Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/G9IMCDRzOQuPbahdvenWDMel-ec.roa
File: G9IMCDRzOQuPbahdvenWDMel-ec.roa (raw, json)
Hash identifier: KIE/h3OnsvTFha1HUMyujy3OIfah+sKBRWCgbRO+mg8=
Subject key identifier: 1B:D2:0C:08:34:73:39:0B:8F:6D:A8:5D:BD:E9:D6:0C:C7:A5:F9:E7
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 0194274830D782F68CDB77CFF3DC28DC8EAF
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/G9IMCDRzOQuPbahdvenWDMel-ec.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396073
IP address blocks: 195.149.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:30:d7:82:f6:8c:db:77:cf:f3:dc:28:dc:8e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bd20c083473390b8f6da85dbde9d60cc7a5f9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:6b:37:25:02:77:40:a5:dc:b8:be:f7:aa:
91:25:cf:25:ea:fc:ba:9d:5f:a5:03:ee:46:90:ca:
ae:cc:ed:e1:2f:fe:df:26:44:3a:c9:83:3d:3b:f2:
1a:9a:fb:e6:29:da:2b:22:db:99:a8:86:73:dd:55:
e8:44:25:02:b7:78:76:70:ac:1b:b7:3a:56:b8:81:
cc:4d:9f:13:d2:d1:5f:5a:ad:81:1a:1d:fa:1c:24:
8f:76:01:56:1d:e4:7d:e0:42:91:18:38:1c:43:51:
bb:11:8a:2d:80:6a:a1:4c:98:32:9f:e2:99:35:fe:
d9:58:37:51:82:5e:54:0a:a5:82:7f:71:96:1c:ac:
b9:48:f0:5d:9d:94:7d:b1:d2:71:1f:5e:ac:23:41:
a4:b9:17:5e:f0:6e:df:c2:85:a4:45:98:73:5d:49:
4a:4b:c7:c6:10:fa:ab:bc:64:df:48:46:68:2d:29:
e2:ec:3c:01:cc:44:fd:9b:e0:bb:b7:21:74:ce:06:
03:66:7d:bf:99:fc:7a:ae:13:87:a7:4e:6a:99:b7:
5a:53:99:08:d9:06:f8:f1:18:c6:d7:8e:b0:7b:92:
0b:38:77:b1:07:f7:7c:87:5a:e7:c5:bd:1b:d1:44:
81:4e:51:c9:cc:91:5d:27:c1:7d:79:14:84:bd:5e:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D2:0C:08:34:73:39:0B:8F:6D:A8:5D:BD:E9:D6:0C:C7:A5:F9:E7
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/G9IMCDRzOQuPbahdvenWDMel-ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.107.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:17:8a:9d:52:e8:f0:e0:cb:25:ed:f9:56:eb:e2:30:3b:33:
54:4c:cf:e6:03:d6:2b:64:73:fc:34:c8:8a:3c:ee:ef:66:ff:
8b:e8:bf:2f:eb:d7:e0:65:ee:c2:bf:b3:66:37:e7:ec:33:53:
3e:46:b4:2f:c2:3b:29:f0:23:95:f5:56:b3:2a:52:07:56:65:
7b:83:0e:97:cb:8d:ff:39:25:fb:7d:6f:75:98:70:ec:af:91:
79:50:44:1f:b9:dd:0f:56:00:51:38:48:8a:a2:51:3a:0e:6f:
d5:c6:bd:cd:59:fd:d4:7b:e7:cb:b7:84:e5:54:99:58:c9:11:
d6:fa:77:79:01:ae:e1:06:4a:d1:b2:91:ba:bf:01:2a:7c:f2:
fe:ef:3d:a3:b3:ce:1d:bd:ce:08:e5:5c:31:3e:a4:45:39:d3:
b3:4e:00:37:f7:08:f5:8f:0c:5b:99:5d:a0:d4:24:9e:e0:ea:
db:7e:7f:ef:c2:c3:7d:cc:70:a9:18:d3:78:a5:33:3f:01:37:
e2:67:68:ef:43:65:44:1c:81:19:42:80:5f:b1:4d:34:e9:c2:
52:fe:86:05:b9:71:7f:d8:19:b3:a8:be:b0:42:00:cd:4f:d9:
ef:54:23:b0:6d:0d:d0:c6:0d:99:1e:47:7c:d0:72:f2:39:d4:
c1:04:00:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:23 2025 by rpki-client