Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa
File: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (raw, json)
Hash identifier: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=
Subject key identifier: A4:68:C0:D9:48:A6:F6:FD:72:AD:3B:F1:E9:7B:23:93:80:6A:FB:8D
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 01942445111C7F661E82EFB8E559EBE3AE09
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa
Signing time: Wed 01 Jan 2025 23:48:13 +0000
ROA not before: Wed 01 Jan 2025 23:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60793
IP address blocks: 185.19.12.0/22 maxlen: 22
185.192.156.0/22 maxlen: 22
2a03:fe40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:11:1c:7f:66:1e:82:ef:b8:e5:59:eb:e3:ae:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Jan 1 23:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a468c0d948a6f6fd72ad3bf1e97b2393806afb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:01:a6:ca:ca:dd:97:4b:39:bb:71:2f:17:
c7:6a:a1:bf:4c:fc:1a:e1:72:3a:42:e7:21:0d:5b:
11:b1:a9:b0:ce:a7:30:32:ee:db:57:c0:69:f7:ad:
1a:63:69:6e:f9:6c:cc:c0:bf:16:63:33:20:da:c4:
63:48:84:85:d7:69:aa:f2:95:bb:04:ee:4d:33:5d:
23:65:e1:c7:2e:e9:7a:91:6a:4d:67:d3:f0:49:df:
38:49:c5:c9:bf:f1:63:31:73:51:94:25:43:e8:f2:
11:f1:20:21:9a:86:5a:3e:5f:bd:43:98:50:f5:2c:
57:68:73:3d:2f:64:13:00:46:4e:98:a6:1e:e0:bc:
cf:fa:53:2e:a6:4f:0f:ed:70:39:9b:aa:9d:b4:ec:
e5:94:cc:a6:25:b4:28:6e:d1:df:52:90:1d:5d:60:
76:27:46:d3:19:46:38:71:c4:d8:0d:6d:7b:25:4f:
eb:a3:51:25:be:00:71:d7:f5:9b:21:b4:aa:23:9d:
f3:50:4c:78:c8:34:2e:d1:e1:a3:8a:f9:3b:e5:03:
a6:52:fc:b4:16:5d:cb:8a:c8:83:0d:29:33:fd:d9:
11:ff:c6:a6:0f:fe:56:99:33:8c:f9:d3:8a:2b:61:
8c:f7:88:78:e0:5d:11:5c:f1:67:f6:dd:4e:af:c0:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:68:C0:D9:48:A6:F6:FD:72:AD:3B:F1:E9:7B:23:93:80:6A:FB:8D
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.12.0/22
185.192.156.0/22
IPv6:
2a03:fe40::/32
Signature Algorithm: sha256WithRSAEncryption
60:10:e3:ac:db:42:7c:41:f4:65:67:e3:bf:b3:b8:e6:0f:6e:
f6:5d:5a:53:a0:cc:19:67:99:85:3c:36:e8:f1:f5:eb:59:a5:
48:be:35:f4:4d:f7:b4:99:37:ae:f4:ac:53:10:1e:fe:94:50:
87:2c:e7:32:d4:0e:47:1a:9f:0e:fa:64:9c:a7:d4:b6:df:d6:
3e:c3:01:9d:38:b5:bc:d5:81:53:f9:84:5c:a8:cf:a8:1b:16:
2b:36:3a:5a:fa:31:6e:7b:9d:2f:54:d6:df:fe:6a:cc:af:d1:
70:4f:7c:2a:d0:82:10:e5:e6:43:18:04:72:8d:e6:44:7a:ad:
dc:22:ed:0e:cb:ed:b4:a1:85:29:a2:73:b7:7f:46:2a:8a:99:
4f:f4:c2:9d:08:dd:99:ae:7c:4d:0f:5f:90:3c:6e:9e:f1:db:
6e:14:62:22:81:62:4b:6e:be:8b:c4:ef:11:f6:c5:5c:9f:16:
2b:9f:8c:34:a7:97:ff:df:8a:bf:63:e1:f6:4c:bf:c7:1e:cb:
23:6d:58:de:46:7c:53:83:dc:48:c3:62:5e:a4:e9:55:81:16:
41:78:cc:01:40:99:30:86:1b:ab:95:9a:a9:be:ea:e0:03:34:
2a:96:63:53:69:0d:90:ad:9c:cd:cc:44:26:4f:c9:16:12:d8:
9b:f3:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 17:44:26 2025 by rpki-client