Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/g2b35-nULZDfmdIQobQp625Nk-I.roa
File: g2b35-nULZDfmdIQobQp625Nk-I.roa (raw, json)
Hash identifier: daDEnydg6U3m1GEZ8hWZT3NDMPEI2dbQkvddvsu4lNo=
Subject key identifier: 83:66:F7:E7:E9:D4:2D:90:DF:99:D2:10:A1:B4:29:EB:6E:4D:93:E2
Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial: 0194252225D22684F2BEF78B128EF255A2DA
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/g2b35-nULZDfmdIQobQp625Nk-I.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 193.19.196.0/24 maxlen: 24
193.19.197.0/24 maxlen: 24
194.125.246.0/24 maxlen: 24
194.125.247.0/24 maxlen: 24
195.22.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 14:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:25:d2:26:84:f2:be:f7:8b:12:8e:f2:55:a2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8366f7e7e9d42d90df99d210a1b429eb6e4d93e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b9:fd:b3:1a:ad:ff:75:19:cc:78:9a:e3:f3:
95:07:96:62:19:0f:dc:c6:bd:54:0f:09:f0:ee:3f:
c0:25:82:d8:15:1a:04:4e:f7:df:02:59:12:77:2a:
99:24:dd:c7:3d:63:a8:22:13:13:2b:00:d0:58:8c:
1a:c5:20:27:ad:e1:61:18:3c:0b:d9:fb:10:d3:cf:
9e:23:81:70:1c:44:6a:87:d3:54:14:39:91:dc:ef:
d9:8c:6f:35:7f:82:9a:53:29:c6:6c:34:96:5f:9c:
a1:9b:6c:6d:2b:9d:7a:28:4d:8b:c6:26:6b:0f:6e:
e0:07:4d:d0:99:ad:a3:14:71:fc:16:3b:f9:a1:c4:
88:e5:eb:f3:97:d8:ff:57:0b:54:0a:c4:2c:10:22:
4f:7c:0b:52:22:39:3d:a1:ce:f9:54:b9:be:68:92:
ba:a7:ae:33:33:7d:61:62:dd:40:d6:e6:23:f2:7e:
f9:38:49:df:f2:b1:a1:63:7f:a3:55:c5:6c:6d:4c:
fb:fb:94:81:c8:30:35:05:aa:5e:fb:c0:c9:25:c6:
cd:04:b0:84:8c:9e:08:f5:5b:5b:66:7f:15:be:35:
71:09:44:d5:ac:6c:a1:9d:1a:5f:9f:78:e3:18:59:
e1:47:29:2e:2a:1a:43:bc:35:7a:ec:9a:b7:3b:e4:
4c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:66:F7:E7:E9:D4:2D:90:DF:99:D2:10:A1:B4:29:EB:6E:4D:93:E2
X509v3 Authority Key Identifier:
keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/g2b35-nULZDfmdIQobQp625Nk-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.196.0/23
194.125.246.0/23
195.22.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:38:b7:75:ce:55:ea:87:19:5a:b3:2f:b7:24:ac:70:25:f9:
20:c4:eb:8f:a0:5b:3e:bc:bb:06:e1:a3:53:08:f7:25:ba:83:
f1:fd:1e:5a:b0:c3:e0:89:90:ab:fc:83:4c:46:4f:d7:49:f5:
45:37:91:2d:47:ae:0e:e7:41:1e:df:f9:b9:d3:91:11:bf:6e:
6e:e8:db:2c:0c:32:35:2a:4c:5e:f9:06:32:49:fa:69:ab:bd:
0c:b9:f0:a3:13:0d:54:02:a2:6a:db:18:b0:84:7d:29:b8:c5:
82:01:14:8a:f8:f7:0f:41:dd:ec:79:f3:32:3b:c9:3d:1d:70:
b2:73:63:66:36:6b:f1:1b:20:66:7f:92:e7:90:d5:da:87:75:
44:c5:22:42:ca:26:4e:bd:b1:c7:6c:1e:b4:b4:a7:13:3e:02:
0c:f0:50:47:6e:df:e8:11:fe:3e:6f:20:32:77:69:3b:5f:78:
e3:09:bc:ec:52:0d:af:fd:48:54:e6:b6:a9:78:a5:75:d5:a8:
6f:ee:75:01:a0:ac:af:b8:3d:a6:da:56:f6:b1:47:21:75:6a:
2d:93:67:a8:4c:28:37:80:54:cd:53:96:c0:83:b3:7e:38:d8:
a0:31:cb:76:df:b3:e1:72:0a:28:19:83:a4:2c:f3:89:09:1f:
0c:76:46:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 18:56:52 2025 by rpki-client