Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/h9M-qa9tzN77x6y4M9oRvv0zAZo.roa
File: h9M-qa9tzN77x6y4M9oRvv0zAZo.roa (raw, json)
Hash identifier: Wom6OpKhUIS6gHUXQCwVqaaK67yLypV+CPblB+/oGcM=
Subject key identifier: 87:D3:3E:A9:AF:6D:CC:DE:FB:C7:AC:B8:33:DA:11:BE:FD:33:01:9A
Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial: 01961F263BE62D53F74C9C814F5455D3F2E7
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/h9M-qa9tzN77x6y4M9oRvv0zAZo.roa
Signing time: Thu 10 Apr 2025 10:02:01 +0000
ROA not before: Thu 10 Apr 2025 10:02:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.112.132.0/24 maxlen: 24
185.112.133.0/24 maxlen: 24
185.112.134.0/24 maxlen: 24
185.112.135.0/24 maxlen: 24
213.156.250.0/24 maxlen: 24
213.156.251.0/24 maxlen: 24
213.156.252.0/24 maxlen: 24
213.156.253.0/24 maxlen: 24
213.156.254.0/24 maxlen: 24
213.156.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:26:3b:e6:2d:53:f7:4c:9c:81:4f:54:55:d3:f2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Validity
Not Before: Apr 10 10:02:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87d33ea9af6dccdefbc7acb833da11befd33019a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:c4:c8:34:30:8b:62:d1:8e:14:4d:67:df:
2a:06:1f:89:b5:6c:d4:40:fe:d2:65:26:31:56:26:
0b:81:18:03:fd:ee:10:8b:d1:7d:95:3e:aa:00:7b:
aa:17:12:b4:56:89:3e:c0:3d:e0:da:50:6b:ac:31:
67:02:fe:c5:da:b2:6b:4f:87:8d:6d:68:ac:1d:93:
dc:b1:0b:d9:09:5c:4e:ab:b2:cf:fe:92:fc:03:32:
93:72:2b:69:5e:27:c4:5c:79:0e:b1:b1:99:c9:99:
27:17:67:36:c6:6e:a7:b1:35:58:5c:a5:60:8f:25:
dc:31:c9:ee:ae:f6:6f:ec:e8:1d:cb:7a:20:1b:81:
a2:4d:fb:f0:7d:a2:16:dc:00:40:81:2a:a5:6c:e5:
ec:cb:ee:f4:3e:c3:dc:39:9a:74:1e:bb:f3:d2:5c:
72:19:f2:db:2e:b1:d5:69:0b:e6:b7:1a:46:4a:d6:
be:b7:89:c5:f4:97:df:7b:da:67:a5:80:e3:96:cc:
3e:3c:b8:3f:44:b8:03:32:7d:03:6a:c8:09:fa:e2:
60:5a:61:37:a7:be:c0:a0:a4:e3:59:de:58:ef:0e:
c3:d5:d9:77:6a:42:64:4c:6b:f3:77:8a:83:bf:0c:
4a:3e:e6:8f:20:01:b8:04:cd:56:f3:33:21:b1:d8:
c1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D3:3E:A9:AF:6D:CC:DE:FB:C7:AC:B8:33:DA:11:BE:FD:33:01:9A
X509v3 Authority Key Identifier:
keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/h9M-qa9tzN77x6y4M9oRvv0zAZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.132.0/22
213.156.250.0-213.156.255.255
Signature Algorithm: sha256WithRSAEncryption
26:dd:ae:c0:0e:b1:64:21:ea:fe:98:ec:98:74:ce:dd:16:52:
69:8c:c9:3a:01:97:2d:a5:f6:80:0d:eb:74:e9:18:ff:0d:be:
39:36:a2:aa:ab:f1:4e:88:b1:88:84:62:8f:8c:64:81:22:ea:
af:e3:7b:bf:30:fc:88:c0:00:3f:f1:81:ea:e5:6a:83:06:ef:
12:66:1f:69:78:34:a4:29:d6:f0:eb:b8:79:fe:d9:3c:56:5f:
38:d9:44:e8:a2:51:32:09:72:c7:0e:87:90:d1:43:04:e4:22:
90:b3:d8:20:d1:92:bf:66:3c:06:79:5b:51:6d:2d:a5:ce:f8:
46:6c:68:39:f3:0b:c5:7b:3f:49:81:ea:c0:5a:92:2e:2e:b2:
0f:96:48:09:3a:39:9f:04:93:59:12:c4:99:e2:26:2e:c5:f9:
05:a4:cf:47:53:ff:0a:ad:f7:45:03:f3:42:1f:76:be:88:76:
c6:2c:ef:97:ef:29:a0:04:a2:92:43:cc:29:32:cf:bd:f2:52:
eb:42:43:c0:7c:8e:9b:05:ea:a1:e4:9e:e4:b7:82:8c:33:92:
ff:c6:1b:13:e8:bf:f2:79:6f:ec:b0:c2:68:98:39:f0:bb:c1:
e0:96:a2:ea:90:65:49:40:c8:e2:5d:94:13:17:9d:4e:c0:21:
e7:db:3d:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:18:21 2025 by rpki-client