Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa
File: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (raw, json)
Hash identifier: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=
Subject key identifier: 24:DA:35:31:4B:CE:EE:CF:00:F6:41:C1:02:49:AF:A0:08:8F:1A:F3
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 0194266C42AD4E77D07CB63B31F4C5BF4CCE
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39791
IP address blocks: 89.111.64.0/18 maxlen: 18
89.111.72.0/21 maxlen: 21
89.111.72.0/22 maxlen: 22
89.111.76.0/22 maxlen: 22
89.111.102.0/24 maxlen: 24
193.109.176.0/21 maxlen: 21
2a01:a040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:42:ad:4e:77:d0:7c:b6:3b:31:f4:c5:bf:4c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24da35314bceeecf00f641c10249afa0088f1af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:df:01:1c:9b:c3:c7:88:64:12:f6:5c:3d:
5f:eb:69:bc:b8:c3:b9:dc:f1:09:ce:b5:7e:12:81:
f5:c1:38:9c:ba:c5:73:13:22:b5:66:ec:a6:ea:0a:
cc:f1:b5:05:79:45:82:46:82:d0:8c:f7:f0:88:7d:
3c:f6:9d:4f:b7:31:cc:27:3e:43:d5:cc:83:e0:f9:
33:88:31:9e:de:57:b2:b4:d9:fa:95:60:a7:5d:1e:
30:1a:82:13:54:ef:52:de:2b:b0:b9:55:bf:5d:05:
4b:b7:1e:d0:77:5a:d1:60:a3:2a:ab:68:09:74:31:
94:f9:2e:99:61:a5:3c:7c:ed:3a:e1:a4:8f:07:19:
3f:7c:ee:5c:2a:98:b0:e6:f0:a2:59:07:7e:d7:88:
90:6a:25:d5:ee:fd:3b:e3:1b:4d:f5:ee:96:d4:9b:
9c:9b:cd:5b:60:28:a6:db:a8:9e:2d:4e:dd:d4:d5:
d1:c6:d2:16:bb:2e:6e:b6:8a:3f:3b:a4:1a:a5:53:
c5:52:9c:90:e5:e9:3f:58:16:6d:8a:96:4c:4b:48:
b8:6b:cf:41:dd:10:2b:7d:e9:0e:cb:01:05:8e:1a:
b2:1f:b7:69:24:22:f7:5c:dd:c9:4f:cc:22:4e:ed:
2e:42:97:c7:42:d5:6e:f6:1c:6c:a0:21:16:c1:eb:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DA:35:31:4B:CE:EE:CF:00:F6:41:C1:02:49:AF:A0:08:8F:1A:F3
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.111.64.0/18
193.109.176.0/21
IPv6:
2a01:a040::/32
Signature Algorithm: sha256WithRSAEncryption
05:ca:d0:a2:ba:cd:a1:f0:b3:15:5a:81:bb:50:10:b3:e9:27:
d2:00:79:f2:11:5a:17:3c:a2:f9:36:78:d4:0a:24:12:83:5b:
09:40:21:d7:cd:ad:68:02:a0:79:e5:79:da:7c:0a:34:cf:d1:
3a:5e:e7:48:88:cf:87:de:9f:37:2b:20:3c:9f:c9:d5:06:9a:
dd:19:6b:9d:31:d8:85:e1:c2:62:52:ac:5b:99:f5:b7:49:e6:
fc:e9:d2:3f:fc:de:82:da:4a:75:67:78:9c:c8:7a:12:e6:ae:
30:31:b4:b3:d3:9e:f4:f3:fd:0b:aa:33:de:fc:98:95:eb:a5:
ed:40:d4:28:09:1b:64:a7:f0:12:ce:7e:6c:c1:34:bf:0f:47:
83:4d:91:86:a5:00:5e:2a:0f:a4:87:01:ed:c6:d2:d0:8e:9a:
b6:94:3f:e5:db:85:46:53:41:29:cb:42:7a:52:e7:90:af:a0:
a6:f1:67:11:1f:3c:c9:c9:38:a1:07:cd:cb:76:2d:3f:d2:16:
f2:ae:5d:0c:c7:fc:18:71:a6:34:7c:4c:88:01:14:2c:3c:28:
9b:13:c9:e8:c8:be:3d:85:38:a0:ef:7c:31:fa:d2:32:1a:cd:
d5:3a:d0:65:23:4b:9e:2c:a0:d0:db:a5:70:51:37:55:be:60:
03:1e:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:46:48 2025 by rpki-client