Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/k9ESiOC05FAL5OZXSx8n68sQwKU.roa
File: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (raw, json)
Hash identifier: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=
Subject key identifier: 93:D1:12:88:E0:B4:E4:50:0B:E4:E6:57:4B:1F:27:EB:CB:10:C0:A5
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 0194282150AEB44C60578D338781C91E7F82
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/k9ESiOC05FAL5OZXSx8n68sQwKU.roa
Signing time: Thu 02 Jan 2025 17:47:39 +0000
ROA not before: Thu 02 Jan 2025 17:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197886
IP address blocks: 91.228.212.0/23 maxlen: 23
185.97.208.0/22 maxlen: 22
185.166.228.0/22 maxlen: 22
185.244.68.0/24 maxlen: 24
185.244.69.0/24 maxlen: 24
185.244.70.0/24 maxlen: 24
185.244.71.0/24 maxlen: 24
2a0b:1e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:21:50:ae:b4:4c:60:57:8d:33:87:81:c9:1e:7f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Jan 2 17:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93d11288e0b4e4500be4e6574b1f27ebcb10c0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:6d:73:b3:de:39:34:e2:f4:ab:19:27:64:
1c:3f:d3:fd:9d:7b:56:a7:ff:bf:3c:d4:a5:05:6d:
0a:12:ce:c9:65:8f:2d:62:d3:f6:fb:dd:83:f7:de:
c0:c1:ba:47:4f:88:c8:cd:8c:3b:ab:0b:04:d2:c3:
66:85:ef:4e:7d:64:ea:03:0c:13:35:9c:f0:da:a8:
b9:9a:08:97:5b:95:f8:28:76:c7:d8:a8:a0:ee:32:
ac:86:1c:07:06:eb:37:d8:a7:72:2b:9e:bd:5e:a9:
5c:77:ed:2f:55:d4:64:13:d7:fc:56:a6:c1:41:8d:
3a:f9:6d:8b:07:0c:55:be:98:7b:7c:77:d5:4f:92:
61:4a:93:cd:06:13:91:9c:7f:d9:d1:dd:68:3e:44:
4e:f5:86:35:0e:c3:09:d8:1e:bd:2b:40:b3:29:8b:
10:4f:4a:1b:b8:7d:50:a0:1c:d4:0d:a7:9f:57:f1:
53:78:b3:ce:0f:ab:96:44:f7:24:87:3b:d0:45:7c:
6e:e7:fd:db:c2:9c:c1:31:60:55:ac:bc:be:a2:68:
53:d1:2e:f9:22:26:e2:07:1f:78:87:b9:8f:42:48:
96:82:79:c5:b4:f9:9f:dd:da:ea:2c:25:86:57:24:
93:f1:6b:e0:c4:59:c8:04:bc:25:37:34:72:70:82:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D1:12:88:E0:B4:E4:50:0B:E4:E6:57:4B:1F:27:EB:CB:10:C0:A5
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/k9ESiOC05FAL5OZXSx8n68sQwKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.212.0/23
185.97.208.0/22
185.166.228.0/22
185.244.68.0/22
IPv6:
2a0b:1e00::/29
Signature Algorithm: sha256WithRSAEncryption
b9:aa:49:5e:4b:6f:96:f8:2f:4c:3f:84:d1:97:ff:71:a9:7b:
e1:83:59:f4:fa:93:a2:24:e3:f4:90:62:ed:8f:10:95:7e:ee:
a2:28:f0:4b:08:11:ae:3a:80:30:1d:0b:68:b3:fd:dc:d1:fa:
53:f8:69:e5:cc:e5:f3:65:b1:c1:77:6f:c1:16:77:f7:b9:92:
da:1f:6d:91:fe:8c:70:23:6b:e6:85:96:30:e7:7a:3d:a6:01:
2f:74:a4:b1:fd:44:c7:ab:66:51:a2:18:71:b2:54:9e:3c:d5:
17:a7:78:c6:1f:33:80:16:98:50:68:32:3c:cb:1a:1a:55:53:
69:d8:eb:9a:2e:e0:a4:3a:d0:3c:97:5a:d4:f6:18:f4:c3:a4:
e3:15:eb:b3:b5:bd:56:1b:09:3e:e0:65:46:08:52:92:7b:7e:
01:b8:4f:03:75:8f:29:a2:84:f2:5d:c3:4f:da:95:ca:79:6b:
94:fe:88:c0:fc:99:03:0d:3d:23:63:d9:b1:e8:be:a7:4d:70:
a6:0f:e3:99:e5:4c:cc:a7:cb:66:34:85:b3:8b:cc:66:bb:3b:
d6:04:5c:76:a0:b2:82:17:60:11:2c:55:91:4d:96:b7:2d:8f:
b5:7f:5d:80:a3:6a:1d:1b:61:22:86:c0:07:d8:23:c8:fd:da:
ad:b9:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:34 2025 by rpki-client