Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/nO41lzHTLA0qnXGNSido0EKnbG8.roa
File: nO41lzHTLA0qnXGNSido0EKnbG8.roa (raw, json)
Hash identifier: p9hF7X8F0vCkUimBjAw1aM4Oym1MBxjaah21sqRzrUE=
Subject key identifier: 9C:EE:35:97:31:D3:2C:0D:2A:9D:71:8D:4A:27:68:D0:42:A7:6C:6F
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 019425215E343D5E3A470ADEC742C13A7304
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/nO41lzHTLA0qnXGNSido0EKnbG8.roa
Signing time: Thu 02 Jan 2025 03:48:51 +0000
ROA not before: Thu 02 Jan 2025 03:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35319
IP address blocks: 91.204.121.0/24 maxlen: 24
91.204.122.0/24 maxlen: 24
193.19.240.0/24 maxlen: 24
193.19.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5e:34:3d:5e:3a:47:0a:de:c7:42:c1:3a:73:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Jan 2 03:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cee359731d32c0d2a9d718d4a2768d042a76c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:95:ed:03:c4:e6:89:99:14:d9:79:76:a3:
d3:ff:32:6f:ea:de:b6:66:03:2c:a4:33:87:66:04:
c9:6c:26:ab:04:a8:74:19:79:dd:56:43:92:76:71:
53:1e:1c:55:cb:34:da:b2:c9:0d:d7:7b:00:f5:83:
62:c9:de:6c:7e:b2:e2:01:34:81:76:6c:e4:e4:c2:
6d:ec:8e:d9:10:28:16:04:aa:44:90:73:59:67:9b:
fb:31:7f:ab:39:50:43:d7:a1:62:65:5e:48:87:28:
8e:d1:65:a4:6b:06:51:ad:18:25:7f:77:92:ca:ba:
da:91:52:0d:a8:95:36:a4:aa:64:ff:fd:5f:79:23:
ca:68:2b:40:5e:ca:94:49:46:67:a8:fa:b1:fd:69:
3b:82:2c:4b:dd:63:bc:ee:d6:ad:0c:62:1f:26:18:
07:10:17:36:5e:09:f8:e0:ac:81:41:8d:9a:4b:66:
48:be:5d:1c:78:1e:8a:11:bd:d9:c2:09:f4:cc:30:
fd:67:e8:58:5a:f8:b0:b5:b8:1c:87:c3:79:d2:5b:
3f:48:ab:ef:00:e2:b6:5c:ca:5a:b3:ef:71:97:21:
8d:07:63:ff:d1:e9:7f:22:80:59:84:2c:26:82:d9:
8d:43:df:a6:14:e8:57:12:c3:aa:c9:91:ff:be:85:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EE:35:97:31:D3:2C:0D:2A:9D:71:8D:4A:27:68:D0:42:A7:6C:6F
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/nO41lzHTLA0qnXGNSido0EKnbG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.121.0-91.204.122.255
193.19.240.0/24
193.19.242.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7a:f3:e3:b0:0e:1a:c9:5c:0d:83:d6:12:ce:21:34:9d:c4:
fb:e7:79:03:57:b0:bc:8d:09:4a:7f:42:37:2c:f5:97:87:e2:
e0:00:82:34:ab:5b:02:a1:90:e5:56:f6:7c:97:65:69:b0:30:
6c:82:95:dc:60:ff:45:1f:1c:61:20:b2:bb:27:1c:98:65:ce:
a2:00:c4:f2:f5:46:ce:e5:44:e1:3a:1b:c8:18:b1:78:d4:b1:
41:38:d8:0b:4a:4f:89:c3:fd:47:e2:b8:6c:c5:4b:18:c9:37:
c2:27:88:c1:e6:fe:16:a2:7a:5e:77:9a:84:82:7b:62:d3:e2:
ad:4a:16:71:d0:f3:7b:96:43:de:e4:5f:66:34:95:48:cd:31:
5a:34:e4:10:b5:9b:08:72:0a:69:29:55:e2:97:73:7d:89:ea:
fd:2c:cb:33:34:20:a1:f7:e9:a9:3a:d6:92:a2:bd:63:cc:98:
61:2a:50:bc:1b:b2:e4:bc:fd:5f:0d:81:d3:23:eb:aa:aa:f0:
63:ce:c1:c8:5c:f6:b5:5c:94:3e:18:cd:8c:e5:53:5c:9d:7e:
bc:a0:02:33:80:25:3d:d4:83:a3:6f:7a:e3:e5:08:e5:90:c3:
4f:35:66:68:a0:c4:14:aa:a3:ff:ff:4c:f5:55:fc:6c:f4:91:
ce:9b:ff:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 14:42:44 2025 by rpki-client