Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/gXpN4Jzwwckj47SB6dPDzkGMcGo.roa
File: gXpN4Jzwwckj47SB6dPDzkGMcGo.roa (raw, json)
Hash identifier: cU0OZZjL1jwr+A4jdiw86+QpPrFnf2WcAbgpLCZiW4E=
Subject key identifier: 81:7A:4D:E0:9C:F0:C1:C9:23:E3:B4:81:E9:D3:C3:CE:41:8C:70:6A
Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial: 019422FC04293510F3395910C1B6CF7A3166
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/gXpN4Jzwwckj47SB6dPDzkGMcGo.roa
Signing time: Wed 01 Jan 2025 17:48:48 +0000
ROA not before: Wed 01 Jan 2025 17:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34032
IP address blocks: 185.98.204.0/24 maxlen: 24
185.98.205.0/24 maxlen: 24
185.98.206.0/24 maxlen: 24
185.98.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:04:29:35:10:f3:39:59:10:c1:b6:cf:7a:31:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Validity
Not Before: Jan 1 17:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=817a4de09cf0c1c923e3b481e9d3c3ce418c706a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:6e:67:33:61:bd:c3:67:f0:99:89:b8:e0:
3c:3d:ce:30:06:30:64:bc:43:e7:00:2b:a3:54:7b:
80:2f:86:4d:b2:c7:6b:1d:f3:e0:66:58:eb:f3:25:
89:5e:02:2a:ab:99:5a:f1:e3:7c:7e:44:27:77:96:
e6:d9:77:12:40:9d:98:15:67:ff:51:a3:22:cf:41:
cb:00:65:9d:50:a0:9f:d6:58:11:d1:c4:82:85:19:
11:f6:73:8f:bd:33:0c:82:7b:8c:3e:a4:a3:ea:f6:
65:7e:b6:c9:65:9b:32:5b:53:c1:7a:d4:91:a0:72:
b1:e0:e3:76:72:13:ec:1f:f7:c2:e3:b5:25:fe:9e:
7a:0d:cb:c1:27:01:ea:08:ae:65:4a:20:16:f7:60:
7e:65:18:7e:dc:1b:b3:9e:95:38:ad:82:43:73:af:
b5:9f:55:a0:44:5a:8c:b9:14:f6:cb:48:88:ca:ad:
b7:ad:b5:a7:68:1c:14:51:0d:3a:f5:21:c5:c6:d3:
4c:94:79:f6:e3:f8:19:fc:96:03:1b:dc:c9:e7:d9:
a2:91:d0:ff:40:a6:e2:af:d4:e1:9b:1c:88:0e:78:
74:26:c6:39:69:41:2a:66:e6:fd:c7:39:d7:d2:95:
86:b9:e7:f8:7c:65:7c:0d:ff:6c:a1:13:72:cc:7c:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7A:4D:E0:9C:F0:C1:C9:23:E3:B4:81:E9:D3:C3:CE:41:8C:70:6A
X509v3 Authority Key Identifier:
keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/gXpN4Jzwwckj47SB6dPDzkGMcGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.204.0/22
Signature Algorithm: sha256WithRSAEncryption
81:3f:83:d1:62:92:cd:50:f6:62:06:ac:42:b8:68:63:d3:6f:
91:74:2b:79:fe:7f:49:cd:3b:36:8b:92:77:1a:b6:67:93:f9:
a0:b4:c8:d2:85:b7:e1:eb:b2:77:dd:4b:ab:4c:03:c2:f9:67:
8c:06:71:11:81:8d:31:a2:e0:a8:f3:d4:70:e7:a9:dd:36:f8:
a1:15:4e:3a:c6:dc:3a:88:15:80:11:1f:36:54:c9:34:55:e5:
e0:d5:30:6b:66:c6:c1:fa:9d:c8:a5:63:0f:74:b7:f0:a5:3c:
3f:7e:ec:9a:03:f2:aa:c7:26:81:da:4e:df:b8:0b:a3:f5:7f:
95:3b:12:35:00:e7:d5:6c:29:92:30:bd:78:22:a5:a5:ee:6c:
06:33:88:fa:d3:e7:d3:ce:ef:04:fa:71:c6:4e:76:b1:f9:8c:
a1:87:26:0f:65:0e:fe:df:a9:01:8e:44:60:26:94:b0:ff:bf:
f8:b2:2a:06:ed:b6:09:b6:17:5a:8c:48:90:3b:c1:83:e0:66:
37:16:27:ca:79:e1:17:87:5f:d3:39:6a:bf:91:67:1f:31:92:
39:98:a0:0a:a3:a0:bc:5b:07:23:96:ee:7a:b9:2b:4c:fe:2e:
cb:f7:4f:d4:33:62:6c:d6:71:53:e2:2a:0c:3e:04:75:4e:91:
26:40:9a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:58:44 2025 by rpki-client