Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gJOky6USfPvDvjLd0vNn0vIoCS8.roa
File: gJOky6USfPvDvjLd0vNn0vIoCS8.roa (raw, json)
Hash identifier: Nz9MUF0XPaxPMHrkRrKdylVWFm8QLGo6P9AIrTLOK2U=
Subject key identifier: 80:93:A4:CB:A5:12:7C:FB:C3:BE:32:DD:D2:F3:67:D2:F2:28:09:2F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195A4491EE9630BF5487F527C22C384185B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gJOky6USfPvDvjLd0vNn0vIoCS8.roa
Signing time: Mon 17 Mar 2025 13:26:50 +0000
ROA not before: Mon 17 Mar 2025 13:26:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 89.213.206.0/23 maxlen: 24
213.218.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:49:1e:e9:63:0b:f5:48:7f:52:7c:22:c3:84:18:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 17 13:26:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8093a4cba5127cfbc3be32ddd2f367d2f228092f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:64:2c:f2:72:30:89:f9:2e:0a:58:4a:07:
7e:61:45:8f:20:65:8d:e3:4c:a8:1e:b3:fd:78:c3:
53:c9:7b:e9:e2:4d:f2:8f:88:91:6e:44:66:f3:0e:
b6:23:f7:78:d6:2f:1d:ac:f9:c3:38:aa:d0:a7:35:
f4:98:d3:16:ad:68:58:59:ed:15:16:70:8c:63:8b:
64:77:2f:af:b9:3d:de:c2:7a:4a:09:3b:d5:81:4b:
6a:10:81:ee:69:06:4f:8f:f4:85:6a:e0:da:7f:62:
56:1d:13:95:f9:03:b0:c3:e4:8e:3e:14:dc:22:62:
73:72:eb:21:d5:85:89:d0:a3:80:7d:6e:72:ec:f9:
5c:8b:1c:cf:63:3a:f4:43:69:76:3f:f9:a8:79:e0:
06:ab:d9:d2:7a:23:e0:62:97:1c:32:fb:79:26:62:
33:02:b1:ce:cb:f2:ff:a9:8d:60:bd:d2:2b:13:26:
62:41:5a:8f:c0:cc:6a:8c:1b:67:71:2d:b0:ea:51:
1d:d7:a5:73:5d:12:ec:43:f5:d7:dc:32:ee:bd:e1:
0a:59:e2:85:f5:1a:6c:ad:55:bb:91:c8:3e:ad:9d:
46:b0:56:69:86:b2:4a:8d:38:19:ee:ee:86:21:3d:
e7:53:41:93:80:89:11:87:4c:cc:ab:3f:de:6f:af:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:93:A4:CB:A5:12:7C:FB:C3:BE:32:DD:D2:F3:67:D2:F2:28:09:2F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gJOky6USfPvDvjLd0vNn0vIoCS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.206.0/23
213.218.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:90:4b:54:64:1f:ce:ef:03:a3:52:e9:a8:0a:3f:b5:da:e5:
0e:10:91:14:11:8d:bc:e9:ff:52:fc:1d:33:56:73:42:60:14:
9a:4d:31:96:62:4f:eb:9a:8a:a8:ae:59:23:b4:64:ab:aa:cd:
05:05:65:3a:ec:11:1f:83:10:1c:04:01:3b:65:f0:81:d3:44:
4a:29:bd:e3:34:50:6d:53:07:16:42:54:8d:f5:6e:7f:f8:67:
bc:b7:4f:3e:5a:73:f2:71:f4:ba:81:8f:77:f9:66:75:ae:46:
c1:84:6b:75:4e:8b:12:fc:84:fb:81:49:15:59:e9:bf:42:bf:
d0:45:72:a4:3e:19:c0:ea:17:70:b0:12:a1:52:62:dd:f5:98:
53:9f:c3:6b:74:88:20:f9:ad:7f:07:62:47:4a:62:bf:1d:4e:
3c:70:1c:b0:ed:47:44:ef:f5:ad:6f:27:a7:9d:cf:51:75:a6:
8a:8c:89:5e:cd:f8:4b:0d:c8:5e:6d:78:aa:7a:6a:69:e8:6f:
38:b7:83:70:cb:7e:d4:99:b9:f3:44:23:01:15:a2:51:42:28:
18:06:8e:2e:e7:d8:d2:6c:90:2f:89:31:d1:85:44:83:17:5b:
02:b1:75:33:c2:4e:75:0e:ae:41:cd:3d:74:26:a7:94:88:2e:
ed:6c:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:24 2025 by rpki-client