Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/9llKTYz55e1x1N79z5XQiF3dT4g.roa
File: 9llKTYz55e1x1N79z5XQiF3dT4g.roa (raw, json)
Hash identifier: PS5GRedQdCJlh0VR0C24dd32hYgK4alJsCFo2wKdfTY=
Subject key identifier: F6:59:4A:4D:8C:F9:E5:ED:71:D4:DE:FD:CF:95:D0:88:5D:DD:4F:88
Certificate issuer: /CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Certificate serial: 019426D9B33D292107716E7FD23844BD3C7A
Authority key identifier: 9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/9llKTYz55e1x1N79z5XQiF3dT4g.roa
Signing time: Thu 02 Jan 2025 11:49:48 +0000
ROA not before: Thu 02 Jan 2025 11:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60522
IP address blocks: 194.76.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b3:3d:29:21:07:71:6e:7f:d2:38:44:bd:3c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Validity
Not Before: Jan 2 11:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6594a4d8cf9e5ed71d4defdcf95d0885ddd4f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:43:b1:b2:91:e6:76:ef:b3:7b:ad:8c:9f:
cb:78:ad:c1:00:8f:4a:19:a3:9c:70:9f:fb:cf:b0:
28:8a:62:92:11:0e:0d:0a:78:ec:dc:bc:b7:4a:a1:
4d:18:e7:e2:b0:e2:c2:25:af:e9:96:67:1d:6e:d7:
c2:fc:62:a8:03:93:07:76:27:75:b6:ee:6f:ab:27:
e6:ba:72:86:b3:be:28:68:66:ae:b1:01:6c:1e:a3:
50:36:32:ec:61:d0:09:78:32:3a:4d:86:34:8e:34:
bd:9d:b6:82:58:12:c5:48:4c:9a:1a:45:28:f3:47:
f2:01:bf:88:3c:e6:84:54:a6:94:d7:d1:a7:8a:41:
e8:db:42:df:29:78:fc:d4:57:a0:03:45:15:02:4d:
8b:00:7d:29:7f:ce:84:86:57:ea:50:54:55:b3:4b:
22:29:75:6e:f9:19:6d:84:30:58:17:95:19:f5:8b:
45:c9:a0:b5:90:97:6f:ed:2b:62:3f:23:26:08:4d:
5d:fc:b5:c9:20:e2:47:ab:82:1c:97:20:1b:3f:2b:
6f:7c:9a:9e:36:7e:ee:1f:95:cd:9e:c7:51:59:33:
cc:cf:8a:5d:72:81:d9:e2:66:a1:43:dd:0d:04:a6:
c8:40:73:05:0f:94:f6:94:5a:ac:88:9c:3b:6d:02:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:59:4A:4D:8C:F9:E5:ED:71:D4:DE:FD:CF:95:D0:88:5D:DD:4F:88
X509v3 Authority Key Identifier:
keyid:9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/9llKTYz55e1x1N79z5XQiF3dT4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.14.0/24
Signature Algorithm: sha256WithRSAEncryption
47:70:62:2f:30:50:66:87:5f:44:05:73:30:ed:f1:fd:c0:68:
74:9f:7f:6c:56:f6:8e:ab:50:20:02:77:6a:b6:c1:1b:4d:e4:
c3:1e:af:7b:27:b0:cd:6b:3e:e6:be:9e:09:d2:63:99:b1:ba:
2f:e4:2a:4f:d2:0c:41:c7:a4:24:7f:fe:4c:bf:9e:56:63:23:
b8:71:14:5e:57:2e:74:36:4c:96:ac:c2:48:a1:fa:2a:89:36:
c9:87:8b:1f:22:57:7e:81:8f:5f:66:a4:bb:e0:77:71:64:6f:
3a:cf:33:b2:da:f7:a3:a7:35:ee:4f:15:33:83:57:fd:98:c1:
ca:db:0d:83:75:24:47:38:7d:1d:d2:b6:17:ce:6e:87:1c:42:
ab:ec:b0:59:ae:9f:c6:3f:48:6c:96:90:92:a7:c1:8b:15:35:
34:00:97:b5:1b:b7:97:58:0e:1c:b0:f5:01:51:8b:1f:e5:7b:
50:e7:a4:e9:76:4a:48:8d:8d:41:cc:86:81:bc:2f:e3:6b:c7:
a0:0e:ed:b7:30:f6:d4:c3:16:1f:d9:d9:e0:0a:81:81:41:d0:
58:b7:40:85:b5:cd:51:2d:a1:80:24:00:71:49:e5:c8:66:c3:
86:4b:6f:48:d7:60:82:76:f1:b4:ab:bd:76:ef:76:ca:f5:ea:
b8:16:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:22 2025 by rpki-client