Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa
File: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (raw, json)
Hash identifier: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=
Subject key identifier: 83:9C:AE:C9:D1:78:3E:87:B8:40:E2:50:F1:D8:0C:42:D4:0B:16:50
Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial: 01942369FABA2471A1B0CC5475DC6273EFF7
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51297
IP address blocks: 178.255.200.0/24 maxlen: 24
178.255.206.0/24 maxlen: 24
2a01:a440:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fa:ba:24:71:a1:b0:cc:54:75:dc:62:73:ef:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=839caec9d1783e87b840e250f1d80c42d40b1650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:68:89:34:18:8c:47:b6:58:fa:83:89:4d:
5e:d0:5d:36:b2:8a:ea:62:fd:22:57:fb:5d:98:91:
0b:2a:25:bd:dd:69:bf:d6:17:db:c1:26:8f:65:82:
49:7c:1b:c8:ea:c3:57:94:3c:7f:5c:3b:8a:1c:33:
db:b1:f2:b3:ed:e6:d1:43:30:6a:a0:f5:95:4a:5b:
ef:f7:28:6c:72:5c:bb:32:84:f8:8a:8d:63:70:b2:
ed:74:50:4d:98:6c:fb:d4:cc:8c:6d:73:d9:14:7d:
07:9c:4b:fc:cd:57:28:be:88:1c:d6:a0:76:27:c1:
16:05:7e:9a:e7:40:7b:e1:d3:41:1d:80:01:03:cf:
e4:23:81:fd:ce:5b:44:46:c1:b1:a6:2e:90:56:d7:
73:0c:50:77:1d:13:7f:04:d8:d5:f7:95:de:da:eb:
a6:e4:0c:e1:f7:68:c2:6a:99:4d:36:93:e0:bd:2d:
ad:74:df:18:c3:14:54:42:09:54:31:ec:72:6d:fc:
2e:66:11:00:06:34:24:e6:23:23:75:4c:67:40:3b:
52:4a:76:9b:34:19:5e:68:82:01:d4:f2:79:f0:d0:
01:5a:0b:7a:b6:e9:9a:c3:78:cd:49:2f:50:81:5e:
f5:0d:ad:d7:0d:ad:f0:bb:72:97:ac:11:cb:46:8b:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9C:AE:C9:D1:78:3E:87:B8:40:E2:50:F1:D8:0C:42:D4:0B:16:50
X509v3 Authority Key Identifier:
keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.200.0/24
178.255.206.0/24
IPv6:
2a01:a440:2::/48
Signature Algorithm: sha256WithRSAEncryption
6f:0c:4b:cc:7c:ed:3e:92:65:5e:dd:de:7e:a3:db:26:a4:2a:
3a:0d:9d:00:f7:c6:62:e7:ee:9f:32:fc:79:ef:69:9a:c5:38:
b1:00:2f:dc:e0:fe:1a:9f:54:61:3c:d5:dc:77:95:88:e6:69:
68:3d:0c:e3:e2:c5:5d:fd:29:9b:ad:e5:1c:17:e6:c7:fd:b6:
bf:ae:88:13:16:c4:b5:d7:fc:fe:03:07:f3:f1:0e:2f:b0:d8:
b3:d4:d3:21:f0:98:d9:d2:58:0c:f1:50:49:0f:4e:8c:35:c0:
8a:a1:84:3b:d2:a4:f1:bf:45:94:70:ff:2f:89:4e:5b:8b:54:
e2:37:8c:9d:12:4e:71:2c:f4:ea:38:a3:55:11:55:d7:0c:4f:
1e:0e:0e:8c:d8:db:e9:72:1a:de:a3:40:d1:da:6b:34:e5:65:
e6:80:14:19:71:9a:76:ca:a5:70:80:41:b2:5c:bb:6f:e4:f5:
40:dc:57:6a:3a:17:eb:b4:d8:a9:1e:22:8d:d9:6b:af:2a:35:
49:e8:3b:15:92:dc:00:09:1b:7c:41:03:1c:db:de:0a:a6:1d:
a4:a4:4a:67:fa:e1:2b:32:35:5b:92:d1:95:36:9b:7b:3c:3d:
40:cc:0f:f4:d6:38:32:42:5d:54:56:e2:e1:e5:28:42:ad:a6:
c7:93:a6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:25 2025 by rpki-client