Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Fy2GYv_kkuwx83Qd1KeVh-6dfZU.roa
File: Fy2GYv_kkuwx83Qd1KeVh-6dfZU.roa (raw, json)
Hash identifier: JaIkPoZMYnthxP767Zb5Z9K5QqLJcpVYjoZdS+pB+W4=
Subject key identifier: 17:2D:86:62:FF:E4:92:EC:31:F3:74:1D:D4:A7:95:87:EE:9D:7D:95
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 01942748295E0D377987E94C5998AD65EFE0
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Fy2GYv_kkuwx83Qd1KeVh-6dfZU.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39396
IP address blocks: 109.121.136.0/24 maxlen: 24
109.121.139.0/24 maxlen: 24
109.121.142.0/24 maxlen: 24
109.121.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:29:5e:0d:37:79:87:e9:4c:59:98:ad:65:ef:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=172d8662ffe492ec31f3741dd4a79587ee9d7d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:14:c5:bf:9b:99:9e:be:f2:9f:7c:93:c6:
36:6a:d2:42:f4:17:b7:82:9a:1c:0b:2b:1f:5a:ab:
6f:0f:cc:df:8a:88:f0:44:a4:a2:3f:ca:aa:d0:c4:
3b:38:08:70:1d:65:90:a0:f1:75:8d:92:ee:5f:d7:
71:5a:7e:6d:60:a4:e2:d0:48:8b:6b:11:66:a2:59:
f9:d6:91:64:ad:1f:28:9e:d6:8a:ec:1f:a4:57:3c:
a9:f4:49:95:28:54:65:d2:7d:53:e8:ea:24:b1:1a:
95:c3:81:c2:2b:de:00:55:f4:34:95:e0:cc:6a:b8:
15:77:9a:c4:52:7a:26:b1:fd:f3:5a:71:a8:21:26:
b7:0f:96:f4:6d:fb:ed:96:ef:b1:73:9c:93:90:d3:
32:cb:37:f0:aa:3c:9f:b1:f3:4e:54:ce:cd:7f:04:
7f:f9:bc:0f:50:e4:30:f9:38:e6:88:b5:68:a0:a5:
f4:b5:82:24:fe:56:19:ca:c1:bd:40:17:60:7d:bc:
d0:07:da:79:d6:a6:b9:fc:79:03:0a:ee:d0:37:51:
da:be:e8:e0:fa:39:84:1d:87:62:43:25:01:a7:cd:
e2:f2:38:65:b8:34:fe:b5:58:02:55:20:14:ab:1c:
fe:ab:57:df:22:fc:60:77:5c:8a:fc:c1:31:31:03:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:86:62:FF:E4:92:EC:31:F3:74:1D:D4:A7:95:87:EE:9D:7D:95
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Fy2GYv_kkuwx83Qd1KeVh-6dfZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.136.0/24
109.121.139.0/24
109.121.142.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:46:48:98:a4:e9:a8:69:e7:22:03:fa:41:18:ea:96:00:f1:
19:c4:72:e2:51:1b:b9:1c:13:af:68:57:3f:a8:e2:66:3b:7b:
63:bb:cb:8a:7f:0a:d1:86:6c:12:5a:da:f6:fb:a4:d3:37:26:
3d:42:5a:20:d5:63:b4:ec:ab:d0:df:9c:7c:62:ee:2c:cf:af:
7c:0e:29:bc:0d:a2:71:66:88:fb:2b:1c:99:ec:08:10:8a:c8:
84:db:61:7e:43:56:2e:18:4d:95:30:dd:3b:9b:f1:38:0b:95:
8e:29:47:dc:63:3f:c3:58:63:44:37:c7:55:d3:a0:a7:73:3d:
1f:4f:70:89:58:4d:2d:b8:56:62:75:32:a6:54:43:16:47:7e:
c3:ca:4a:3b:28:bb:9f:70:fc:30:75:dc:e6:b5:57:0e:2b:23:
d0:5b:52:67:35:9d:15:10:2b:c5:36:6c:47:47:c3:89:b6:0c:
cb:51:a7:1d:5e:4b:47:a6:22:b2:ab:6e:b6:3a:56:3e:81:e7:
37:3b:62:e4:e7:88:34:dd:e8:f6:f0:01:6f:27:f6:9a:6d:1f:
66:9b:13:a6:64:80:d3:5b:f7:29:ee:d6:5b:45:bf:bc:2a:5d:
ff:5d:19:9a:8e:d4:4b:0c:9a:79:9e:c0:1c:47:53:b7:cc:6a:
45:2d:c9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:37:58 2025 by rpki-client