Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/0pi9IaQq2fBWcGfcpKeC_IHzvEQ.roa
File: 0pi9IaQq2fBWcGfcpKeC_IHzvEQ.roa (raw, json)
Hash identifier: 7NVRHz/yavsbwJXBgfeDxYrCqDuUxp9nZbgGaZLZ9oA=
Subject key identifier: D2:98:BD:21:A4:2A:D9:F0:56:70:67:DC:A4:A7:82:FC:81:F3:BC:44
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 0195C98FA8C96D208FDC52F0F8B1949D4F20
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/0pi9IaQq2fBWcGfcpKeC_IHzvEQ.roa
Signing time: Mon 24 Mar 2025 19:09:49 +0000
ROA not before: Mon 24 Mar 2025 19:09:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 91.213.8.0/24 maxlen: 24
194.15.114.0/24 maxlen: 24
2a0d:ef80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:8f:a8:c9:6d:20:8f:dc:52:f0:f8:b1:94:9d:4f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Mar 24 19:09:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d298bd21a42ad9f0567067dca4a782fc81f3bc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:e7:ee:01:18:17:45:34:a0:e2:53:82:48:
99:5d:72:3a:89:ea:93:81:65:82:53:f9:a3:ec:4c:
9e:86:d3:03:19:6e:f8:2b:ab:95:54:de:af:3c:25:
f5:83:8c:9c:13:68:45:75:fa:c4:91:cd:71:ab:d9:
20:f6:a3:28:d5:2d:cf:b8:27:51:d0:e5:91:7f:75:
b4:7a:7e:e1:a8:24:2c:2b:c0:28:9c:bb:15:27:26:
b9:7c:ce:a5:59:80:d0:82:4f:bb:fc:fb:cd:b0:90:
d0:af:7d:1b:b9:69:18:c7:a4:e2:e0:f0:07:74:95:
ac:cb:9a:b3:62:f5:01:c2:19:a8:f9:8f:d7:e5:cb:
35:b9:0e:a8:d9:e4:28:5b:59:20:e6:fd:32:ab:83:
6c:8f:d9:c2:f5:af:22:83:aa:60:df:a0:7b:94:76:
69:9a:12:6f:b7:1c:ec:f0:1e:6f:7b:eb:a9:da:cc:
de:62:e6:0e:c6:fe:8e:07:10:26:42:1b:59:ed:3b:
9c:15:93:dd:bc:6c:5d:83:97:66:e3:d1:f0:58:46:
32:b1:e6:83:fd:49:5b:82:b3:35:fa:1d:29:e1:d3:
cc:70:3f:91:39:5f:9c:f4:47:20:53:98:e4:e6:53:
a8:80:a3:3e:56:d3:ad:43:8e:bf:d8:53:d9:c7:79:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:98:BD:21:A4:2A:D9:F0:56:70:67:DC:A4:A7:82:FC:81:F3:BC:44
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/0pi9IaQq2fBWcGfcpKeC_IHzvEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.8.0/24
194.15.114.0/24
IPv6:
2a0d:ef80::/32
Signature Algorithm: sha256WithRSAEncryption
73:9f:6f:07:21:73:17:1b:e8:5d:ec:a3:da:30:bf:e6:52:d2:
f9:ab:17:0f:dc:85:0d:10:40:57:a2:e7:61:26:3a:32:e4:5c:
c2:88:66:8b:dd:69:be:67:b4:1f:c0:11:cc:6a:e2:52:0e:0b:
2c:6e:90:1d:13:c8:7b:2d:9a:9c:80:7c:d1:4f:05:c2:14:70:
b9:c7:1d:75:0e:d9:e8:78:ea:c9:cd:ad:86:0c:3c:a4:e2:c0:
ff:8d:69:11:74:a8:6b:df:9f:53:d6:8c:70:16:dd:67:2e:fe:
23:87:84:fd:6c:a9:d4:e1:7d:be:3f:1b:9d:b0:69:fb:f0:7c:
aa:6d:51:d2:44:ef:31:53:b2:e1:d1:1d:42:78:0a:9c:ce:dc:
55:98:40:62:88:e2:e4:a0:bf:85:ea:47:a2:45:12:9d:85:2a:
93:1b:47:cb:32:e2:de:ae:34:a1:90:14:3a:f4:84:4b:f7:7c:
0b:f5:64:c9:74:5e:fd:17:c8:11:6c:f4:88:dd:73:70:f3:d4:
6e:54:68:06:b7:ac:9f:9c:ed:90:d0:1c:13:fe:04:61:17:43:
53:a7:55:cb:fb:b7:8e:64:c6:42:7f:5c:59:43:95:72:2b:e5:
08:11:db:76:7f:be:1f:5d:69:d1:db:90:e9:54:f3:f1:4b:f5:
b2:eb:9b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:37 2025 by rpki-client