Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/olZgy9U7ThNnepinAJEKzkRvZJg.roa
File: olZgy9U7ThNnepinAJEKzkRvZJg.roa (raw, json)
Hash identifier: 4b9F9m0pUTdzvwoF0mVT1XODHic5uNOOg/5TKG+EAGE=
Subject key identifier: A2:56:60:CB:D5:3B:4E:13:67:7A:98:A7:00:91:0A:CE:44:6F:64:98
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C508A9BD3E55C3ABF4B8E6117B96B
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/olZgy9U7ThNnepinAJEKzkRvZJg.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202029
IP address blocks: 85.9.104.0/24 maxlen: 24
85.9.106.0/24 maxlen: 24
91.239.214.0/24 maxlen: 24
185.83.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:50:8a:9b:d3:e5:5c:3a:bf:4b:8e:61:17:b9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a25660cbd53b4e13677a98a700910ace446f6498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:54:9d:65:7e:7b:11:5a:e8:8e:c4:e0:95:
60:74:97:f4:c7:80:60:e9:38:7a:00:cb:bc:79:e9:
ce:00:d1:5d:e8:23:77:29:70:0a:00:c7:f5:ea:9a:
57:b6:47:bd:f6:9b:94:44:ea:ba:35:f3:72:d4:48:
e7:b5:49:c6:db:6f:79:2f:9a:12:6d:c0:9b:7b:ec:
e1:f6:b2:c5:9d:2f:b5:71:b5:26:03:41:9b:f3:27:
94:5d:a2:5d:93:84:49:46:24:16:4b:ae:97:4f:af:
3d:a9:b2:de:8c:d7:a0:fb:f6:e7:be:3b:b4:e8:dc:
82:99:07:a4:ea:01:eb:04:b9:bc:b7:1c:be:7b:e4:
f4:4e:e6:4e:77:2d:fc:0d:01:97:13:ac:22:2d:ac:
6c:43:c6:27:01:5a:6d:7d:b5:49:0c:8c:d4:c4:c4:
45:d0:77:6c:41:00:c5:46:4d:d8:1f:27:8b:1f:c6:
bc:74:08:3a:cd:62:fa:c9:ac:3f:87:74:3b:e6:7f:
48:50:2f:b1:9c:10:fe:4a:76:c8:a4:01:81:97:31:
de:a1:d1:88:e8:61:74:81:c1:b0:34:ea:8f:f2:4b:
3f:fa:6c:7b:ad:b5:96:49:d0:af:8d:b4:98:4b:60:
8e:70:44:fc:fb:61:01:bb:d9:d9:5c:66:cc:a3:1e:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:56:60:CB:D5:3B:4E:13:67:7A:98:A7:00:91:0A:CE:44:6F:64:98
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/olZgy9U7ThNnepinAJEKzkRvZJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.9.104.0/24
85.9.106.0/24
91.239.214.0/24
185.83.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:30:26:77:da:7f:fe:2c:55:73:1a:a1:bd:a7:ff:e5:98:2e:
fe:84:c0:51:bd:4b:54:25:a9:83:7d:6b:62:97:c6:93:14:ba:
88:6d:39:6a:77:9e:69:a1:6e:7e:ac:36:7e:8b:4b:a0:13:cc:
3e:3f:04:46:7c:db:a3:2f:6f:c4:ae:ba:74:6e:15:ee:eb:a2:
ee:e4:97:b2:be:81:e6:fb:45:23:7c:d4:78:85:41:84:04:10:
49:ed:08:f4:dd:de:3b:24:ed:2a:c4:55:f7:19:69:e9:de:c0:
a0:c3:9b:1e:53:94:a8:61:37:15:a7:2b:c0:e2:a9:1b:2e:70:
f2:bc:12:3f:0c:32:73:71:f8:8c:25:85:2e:fc:56:13:53:19:
db:a5:c4:71:2a:ac:17:92:09:93:07:cf:a2:1b:e4:8f:1d:5e:
ac:33:88:ce:7a:b1:61:82:62:ae:f8:e5:fc:36:23:a5:54:60:
f3:89:15:8c:07:6c:c2:84:d1:75:8f:2e:e7:f2:da:8b:41:b3:
97:62:e8:52:00:a2:bf:6d:0f:ed:72:63:15:22:45:28:73:bc:
56:e0:37:1f:a3:46:b5:27:8d:ff:66:b4:8c:92:0f:4d:f6:94:
9c:a6:d1:78:aa:64:7f:fd:a6:41:ef:93:dc:31:78:a5:ff:b9:
57:8e:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:40:56 2025 by rpki-client