Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/n307rGiwYsk1vOiGMRbS2fV0BSk.roa
File: n307rGiwYsk1vOiGMRbS2fV0BSk.roa (raw, json)
Hash identifier: tlfldYKCmk1Ckto3uCUJi3f86MeyWZSU+wFP+RVK1Ew=
Subject key identifier: 9F:7D:3B:AC:68:B0:62:C9:35:BC:E8:86:31:16:D2:D9:F5:74:05:29
Certificate issuer: /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial: 019420680DD8626DB5FDD7AD5275ABB7F10C
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/n307rGiwYsk1vOiGMRbS2fV0BSk.roa
Signing time: Wed 01 Jan 2025 05:47:57 +0000
ROA not before: Wed 01 Jan 2025 05:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3758
IP address blocks: 195.238.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0d:d8:62:6d:b5:fd:d7:ad:52:75:ab:b7:f1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f7d3bac68b062c935bce8863116d2d9f5740529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:bf:43:ec:ff:b3:78:55:cf:13:35:ab:d7:
da:f5:44:3a:3c:d3:60:4e:0e:68:cf:88:b6:61:d1:
67:d5:0e:a4:a2:3b:29:6d:e3:4b:6a:a5:0c:85:03:
1a:11:15:3e:af:d3:8e:1c:11:16:c9:86:f4:1e:ed:
6b:46:86:ce:7f:93:4a:d5:69:88:f3:5d:7f:f3:42:
df:0d:76:71:48:89:c1:6f:62:03:a1:b3:11:39:11:
53:96:15:94:84:7f:21:27:49:c5:f2:4a:4c:d4:83:
62:3e:0c:fe:08:cf:0c:e5:b1:88:5c:51:e2:cc:77:
88:6d:44:8f:8a:a4:00:94:46:e9:8c:29:b3:3f:c8:
65:78:04:a3:60:8a:55:a6:ff:ef:3f:25:41:c0:ed:
33:fc:a7:04:59:9d:8e:e3:74:a8:4a:90:77:2a:0e:
42:da:25:84:00:9b:87:e9:c6:49:0c:9f:a3:10:9c:
af:ab:6e:1e:62:b4:68:91:77:39:ad:55:36:b1:b6:
08:24:26:ab:7d:f2:aa:c6:90:81:17:dd:41:fb:9d:
a3:cb:80:7b:01:7a:d8:0e:a0:7e:8f:83:ed:e6:9f:
e5:db:fa:f5:20:b4:5d:a4:0c:ff:5e:f5:37:62:bd:
51:b8:cd:af:3f:50:56:24:90:06:60:dc:23:21:ec:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7D:3B:AC:68:B0:62:C9:35:BC:E8:86:31:16:D2:D9:F5:74:05:29
X509v3 Authority Key Identifier:
keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/n307rGiwYsk1vOiGMRbS2fV0BSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.94.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a4:0c:56:99:f1:e9:f5:77:df:55:bc:03:4f:48:f5:7f:18:
98:79:35:34:04:4f:93:03:d0:4c:c3:44:3f:ce:b5:5e:4c:a3:
7f:25:50:13:88:46:8f:15:01:de:0b:53:ec:37:dc:19:48:eb:
dd:f1:f9:fe:23:e5:4d:f3:1a:1d:b2:31:aa:78:0f:c9:9a:9d:
87:fc:1f:59:3d:b8:9e:27:bf:c9:9f:b9:49:36:51:de:9d:ae:
9c:ee:7f:93:82:36:27:43:ff:c0:99:3b:fe:aa:54:ff:47:40:
a2:24:b9:0c:df:6f:b7:98:c6:a7:2e:b3:2c:87:fc:7e:d8:4a:
3b:aa:98:ab:3d:9b:2b:95:d6:b6:41:e9:d0:d0:94:9a:45:36:
db:72:db:51:41:1a:7d:de:e1:72:80:2b:1f:9a:6a:14:23:dd:
bc:b2:0a:c5:02:c9:c5:81:ef:0c:f2:49:ca:3e:a1:5a:e0:05:
ef:5e:fd:11:69:b9:f3:0a:f1:6b:64:6f:a6:71:9e:67:68:92:
85:b0:7b:53:84:3e:49:cd:a8:42:2c:29:a8:e0:49:ae:7f:bb:
54:f1:c4:6e:dd:ca:6c:16:6e:cb:ec:2e:d9:21:71:38:de:90:
63:75:60:d5:cf:76:dc:7f:dc:f5:37:32:f1:1c:a8:60:61:b5:
ae:ba:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:01:59 2025 by rpki-client