Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9H3vQIhzIqZjPSnYx5GW2AvzLuQ.roa
File: 9H3vQIhzIqZjPSnYx5GW2AvzLuQ.roa (raw, json)
Hash identifier: WGRLeEwMUj7c9I/PubyTseiKQOU9WbeSlHlRDfEhKvQ=
Subject key identifier: F4:7D:EF:40:88:73:22:A6:63:3D:29:D8:C7:91:96:D8:0B:F3:2E:E4
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019661E79B2226F5AF36D0FAA8DB74426101
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9H3vQIhzIqZjPSnYx5GW2AvzLuQ.roa
Signing time: Wed 23 Apr 2025 09:08:10 +0000
ROA not before: Wed 23 Apr 2025 09:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48753
IP address blocks: 85.121.148.0/24 maxlen: 24
85.121.149.0/24 maxlen: 24
194.102.104.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:e7:9b:22:26:f5:af:36:d0:fa:a8:db:74:42:61:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 23 09:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f47def40887322a6633d29d8c79196d80bf32ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c0:89:6a:ab:b3:a8:cd:4f:37:1f:cb:97:84:
51:84:b8:df:f7:c0:eb:38:65:c5:d2:39:f3:7a:de:
58:4e:94:2f:40:50:c1:27:c1:a9:b7:fa:fd:f5:30:
74:40:bf:12:91:04:72:a0:97:6e:2d:21:d9:57:cd:
b9:c8:84:ef:43:3d:03:b9:25:50:55:70:95:c9:0a:
c4:bb:ce:0d:be:fe:50:4e:a6:12:8f:cf:ec:a4:ad:
de:06:bc:0f:a8:8c:2e:61:f9:f4:2d:79:4c:af:57:
0a:db:35:a9:4f:71:7f:09:c9:2f:30:e2:82:9a:67:
f6:97:38:c3:e0:e2:f7:f0:41:cb:82:70:87:db:bb:
25:b2:b1:19:a5:01:ef:7b:df:21:6f:9e:1f:f0:c7:
78:6a:41:bd:86:00:9a:1f:82:7a:8a:60:9e:2a:e0:
0f:57:a8:1b:1d:2f:a6:2b:d6:a1:47:81:11:6a:98:
d6:8d:17:ba:17:77:b5:ed:8d:c5:68:57:87:67:85:
a3:e4:26:b1:c6:1b:31:15:21:19:36:66:30:3d:79:
a3:77:93:36:0a:25:f1:b5:60:45:1c:f6:59:99:e9:
2a:96:d3:e1:a8:e1:6c:af:a1:02:cd:4a:56:5e:44:
f1:72:39:ea:47:30:a2:8c:cd:08:b0:8a:7f:d0:91:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7D:EF:40:88:73:22:A6:63:3D:29:D8:C7:91:96:D8:0B:F3:2E:E4
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9H3vQIhzIqZjPSnYx5GW2AvzLuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.148.0/23
194.102.104.0/24
217.156.66.0/23
217.156.122.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7e:e0:5b:92:2e:29:b5:d1:a1:4c:bf:5d:ed:c2:4f:ed:96:
72:58:09:e5:dc:33:2a:7d:7c:3a:82:df:af:57:fb:a5:ca:e9:
81:57:0c:a0:45:4a:1b:20:7c:67:0f:a2:7b:20:ee:8f:29:39:
42:0f:dc:64:b9:95:c2:67:c9:93:4c:f3:25:29:a3:17:65:85:
1f:04:f0:6d:c7:a3:67:9d:9b:8c:b6:1c:b6:5a:0c:64:39:36:
39:59:34:e6:a7:c4:35:0f:e7:28:2b:ed:f7:7f:20:01:18:50:
63:65:42:9b:04:77:3a:f1:f0:09:5a:85:9d:d0:9a:68:99:6e:
6f:7e:05:f2:00:5a:e8:73:f5:ae:96:84:87:57:c2:b8:31:18:
71:97:c1:ae:fd:10:c9:ba:a3:56:b2:c4:a7:7f:29:56:27:51:
71:9f:dd:1e:1a:2f:69:bd:f7:02:6c:9b:59:a4:60:64:c4:d6:
77:82:a4:c6:0a:f0:d3:68:e8:fc:db:27:92:c4:7d:b6:cf:3b:
12:8e:ee:5d:8a:b5:92:62:64:51:91:ed:5d:e7:93:93:d3:ef:
7e:4b:e2:ee:c4:2d:2f:68:a2:10:7f:86:d4:d3:f6:be:62:bc:
c9:81:21:7c:b4:3a:34:26:6f:fa:74:31:0d:5e:67:b0:f8:c8:
f9:c2:81:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:51:30 2025 by rpki-client