Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/9QhEtvzl2xj1SVoQsDQ0WEDHjak.roa
File: 9QhEtvzl2xj1SVoQsDQ0WEDHjak.roa (raw, json)
Hash identifier: wwuZ4oEoEOc/Uq5HjzgRuotY259BWR4HTpXNj9bkQ/g=
Subject key identifier: F5:08:44:B6:FC:E5:DB:18:F5:49:5A:10:B0:34:34:58:40:C7:8D:A9
Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial: 01941F8C09CA1F20ACDA769A77291B106D1D
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/9QhEtvzl2xj1SVoQsDQ0WEDHjak.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51906
IP address blocks: 31.204.112.0/20 maxlen: 24
37.130.128.0/20 maxlen: 24
79.171.56.0/21 maxlen: 24
91.106.0.0/20 maxlen: 24
146.66.224.0/21 maxlen: 24
176.241.160.0/20 maxlen: 24
185.2.120.0/22 maxlen: 24
2a00:7380::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:09:ca:1f:20:ac:da:76:9a:77:29:1b:10:6d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f50844b6fce5db18f5495a10b034345840c78da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:06:d9:a3:60:82:7c:e0:fa:3b:70:6b:77:
3e:6c:62:cc:39:0e:2b:06:72:d0:51:60:ad:60:50:
58:62:c4:00:0e:4e:54:3e:60:21:9a:24:43:5d:5c:
d0:52:f0:5b:48:44:73:6f:c7:a1:b8:0b:56:39:37:
39:d5:64:65:52:fa:1f:d3:cf:19:e4:ac:5a:f9:ee:
6c:74:33:53:6b:0f:15:28:76:8e:fb:af:6d:64:bb:
fb:78:a8:3c:83:c1:ef:ae:dc:c3:ed:e7:cf:6a:1f:
f3:1e:5d:2a:b6:8e:f8:29:12:cf:fa:c1:66:7f:11:
dc:ed:42:c1:49:5e:0c:ed:db:43:53:2d:90:ad:4b:
e0:78:c7:dd:18:84:51:56:c8:10:a2:8f:d7:ca:de:
2c:77:25:8d:3f:79:ff:6f:b9:a3:c0:06:13:3a:41:
18:6d:3e:cc:1a:cf:b5:80:81:de:cd:3c:b8:6b:c3:
8d:88:5c:30:05:37:10:c2:1a:13:4e:ee:46:cb:c9:
b4:0d:48:2a:c7:c4:f1:d1:3f:5c:31:4a:fc:d1:97:
f6:65:87:b1:a6:cc:06:3c:84:69:f3:97:fd:9a:fd:
2c:f0:61:7a:bd:c2:50:7a:67:e4:5b:cd:37:04:a5:
65:02:63:83:bf:41:22:5c:44:eb:23:aa:ba:67:44:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:08:44:B6:FC:E5:DB:18:F5:49:5A:10:B0:34:34:58:40:C7:8D:A9
X509v3 Authority Key Identifier:
keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/9QhEtvzl2xj1SVoQsDQ0WEDHjak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.112.0/20
37.130.128.0/20
79.171.56.0/21
91.106.0.0/20
146.66.224.0/21
176.241.160.0/20
185.2.120.0/22
IPv6:
2a00:7380::/32
Signature Algorithm: sha256WithRSAEncryption
75:a4:de:49:a7:e1:bd:9a:40:c9:5d:f7:26:d7:2d:30:c0:51:
5d:71:80:99:af:f2:e4:dc:c7:26:58:12:0b:fe:fd:56:68:bd:
9a:2f:99:a6:93:62:79:63:f1:9d:c9:39:bf:cb:65:9d:e3:54:
4d:5c:cf:38:69:db:d0:df:c3:ac:f3:9b:e3:33:0b:8a:19:07:
5e:ae:5e:91:18:4f:65:24:4f:c2:d5:03:14:ef:5b:49:00:4f:
b3:06:9c:02:03:2b:5e:cc:aa:d8:1e:9d:17:da:58:c7:d3:10:
58:3b:93:61:92:03:f9:6c:5f:91:87:7d:1c:52:4b:6c:7c:ce:
39:a7:79:f6:a1:73:40:7e:e7:b2:fa:4d:e5:58:de:53:24:65:
9d:5c:de:f8:0a:bb:4f:4f:53:8e:16:49:78:c5:6b:97:32:36:
ad:92:dd:fa:30:cb:7d:ff:72:c0:9c:1a:d1:dc:6f:99:65:8d:
ac:1b:22:c3:55:05:c7:22:98:0b:b1:62:f6:b3:45:4b:21:30:
d7:14:68:09:f7:e2:5d:69:f1:91:99:c1:4b:79:51:b0:3b:eb:
d4:1c:8e:81:0b:61:ab:a7:f6:80:d6:97:7f:7a:78:9e:4b:e0:
6f:96:4e:ec:b1:86:4c:f4:d5:93:d5:39:ff:45:90:75:a4:99:
e4:81:c4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:58:56 2025 by rpki-client