Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/9qqw5-kT_WV_X39A7wZIImdbzHo.roa
File: 9qqw5-kT_WV_X39A7wZIImdbzHo.roa (raw, json)
Hash identifier: /+5dGBlEHLXX+0YtcqdadMo/w6B/YFbkAqy9tbmNdEg=
Subject key identifier: F6:AA:B0:E7:E9:13:FD:65:7F:5F:7F:40:EF:06:48:22:67:5B:CC:7A
Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial: 019420D65392710EADD9EDBE8A3EDF79DFB5
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/9qqw5-kT_WV_X39A7wZIImdbzHo.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199058
IP address blocks: 45.85.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:53:92:71:0e:ad:d9:ed:be:8a:3e:df:79:df:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6aab0e7e913fd657f5f7f40ef064822675bcc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:dd:d8:0e:af:1b:a5:63:fd:9c:17:d2:fd:
0f:97:1c:d6:e4:af:ed:c2:69:39:78:7f:b0:49:6b:
80:ca:fd:bd:4c:75:04:a3:95:2c:bf:70:eb:ed:03:
7c:fb:37:65:f6:55:13:65:62:40:29:09:c8:54:56:
7d:1d:29:3a:07:61:c1:af:f0:3c:14:95:7d:6a:41:
be:b1:33:f4:55:82:c9:3e:4e:9e:e6:63:1f:44:65:
a9:d8:10:7e:69:06:0d:ee:dc:49:e4:7a:e4:e5:da:
d6:a4:df:2f:ac:39:e9:02:63:90:48:b5:fa:50:27:
82:51:3e:e2:f5:b0:eb:00:dd:70:d6:77:fd:4a:b4:
b3:71:0b:fc:83:ca:1d:d3:4c:fc:8b:89:b9:d7:30:
1f:9c:8f:aa:80:2d:37:36:22:ba:e0:b2:8a:47:0d:
6f:58:fc:0d:1c:40:fa:c4:f6:c6:a9:10:54:7b:94:
a0:7d:24:10:58:62:bf:96:81:e8:44:0f:9b:af:5d:
c3:f4:d8:04:e5:28:54:d5:fd:6c:e6:1d:9e:86:c4:
7b:c4:cc:fc:72:e6:45:b7:e8:5a:54:f5:56:6b:9d:
46:58:83:91:ab:e2:12:d9:b6:03:e9:a1:94:16:d4:
64:38:3d:25:92:a6:57:ea:9a:60:f4:52:96:d7:92:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AA:B0:E7:E9:13:FD:65:7F:5F:7F:40:EF:06:48:22:67:5B:CC:7A
X509v3 Authority Key Identifier:
keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/9qqw5-kT_WV_X39A7wZIImdbzHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.93.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e5:8f:bf:20:cc:09:ff:19:6c:80:03:a8:0b:a3:6c:34:e8:
9d:0c:bf:5c:07:28:c6:35:fc:b3:88:38:9c:4e:b2:6c:d3:f6:
1a:cd:33:73:5d:ca:4a:a9:e8:7e:2b:21:ca:1a:1e:7b:fe:29:
32:26:9c:af:56:c4:d4:8a:91:29:6b:98:e9:93:5a:d4:2c:6f:
ec:e5:1e:d3:23:b2:a4:02:74:c5:31:1d:fd:5d:2c:16:41:4c:
9d:e9:22:8b:be:02:dc:17:06:90:f5:d0:69:47:09:ec:b0:fa:
00:c7:80:ec:9e:bf:60:6e:c7:a4:7c:0b:17:fe:7f:75:d8:0d:
13:f6:ce:94:3b:3f:0f:ae:c3:64:d2:3e:ed:f5:e8:a8:1e:70:
b2:a1:25:62:77:74:9f:86:d3:b7:91:84:4e:fa:f2:5a:ed:bc:
71:0c:e8:76:64:78:28:40:3b:fc:97:97:3c:e4:8d:dd:54:5d:
c5:ce:06:e5:7d:f1:d1:dc:02:6e:38:42:85:1d:63:32:59:89:
37:49:64:58:d1:47:eb:61:80:85:d7:b0:fa:f8:5f:4f:fc:55:
b7:ff:66:05:14:84:d5:20:a0:1c:dd:59:46:3d:e2:9b:db:2d:
71:3c:38:d2:94:50:1f:6d:25:ba:59:e3:d2:69:55:a5:20:54:
09:49:3b:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1lOScQ6t2e2+ij7fed+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjBkMzM0MzJlY2E3N2MwNTRlOGZhODcwNzI0OGRhNGU0
N2RiMGIwHhcNMjUwMTAxMDc0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmFhYjBlN2U5MTNmZDY1N2Y1ZjdmNDBlZjA2NDgyMjY3NWJjYzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVfd2A6vG6Vj/ZwX0v0PlxzW5K/t
wmk5eH+wSWuAyv29THUEo5Usv3Dr7QN8+zdl9lUTZWJAKQnIVFZ9HSk6B2HBr/A8
FJV9akG+sTP0VYLJPk6e5mMfRGWp2BB+aQYN7txJ5Hrk5drWpN8vrDnpAmOQSLX6
UCeCUT7i9bDrAN1w1nf9SrSzcQv8g8od00z8i4m51zAfnI+qgC03NiK64LKKRw1v
WPwNHED6xPbGqRBUe5SgfSQQWGK/loHoRA+br13D9NgE5ShU1f1s5h2ehsR7xMz8
cuZFt+haVPVWa51GWIORq+IS2bYD6aGUFtRkOD0lkqZX6ppg9FKW15LqVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPaqsOfpE/1lf19/QO8GSCJnW8x6MB8GA1UdIwQY
MBaAFLmw0zQy7Kd8BU6PqHBySNpOR9sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQt
ZDE5NmY5MjkxNzMyLzEvOXFxdzUta1RfV1ZfWDM5QTd3WklJbWRiekhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQtZDE5NmY5MjkxNzMy
LzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVVdMA0G
CSqGSIb3DQEBCwUAA4IBAQCL5Y+/IMwJ/xlsgAOoC6NsNOidDL9cByjGNfyziDic
TrJs0/YazTNzXcpKqeh+KyHKGh57/ikyJpyvVsTUipEpa5jpk1rULG/s5R7TI7Kk
AnTFMR39XSwWQUyd6SKLvgLcFwaQ9dBpRwnssPoAx4Dsnr9gbsekfAsX/n912A0T
9s6UOz8PrsNk0j7t9eioHnCyoSVid3SfhtO3kYRO+vJa7bxxDOh2ZHgoQDv8l5c8
5I3dVF3FzgblffHR3AJuOEKFHWMyWYk3SWRY0UfrYYCF17D6+F9P/FW3/2YFFITV
IKAc3VlGPeKb2y1xPDjSlFAfbSW6WePSaVWlIFQJSTuz
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:56:12 2025 by rpki-client