Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/_9bhuNhFLcA0HPv8bquRW0OUHTY.roa
File: _9bhuNhFLcA0HPv8bquRW0OUHTY.roa (raw, json)
Hash identifier: +AAi2JdNKRV5CFL7Yq+UFdnc1nHIGlMicPgKcuKxkmI=
Subject key identifier: FF:D6:E1:B8:D8:45:2D:C0:34:1C:FB:FC:6E:AB:91:5B:43:94:1D:36
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 01941F8C821B6A3658964F3199B59F59F89D
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/_9bhuNhFLcA0HPv8bquRW0OUHTY.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215423
IP address blocks: 37.122.152.0/24 maxlen: 24
176.106.227.0/24 maxlen: 24
176.106.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:82:1b:6a:36:58:96:4f:31:99:b5:9f:59:f8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffd6e1b8d8452dc0341cfbfc6eab915b43941d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:61:a6:fc:ab:a4:53:f3:9c:fc:60:a1:3c:
46:48:73:ec:b0:dd:02:18:89:9a:6e:aa:ca:18:01:
43:5c:96:e3:35:a5:b6:fa:85:cc:a7:e7:95:65:3e:
f8:81:1b:6b:86:95:94:7f:de:7e:22:e1:3f:3c:d2:
de:29:38:96:71:6d:9d:6e:eb:7e:d4:4e:3e:c3:ed:
ed:94:d6:c9:f9:3c:92:b6:6f:b9:e6:21:46:94:13:
44:8f:0a:8b:71:bd:0e:af:86:cd:dd:d7:9b:45:21:
33:16:5a:c5:bf:02:20:bc:ac:91:f7:ba:02:86:a1:
bf:a4:32:1b:05:6a:1b:30:4a:b6:7b:f7:48:e4:52:
c8:37:8c:cb:97:a0:f9:59:29:a9:f5:21:33:56:9d:
4b:7b:1d:03:f5:13:93:8c:01:3b:ea:17:bb:52:60:
2f:dc:06:fa:23:1e:ff:b6:be:a4:a3:f2:da:58:34:
be:a1:71:87:33:9f:62:39:02:34:91:88:ed:dd:f3:
f9:f7:d0:39:65:62:a7:b5:1d:7d:71:51:87:f7:cb:
ab:75:d6:6b:19:74:62:46:49:3d:5a:71:ef:38:75:
48:6c:6f:32:a3:aa:bb:26:74:d1:c7:00:b2:ba:79:
25:3b:ac:43:bd:20:d4:55:d8:da:f4:7b:c8:30:55:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D6:E1:B8:D8:45:2D:C0:34:1C:FB:FC:6E:AB:91:5B:43:94:1D:36
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/_9bhuNhFLcA0HPv8bquRW0OUHTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.152.0/24
176.106.227.0-176.106.228.255
Signature Algorithm: sha256WithRSAEncryption
55:34:3f:ad:9d:98:9a:ca:08:ec:16:7a:56:ba:db:56:5b:cc:
f4:1b:9b:31:22:f2:3e:6e:cf:43:98:12:c1:36:d5:59:aa:f6:
c5:82:df:ed:5a:20:e1:c1:9f:16:7b:4f:4a:5e:8b:49:80:2d:
8e:9c:bd:9c:8a:90:c8:57:e4:9e:69:c9:98:60:91:8f:5b:98:
0b:26:9b:be:cd:53:25:fb:98:6f:5d:7d:62:69:44:d5:c3:95:
90:90:7d:c4:6f:44:21:a5:bd:a5:64:39:ce:12:ac:9e:42:12:
f7:cc:03:43:1b:df:8a:c4:35:e8:d9:fe:64:86:6e:d9:06:35:
79:54:c7:da:e0:99:7c:d5:10:9c:c4:ed:3b:85:bc:cd:e7:96:
29:83:8e:2a:6b:70:7b:f1:e6:49:ae:23:8c:09:9d:8f:ef:50:
49:bf:c0:a9:b7:70:5a:9a:a3:3c:0a:ac:15:4e:57:84:89:62:
2b:f6:e2:22:55:e8:6b:94:16:25:e0:fe:b9:e8:85:b0:c4:2d:
f5:3d:e3:80:72:2c:4c:5c:77:c5:7c:2d:df:a8:1f:87:6f:e2:
46:98:30:d5:88:7d:b5:cb:5b:31:cc:70:42:c3:c7:72:a3:b8:
93:f2:48:6e:da:d1:5b:40:86:7e:a0:29:60:48:c1:8b:7d:24:
fa:bb:60:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 03:25:46 2025 by rpki-client