Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AG1aGg8m4TJIrpo3aGmLz8NcLCU.roa
File: AG1aGg8m4TJIrpo3aGmLz8NcLCU.roa (raw, json)
Hash identifier: dALzZMQBfdQEiDuzhG2SzuWsEjqe1T8KWM8GmzMeg+4=
Subject key identifier: 00:6D:5A:1A:0F:26:E1:32:48:AE:9A:37:68:69:8B:CF:C3:5C:2C:25
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824F81C4353F49D3038FBD486C1DBA9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AG1aGg8m4TJIrpo3aGmLz8NcLCU.roa
Signing time: Thu 02 Jan 2025 17:51:38 +0000
ROA not before: Thu 02 Jan 2025 17:51:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197715
IP address blocks: 194.87.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:f8:1c:43:53:f4:9d:30:38:fb:d4:86:c1:db:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=006d5a1a0f26e13248ae9a3768698bcfc35c2c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c5:90:13:04:b1:73:e6:24:8f:4b:0b:6d:ba:
11:0e:98:df:34:c8:ab:8d:a0:ef:6b:d0:a8:1f:31:
2c:41:2e:dd:3d:14:1f:dd:5d:dc:b7:09:f5:1f:32:
45:97:6f:2a:6b:de:9a:e4:1d:02:27:d7:f0:9a:79:
53:39:b9:91:ba:76:10:17:29:cd:a4:65:3a:82:40:
3e:8f:54:77:e5:28:c2:e6:8b:18:49:d7:db:34:1f:
c2:6f:f0:f6:ef:a4:71:0f:07:74:71:09:a3:48:23:
c3:1c:09:40:4c:57:2f:48:13:51:be:4c:92:37:fa:
11:b9:61:bc:ee:8b:c9:39:60:04:c1:d0:bc:1f:2f:
6a:dc:47:05:b0:95:41:b5:e2:ee:7d:fa:85:ad:8c:
b7:22:9f:a4:c2:38:a2:67:57:27:23:5d:1f:8c:33:
6e:6d:fe:51:a1:cf:01:c6:b8:af:04:06:e0:15:d9:
b1:17:67:62:2e:e5:8c:c0:9e:6e:6b:24:8d:ad:e2:
65:02:f7:c2:d5:77:77:cc:3c:50:f2:89:07:4a:fd:
4a:c5:50:29:04:8d:4d:b7:5e:9a:0d:df:3e:84:6e:
ee:f6:de:4b:34:a4:f3:f0:18:93:c4:a1:38:f1:92:
d9:e3:d6:29:7b:1d:e0:ce:6f:af:e8:53:01:68:77:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:5A:1A:0F:26:E1:32:48:AE:9A:37:68:69:8B:CF:C3:5C:2C:25
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AG1aGg8m4TJIrpo3aGmLz8NcLCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.129.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ef:92:ff:a7:a5:08:75:01:cb:f1:9c:c1:08:b7:dc:76:86:
2a:b4:1d:3a:45:13:00:36:83:62:22:0a:bb:3f:83:f3:de:c4:
28:d2:b5:20:bb:7d:34:f5:be:d0:ea:83:ef:53:37:5f:3b:06:
0b:c7:1c:b2:0c:d7:78:f7:e4:fb:b4:66:61:57:f3:1b:d0:e0:
da:38:ea:04:02:a4:30:63:ed:a7:b9:99:37:4e:dc:98:8a:1c:
5c:fe:a6:09:77:6a:3c:6e:15:01:1f:03:20:0c:f3:36:2d:8f:
97:4d:71:a2:a6:88:5a:38:f9:5e:73:9a:f9:7c:0c:44:7b:03:
d3:a5:dc:31:0d:95:05:fb:c8:cb:34:b7:6e:14:8c:bd:52:88:
8e:74:11:3d:5d:c1:67:8e:2a:3a:87:c8:7a:09:6f:a9:2a:8c:
85:d1:6b:39:b7:41:5c:c1:39:20:c4:e8:df:d0:84:6c:90:48:
d8:83:26:ed:57:66:a1:df:ef:f6:10:e1:4b:e4:f8:0b:c1:f5:
66:f1:3b:87:bb:ac:8c:e1:9d:26:bd:6f:c9:88:78:8a:fd:bd:
bd:38:8b:d8:65:64:08:61:79:c8:c8:45:04:94:f3:53:bc:3f:
40:40:40:47:f9:5e:9d:ee:dc:79:cc:2c:0a:90:ca:80:c7:36:
e4:d8:bb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:54 2025 by rpki-client