Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/4glHJuD_KCBMnry_AIvlu5gy6-M.roa
File: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (raw, json)
Hash identifier: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=
Subject key identifier: E2:09:47:26:E0:FF:28:20:4C:9E:BC:BF:00:8B:E5:BB:98:32:EB:E3
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 019425FD9F91A2A66120477A932AD9577B3F
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/4glHJuD_KCBMnry_AIvlu5gy6-M.roa
Signing time: Thu 02 Jan 2025 07:49:25 +0000
ROA not before: Thu 02 Jan 2025 07:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 89.251.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9f:91:a2:a6:61:20:47:7a:93:2a:d9:57:7b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2094726e0ff28204c9ebcbf008be5bb9832ebe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:43:30:4e:69:b5:81:d8:6d:e1:3f:92:86:
cb:8a:7e:be:e5:29:a7:cd:07:a3:4b:8a:40:76:43:
fe:9d:c9:45:a4:da:bd:3c:45:16:aa:8c:57:6d:b0:
61:72:3d:0c:64:a1:55:c1:48:79:e8:91:fd:8d:28:
5d:40:79:ef:94:e9:e6:34:32:8b:0e:86:4f:f6:c9:
33:62:f4:2f:f7:cf:63:da:1c:ae:b1:37:79:2d:8b:
6d:1a:bb:d4:01:ff:db:e8:1b:05:a4:3f:c6:d4:a3:
35:eb:8d:5c:e6:bd:94:5f:75:b8:e8:16:e8:a7:a0:
c9:57:3d:a5:ec:46:1e:54:65:c1:5a:48:79:49:53:
b9:3e:83:25:ae:e0:ff:36:ed:93:7d:a5:88:85:2f:
67:18:86:39:72:3c:f5:65:64:29:2d:81:44:25:50:
2d:54:d5:f4:55:44:b0:ba:d5:4f:ee:b5:20:1b:cc:
0d:87:16:69:24:5d:54:3b:62:41:ff:21:b8:fe:6a:
0c:be:50:dd:a3:84:df:3b:c2:b8:86:22:2e:0a:8c:
0d:8f:ed:78:cb:b6:bb:91:ac:40:02:36:40:18:11:
b9:19:10:6a:17:b4:dc:ed:74:17:90:54:e3:d0:32:
92:50:65:c7:d3:62:48:a0:af:77:55:b5:a7:80:61:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:09:47:26:E0:FF:28:20:4C:9E:BC:BF:00:8B:E5:BB:98:32:EB:E3
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/4glHJuD_KCBMnry_AIvlu5gy6-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:2b:0a:42:60:68:b4:cb:e2:a8:9a:76:1c:4d:3b:b0:9c:8c:
cc:ff:77:20:c6:21:24:69:46:71:f7:23:1f:1c:4a:1a:c4:82:
e9:de:f4:4f:cc:ff:66:8d:5e:ef:8f:ca:d7:91:58:5b:26:3c:
13:80:21:81:57:c7:42:9b:1c:5d:de:c3:87:7a:64:99:de:df:
9b:e6:1a:1c:77:d2:e8:ac:e9:da:9d:96:79:f7:04:53:b7:f3:
2e:5b:68:62:4a:57:7b:02:d8:15:bb:65:40:1a:7e:f2:06:9d:
04:2a:80:b4:c6:75:9c:7b:82:69:38:14:6e:43:de:2c:0f:78:
34:1b:f8:5e:6f:14:f8:cf:b8:63:11:1a:ad:49:1a:3e:2c:46:
5c:96:6b:a3:6e:a9:95:a0:c1:16:c6:c5:2c:9f:5c:fa:5b:8b:
9a:7f:fd:e9:78:bd:6d:75:6f:16:7a:b7:3d:d2:44:76:70:b2:
67:35:67:a5:92:80:3e:19:98:c2:5f:2b:60:00:7b:41:6c:fd:
6e:52:87:08:69:93:40:3c:ab:f7:e6:a3:26:86:47:4d:d8:50:
a3:1f:5b:1f:03:55:b1:11:3e:cc:38:9c:ae:87:0d:31:4b:c8:
eb:e7:10:c3:d8:7c:c8:d5:02:c6:75:47:14:9d:61:c1:cb:b8:
e6:cb:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:46 2025 by rpki-client