c8:4b:70:40:4f:98:3f:f8:11:
03:b3:7f:4e:25:5e:bf:cb:44:57:d8:c4:4c:bf:e9:23:d4:21:
c2:11:cb:13:f9:5e:a1:17:97:ae:56:7d:e4:18:38:8a:19:fa:
1e:08:01:bc:8b:db:d2:c1:fd:99:7d:a8:77:21:c2:b7:cb:73:
7f:f3:3b:50:bd:70:a1:d1:86:45:02:a4:66:c4:5c:5c:69:18:
a9:bd:c5:38:2b:47:53:b5:fd:49:9f:04:0f:89:0a:2d:ed:95:
fc:4d:2c:39:f9:20:56:b4:a2:2f:7f:74:b2:59:7d:6b:63:47:
46:96:1e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:04:07 2025 by rpki-client