Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9tG_IZuU5_cUB2VxB4_mFuzbZWA.roa
File: 9tG_IZuU5_cUB2VxB4_mFuzbZWA.roa (raw, json)
Hash identifier: PfJNVhJ2t/gHrswGCAzyuF/aOd+UybWj7m8V6C9TjnM=
Subject key identifier: F6:D1:BF:21:9B:94:E7:F7:14:07:65:71:07:8F:E6:16:EC:DB:65:60
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019420D5DDCD7B72DC73B057D2334C6A2BA0
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9tG_IZuU5_cUB2VxB4_mFuzbZWA.roa
Signing time: Wed 01 Jan 2025 07:47:54 +0000
ROA not before: Wed 01 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61302
IP address blocks: 5.178.3.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
109.205.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:dd:cd:7b:72:dc:73:b0:57:d2:33:4c:6a:2b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6d1bf219b94e7f714076571078fe616ecdb6560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:62:4a:16:aa:db:db:d4:e2:37:84:b7:8b:
f2:b9:20:e4:71:52:94:ba:a7:d1:e1:32:d6:07:8d:
bc:1d:7e:97:e1:38:8e:15:d6:bc:70:00:29:f8:49:
82:77:be:ae:e0:80:06:83:84:3b:27:92:f3:77:45:
ab:d0:e5:7d:e8:07:1d:3d:9e:4d:02:a4:0a:38:0f:
1c:17:a4:ec:ff:40:24:9d:22:69:82:25:3b:39:d7:
b7:44:b8:b7:1e:6d:b0:70:2a:2a:38:10:6c:11:4e:
37:d5:1e:71:42:7a:ec:57:47:a8:ea:c7:79:b2:df:
15:7d:40:31:07:06:70:02:07:43:9f:8e:ac:8c:25:
8e:08:02:36:61:88:ac:b6:e9:8d:e1:d9:15:cb:28:
7f:9b:d8:e2:1a:6a:b1:ed:7e:9c:5e:dd:14:63:6a:
cd:fb:cb:6f:d9:9d:bb:55:fd:28:74:de:e8:75:5e:
b1:fd:f3:0d:26:19:d2:a8:ab:ae:2e:76:6f:76:37:
25:2a:9f:86:f6:d3:3b:cb:d4:c3:de:a5:40:a1:1e:
ea:1d:ae:ca:11:bb:41:c5:89:ae:6a:b7:e6:45:c7:
84:ea:78:2d:19:16:6e:02:4a:09:39:fc:37:50:63:
f6:de:05:f8:b6:46:25:b3:ff:f9:66:06:10:75:aa:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D1:BF:21:9B:94:E7:F7:14:07:65:71:07:8F:E6:16:EC:DB:65:60
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9tG_IZuU5_cUB2VxB4_mFuzbZWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.3.0/24
46.23.96.0/24
46.23.98.0/24
109.205.212.0/24
Signature Algorithm: sha256WithRSAEncryption
62:dc:f9:b7:f2:21:11:dc:08:03:4e:f9:22:f1:3f:40:30:ec:
d6:3f:9d:b3:1a:11:f7:c6:44:ea:7d:44:07:24:15:7b:fe:c4:
3d:4c:b4:11:6f:5f:5b:d7:3e:ba:42:01:bc:90:76:4c:2c:b5:
f0:7f:90:19:46:71:9f:2c:10:b9:4a:5d:cf:36:77:db:55:f4:
fc:14:fe:7d:48:1b:c2:7a:82:9e:64:9f:42:5f:7f:48:48:d3:
b0:3f:4d:c0:4a:46:5b:c1:4c:b5:34:26:48:6b:4e:17:c9:42:
9f:85:5b:12:70:a8:99:d4:00:5f:7d:de:89:d4:ae:d6:6f:8a:
0c:0d:65:ed:d0:0d:21:a3:1f:fe:fe:cc:db:18:4b:89:38:41:
f3:65:19:8f:f8:7e:58:be:9a:3b:6a:df:ee:d6:4b:64:d8:8a:
0c:36:48:4b:a7:e5:ec:53:b5:cb:88:cd:bf:34:02:98:9d:16:
06:16:4d:e5:51:4a:1e:2c:dc:2b:08:65:06:53:3d:c1:65:aa:
5b:3b:44:9a:6a:5e:a7:0f:da:da:41:ef:9f:dd:76:5a:47:96:
45:ca:dd:1e:0e:35:6d:a5:f3:77:f4:29:88:96:dd:51:dd:a4:
7c:92:eb:4a:0a:66:1e:2f:9a:c3:ce:79:72:03:ea:a7:b3:bd:
2f:1c:9c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:04 2025 by rpki-client