Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/isGhiPrIPc7CYukDYcPX4YgodMI.roa
File: isGhiPrIPc7CYukDYcPX4YgodMI.roa (raw, json)
Hash identifier: yF67JZGe1yAdufc/s5j5+72AF3mRhIY4Nwz+CqDvDoY=
Subject key identifier: 8A:C1:A1:88:FA:C8:3D:CE:C2:62:E9:03:61:C3:D7:E1:88:28:74:C2
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 01941FFA4616281AC879980159E52B28D602
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/isGhiPrIPc7CYukDYcPX4YgodMI.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214036
IP address blocks: 185.82.73.0/24 maxlen: 24
193.23.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:46:16:28:1a:c8:79:98:01:59:e5:2b:28:d6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ac1a188fac83dcec262e90361c3d7e1882874c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:41:33:87:67:56:b8:79:c6:95:68:f9:9b:
1e:82:97:46:ea:c2:2b:84:41:a3:3e:a1:0e:a7:ce:
b7:07:66:e8:ab:17:88:a8:0e:1b:db:63:2b:d1:ee:
55:24:71:95:55:95:04:42:86:0b:37:38:e9:2b:37:
43:6f:2b:49:eb:07:b4:a1:9c:eb:7b:53:d4:52:d6:
61:09:e6:4b:e6:68:9c:00:36:43:3a:ea:a5:9d:1a:
14:8f:8b:fd:d2:78:12:e6:55:f4:a5:24:50:cc:fe:
07:b0:ec:79:b5:81:b3:34:77:33:be:ee:6f:fa:97:
b1:00:93:54:ec:0c:a0:19:8d:70:e5:38:19:75:5a:
c8:a7:ee:38:37:16:41:f2:d0:da:f0:4b:68:74:7a:
c3:cf:68:67:d7:3c:8e:c3:9e:cf:e1:4d:18:b3:be:
7c:a5:cf:45:42:3d:5e:a7:96:cb:ee:99:2a:1d:fc:
e0:ee:8b:49:1d:f2:a1:a3:38:84:1f:cf:a6:96:8c:
79:63:9d:e6:46:2b:da:80:f8:ac:3d:a1:23:32:f1:
c0:ab:e9:a8:16:a8:c0:95:fc:62:75:5e:13:24:bb:
97:b8:25:29:e9:83:03:63:0a:2d:13:b8:1c:ab:db:
1f:a7:a2:1f:6b:b8:64:21:f1:41:63:69:20:5c:55:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C1:A1:88:FA:C8:3D:CE:C2:62:E9:03:61:C3:D7:E1:88:28:74:C2
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/isGhiPrIPc7CYukDYcPX4YgodMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.73.0/24
193.23.118.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:01:5b:ca:6c:d9:0b:f7:a2:43:10:cf:25:6c:5f:2e:f8:eb:
ae:e1:b5:af:c2:08:a0:82:c1:96:28:b4:39:e4:60:f2:e9:61:
91:33:06:a9:51:93:d5:26:94:6e:8b:4b:e0:72:6a:c0:93:ea:
59:ee:3d:d6:d7:1b:72:0e:66:23:e2:9d:db:b2:ac:5e:f7:ea:
3f:09:29:45:53:2e:a7:ce:c9:8c:d7:99:3b:32:ce:0f:ff:16:
91:2d:1a:96:d5:d5:89:d7:c4:01:8e:17:24:89:6c:6c:71:73:
02:88:30:13:1a:bd:39:3b:e6:46:25:b7:20:8e:c7:c2:f2:5b:
3e:f8:fd:0c:a8:71:b0:51:72:8c:55:01:fd:8c:92:7f:a2:1e:
73:5c:e9:04:52:4e:6a:f0:ba:ac:a2:db:a7:ae:4a:c0:ce:11:
7d:71:69:94:14:1f:75:50:13:27:6f:79:3f:cc:68:11:c2:78:
b7:e7:98:a0:1a:32:c4:25:27:80:d4:8e:62:86:5f:2f:f1:d6:
4e:48:58:5d:16:de:5c:51:4e:21:f2:2b:5d:b7:36:a7:37:d6:
9c:3d:81:d3:5e:3d:82:30:0a:47:a9:c0:54:13:1d:da:a7:cf:
ec:60:b2:51:61:27:7d:3c:7a:72:f8:00:bc:15:8a:cc:31:68:
02:d5:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:50:29 2025 by rpki-client