Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/9MozB7L4Set7tNqN83WEH4oSTdk.roa
File: 9MozB7L4Set7tNqN83WEH4oSTdk.roa (raw, json)
Hash identifier: kJHNE/MlmNWFKujPeHu4+QOZo4UmV5tDMpJ/m8T23WE=
Subject key identifier: F4:CA:33:07:B2:F8:49:EB:7B:B4:DA:8D:F3:75:84:1F:8A:12:4D:D9
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 019424B3A68D58A2A2F1EB79E19DD8F8AC97
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/9MozB7L4Set7tNqN83WEH4oSTdk.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49033
IP address blocks: 94.46.216.0/22 maxlen: 24
94.46.218.0/23 maxlen: 23
103.104.60.0/22 maxlen: 24
113.212.72.0/22 maxlen: 24
185.91.92.0/22 maxlen: 24
185.116.144.0/22 maxlen: 24
185.166.88.0/22 maxlen: 22
185.166.88.0/24 maxlen: 24
185.166.89.0/24 maxlen: 24
185.166.90.0/23 maxlen: 24
185.166.90.0/24 maxlen: 24
185.166.91.0/24 maxlen: 24
185.171.48.0/22 maxlen: 24
185.232.160.0/22 maxlen: 24
185.238.108.0/22 maxlen: 24
204.8.80.0/22 maxlen: 24
2a0f:dcc0::/29 maxlen: 48
2a0f:ddc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a6:8d:58:a2:a2:f1:eb:79:e1:9d:d8:f8:ac:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4ca3307b2f849eb7bb4da8df375841f8a124dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:63:ff:04:34:f3:f3:b1:76:fa:70:06:58:
e9:6a:38:34:e9:73:0e:26:e1:47:fc:6d:02:a8:47:
12:4c:20:1b:74:bf:2a:af:1f:b0:11:be:47:ec:f6:
45:67:81:8d:e2:fd:db:70:cf:24:84:ce:a6:5c:d8:
b2:c8:ce:d4:fc:5c:c6:88:bf:f7:8b:b5:6a:5d:7e:
88:d9:f7:24:5c:9c:4b:a1:f5:c0:ea:31:b6:6d:0d:
67:3b:5f:e6:a4:73:ba:a6:b5:69:ac:f3:2d:d0:94:
b3:40:00:22:b6:e6:1f:ae:bd:02:c6:b4:5b:ba:84:
47:14:d9:1d:b4:17:d0:d4:bf:0c:1f:24:56:c5:4b:
c5:41:41:f1:b3:50:ed:41:c5:4f:6b:0d:e2:97:ae:
3e:6f:71:59:42:e0:47:e3:ac:ff:85:6d:e4:63:44:
35:f6:ea:cd:97:ed:d8:31:c9:3d:20:b9:c8:b6:a5:
5c:97:e7:40:2c:50:0b:65:de:74:ea:05:78:2d:36:
d3:d2:8a:76:03:89:ca:13:4b:22:c5:1a:b4:f8:59:
b2:e2:12:a8:71:4b:b3:48:8b:1c:5d:da:e0:24:7b:
23:d6:8c:b8:1c:f6:ea:82:34:26:8c:6f:a2:e9:db:
00:09:4a:28:bc:ae:19:54:b0:c5:d5:de:30:9e:1c:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CA:33:07:B2:F8:49:EB:7B:B4:DA:8D:F3:75:84:1F:8A:12:4D:D9
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/9MozB7L4Set7tNqN83WEH4oSTdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.46.216.0/22
103.104.60.0/22
113.212.72.0/22
185.91.92.0/22
185.116.144.0/22
185.166.88.0/22
185.171.48.0/22
185.232.160.0/22
185.238.108.0/22
204.8.80.0/22
IPv6:
2a0f:dcc0::/29
2a0f:ddc0::/29
Signature Algorithm: sha256WithRSAEncryption
85:f7:c5:d3:ee:16:1d:94:68:b0:3c:ad:d8:14:2d:2e:c5:71:
ce:52:1d:b8:a8:c0:30:48:9f:b1:05:59:9e:c1:26:f8:c6:36:
50:71:28:9d:b4:31:b8:33:b1:74:96:cb:82:b1:7e:f7:63:d6:
2b:f5:88:4e:58:d8:30:b2:c5:87:aa:e6:0a:3e:47:09:a5:97:
6f:25:94:6b:23:ea:3d:9a:a2:0a:f6:86:b2:23:69:ae:fa:f5:
46:a3:c8:04:77:13:c4:4c:55:d4:a2:52:f8:33:6f:45:0d:5b:
bd:7f:7e:21:63:09:fc:f7:6d:3d:9a:6e:b8:73:47:09:38:fc:
ad:68:a7:18:a5:12:38:df:9f:16:0f:70:9d:e3:5d:be:36:44:
e0:6f:1a:a0:8d:cb:58:1a:5e:1d:af:de:78:ad:05:41:da:d2:
fb:a3:be:3a:86:01:38:75:38:32:4d:98:18:38:45:d7:e5:9e:
a3:60:55:94:ae:7c:66:56:a0:6b:63:59:91:9c:00:a1:2e:b7:
10:74:a3:48:ae:29:14:f3:bb:c2:44:43:b7:4e:77:ce:12:66:
a3:09:42:d3:ec:43:50:57:f6:1d:f6:fb:bb:48:a1:93:29:19:
a5:e1:55:6c:f8:39:81:7d:4b:6d:e2:30:a8:ac:a9:c6:98:7f:
c9:79:d9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:26 2025 by rpki-client