Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/RGavrFD9QlH9mvEK00LE9vM0Ylo.roa
File: RGavrFD9QlH9mvEK00LE9vM0Ylo.roa (raw, json)
Hash identifier: in3DOj7fuK/tRP2Np73D85wEHXvdsqUOTjKtL4z+mG4=
Subject key identifier: 44:66:AF:AC:50:FD:42:51:FD:9A:F1:0A:D3:42:C4:F6:F3:34:62:5A
Certificate issuer: /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial: 01942747C27C1ED9928544F9B0FD828E64EF
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/RGavrFD9QlH9mvEK00LE9vM0Ylo.roa
Signing time: Thu 02 Jan 2025 13:50:01 +0000
ROA not before: Thu 02 Jan 2025 13:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44858
IP address blocks: 91.245.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c2:7c:1e:d9:92:85:44:f9:b0:fd:82:8e:64:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Validity
Not Before: Jan 2 13:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4466afac50fd4251fd9af10ad342c4f6f334625a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:86:0b:eb:0d:93:66:a7:3d:a0:bd:5e:f5:
0c:57:92:c2:a5:6b:83:9c:c7:a3:3e:1c:3d:bb:fd:
c9:ac:82:ee:02:a0:5d:74:ec:bc:6f:49:cf:b4:3c:
33:fe:6a:2c:28:63:06:0c:0f:d6:4a:70:45:ed:91:
3d:4d:d6:60:5c:b0:62:4b:bd:6a:ef:00:08:38:a9:
57:18:1c:43:f3:7f:db:d5:3b:fe:08:5c:2a:52:f2:
9a:52:6b:1d:77:e7:23:b4:00:e4:1f:52:12:93:a7:
33:55:40:51:e4:04:20:69:ff:ad:9c:21:db:58:57:
0a:18:a4:28:a4:30:05:86:cf:cd:70:5f:f3:4e:c4:
54:ec:ae:3b:22:c8:4f:69:61:62:f1:d0:6d:20:bf:
e1:52:e8:1b:19:a3:1a:1b:a3:8b:b1:6e:1d:11:ac:
67:d8:74:45:e2:f0:52:45:12:25:cb:0b:82:59:bc:
62:36:1b:e9:93:5e:d7:a9:ae:f9:f7:7e:6d:68:4a:
9a:4a:51:a9:2f:6c:46:cb:d2:fe:7f:e9:e7:9c:3e:
07:26:e5:eb:9d:79:87:72:4a:13:32:f8:fc:b5:8f:
64:68:5c:75:82:dd:ed:ff:db:b6:c7:01:09:6d:6e:
ec:f1:f0:fb:1d:ea:65:ec:e4:d1:e0:8b:d4:b4:69:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:66:AF:AC:50:FD:42:51:FD:9A:F1:0A:D3:42:C4:F6:F3:34:62:5A
X509v3 Authority Key Identifier:
keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/RGavrFD9QlH9mvEK00LE9vM0Ylo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.240.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:24:de:da:67:0f:76:f5:d0:5b:cf:00:2f:fe:dc:df:02:7a:
ab:7d:31:13:d7:21:7f:05:db:b5:a1:ba:c9:ec:66:f2:8d:43:
5d:1c:cc:9f:0d:fe:e7:a4:60:12:35:7f:32:b6:41:b1:ea:09:
af:b9:47:a5:f3:f2:47:9d:02:5c:9a:6e:c8:2e:e1:54:e8:54:
44:33:42:4e:81:f9:29:c8:9b:d0:2d:9a:83:98:49:a0:9c:20:
84:a1:e0:a3:75:2b:b6:83:2b:96:66:6f:42:3e:82:e0:28:b1:
0b:b8:3a:e2:b9:18:f7:e7:36:1d:a1:07:00:85:fa:94:e2:4d:
1a:c2:7e:26:e2:cf:aa:5b:e7:21:6a:6b:f1:3f:ec:00:85:c3:
38:ca:48:f9:12:c4:27:99:61:5c:5b:ec:99:8d:2e:cb:a7:c5:
61:bf:68:ab:2d:97:08:b4:15:e3:85:1a:c7:47:5e:86:70:24:
22:cc:22:3b:85:af:46:51:92:d5:64:b3:aa:71:e2:16:b9:ad:
30:8c:dd:38:60:78:cb:aa:ae:b1:91:bb:bf:d1:6f:12:67:62:
46:8a:53:9a:ed:da:74:8c:4f:b1:b0:14:d6:97:e2:79:07:82:
98:db:d3:e8:5c:5f:2e:ab:0b:56:6d:bf:3b:96:d3:1d:3e:96:
56:c8:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:09 2025 by rpki-client