Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/G8IgPHN2FXyIl75Djei3X2y2GYc.roa
File: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (raw, json)
Hash identifier: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=
Subject key identifier: 1B:C2:20:3C:73:76:15:7C:88:97:BE:43:8D:E8:B7:5F:6C:B6:19:87
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA4ADDC3B2D4DBC3656C1849DDA136
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/G8IgPHN2FXyIl75Djei3X2y2GYc.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40371
IP address blocks: 83.125.36.0/24 maxlen: 24
84.207.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4a:dd:c3:b2:d4:db:c3:65:6c:18:49:dd:a1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bc2203c7376157c8897be438de8b75f6cb61987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:75:e4:cd:8f:94:fc:8a:b9:f8:46:e5:cb:2a:
79:c3:8b:26:6f:93:0e:81:3d:1b:8a:69:5d:57:f3:
c6:0c:1b:fa:2f:59:d5:94:02:6e:8b:2c:13:b9:cf:
c0:a2:21:08:5c:94:cb:a7:88:08:45:7f:5a:6c:a7:
7d:8d:2e:78:09:95:89:c4:97:3e:21:5e:fd:fb:a1:
43:d9:5e:0e:cc:e9:3d:52:10:56:99:9d:a5:59:f0:
9d:32:3f:f2:da:80:fa:fa:f9:7e:11:cb:78:41:de:
d5:34:8e:df:30:17:7c:59:b9:dd:fa:e5:24:c1:5e:
4e:a7:a4:f3:de:28:d0:4e:d4:56:6d:a9:2c:b3:39:
e8:99:10:4b:68:67:9d:39:31:eb:d6:74:9c:87:59:
fb:ba:7d:49:70:9f:38:f4:27:b4:50:36:b0:f8:d3:
79:a7:d3:a1:4d:9f:b6:60:c2:3a:1d:9d:2d:da:16:
38:b6:c8:05:7a:75:15:7f:dd:31:0a:6b:f8:0a:2c:
d2:22:75:9c:61:ae:ea:14:27:25:89:f2:aa:5c:ed:
44:53:26:34:e8:fb:cb:99:48:9e:9b:ac:ba:29:4a:
3a:0b:8a:09:15:87:b4:76:35:05:b6:59:7c:1f:77:
0b:3b:7b:ae:e3:f6:db:77:38:4d:72:b2:66:59:43:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:20:3C:73:76:15:7C:88:97:BE:43:8D:E8:B7:5F:6C:B6:19:87
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/G8IgPHN2FXyIl75Djei3X2y2GYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.125.36.0/24
84.207.212.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1e:b3:c6:77:73:c2:fe:e4:79:75:5d:b3:58:08:95:dd:77:
38:3c:ad:34:fb:4f:53:1d:48:43:09:14:a4:6a:d2:fe:a9:9a:
65:61:77:17:79:fb:5c:67:b0:11:c6:f1:70:f8:f8:6e:49:0c:
89:f3:28:69:16:be:5b:51:ff:65:81:fc:c8:37:ff:09:b1:2f:
0b:8f:48:2b:0a:59:7e:6a:94:63:e9:4f:5b:7f:6e:bf:cd:1d:
7a:b8:88:77:57:bd:96:c7:df:03:dd:0b:1f:9a:b1:b1:2a:2b:
68:22:a7:62:60:13:7e:1a:c4:d1:58:0c:a6:42:91:ed:d1:66:
8c:77:3c:a8:06:6e:6f:d7:05:25:45:44:82:20:e4:c8:8a:66:
2e:03:0c:e1:46:ca:7a:e0:17:c2:88:79:d1:06:87:7a:5e:03:
6c:e8:f1:6f:bf:84:c6:9f:f2:4a:e5:f6:62:b7:50:78:64:ec:
ee:26:13:42:85:1b:26:b5:47:d3:8d:a8:a3:9f:e3:a3:db:22:
11:5b:1e:a7:a8:88:56:a3:4d:e6:29:81:d4:98:a4:d2:34:07:
08:2b:f9:72:ad:d0:b8:64:ff:81:e4:ab:38:8e:fa:c2:6c:51:
8e:e1:17:c1:78:c1:23:58:de:31:3f:fc:c5:ab:55:9e:f6:76:
cb:8f:c2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:55:28 2025 by rpki-client