Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/AWu3FimnriCBdHwo3g5MMDT1qE4.roa
File: AWu3FimnriCBdHwo3g5MMDT1qE4.roa (raw, json)
Hash identifier: mO4hJXcIgDGlzI8xRSm/HtygAZ7WHc+oV+0VaCAIGc0=
Subject key identifier: 01:6B:B7:16:29:A7:AE:20:81:74:7C:28:DE:0E:4C:30:34:F5:A8:4E
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019427B57C7364960DACE2D5C4DB6559D14C
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/AWu3FimnriCBdHwo3g5MMDT1qE4.roa
Signing time: Thu 02 Jan 2025 15:49:52 +0000
ROA not before: Thu 02 Jan 2025 15:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 194.38.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:7c:73:64:96:0d:ac:e2:d5:c4:db:65:59:d1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 2 15:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=016bb71629a7ae2081747c28de0e4c3034f5a84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:93:f4:e9:d2:8f:3f:0f:28:bb:07:85:53:
27:22:f7:a1:c1:61:f6:04:95:1f:27:d8:22:44:43:
f7:69:be:e6:bd:d8:33:cc:5b:c1:f9:d6:71:df:75:
81:e0:d6:53:72:c4:e5:4c:e6:43:af:e1:6e:f9:b3:
2d:58:51:37:5f:50:61:86:0b:ac:f0:0f:07:5b:db:
31:37:54:0b:70:7d:f5:43:f6:7b:96:05:fb:f6:dd:
14:e7:75:2a:f3:14:62:06:45:d1:ef:eb:c3:c0:54:
5c:26:17:d6:cf:f4:81:fe:fc:84:85:27:cf:29:8d:
5e:73:59:b8:9f:17:1b:a2:b0:7e:32:50:49:3f:71:
71:6c:14:de:9d:ad:e4:66:0a:cb:8b:80:bd:ea:79:
26:d1:50:3c:46:b1:0e:e5:91:20:e6:03:9c:2b:c5:
a9:62:80:72:ac:ba:33:d7:5c:1c:b3:a2:b9:2d:a4:
b0:d7:9d:d2:65:0d:59:62:63:7b:90:be:be:0a:a3:
10:ec:2f:82:24:5a:7d:c2:6d:b2:93:c7:1f:60:4b:
ba:9a:29:ac:fc:3e:2b:df:f7:e2:5a:ae:1a:69:21:
70:ff:1b:32:7b:fe:c5:9c:5b:f1:86:86:86:c3:3b:
12:7e:6a:5b:10:5e:fa:13:4d:e1:9e:cb:8c:9d:c0:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6B:B7:16:29:A7:AE:20:81:74:7C:28:DE:0E:4C:30:34:F5:A8:4E
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/AWu3FimnriCBdHwo3g5MMDT1qE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.24.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:f1:03:a6:42:6e:a1:33:5f:7a:94:03:24:2e:e0:a2:59:90:
5c:82:1f:51:7b:0e:a9:f3:f2:62:64:18:34:30:bf:9c:2b:2e:
eb:1c:18:75:58:42:88:02:7d:49:d4:23:43:35:98:45:d5:b1:
84:e6:d2:40:db:4c:cd:61:1e:e3:57:33:63:76:69:ad:f6:52:
ee:5f:07:a7:b1:e5:ff:48:2f:b4:f9:f6:13:a4:25:32:e9:a9:
3a:27:84:22:39:90:a8:7f:ca:65:40:08:d6:6e:87:ba:2c:c3:
43:63:39:cb:8d:79:51:1f:78:ac:2c:f3:3f:65:5f:55:5d:e0:
9b:9e:d6:e5:96:e7:30:54:5f:fc:be:5c:c8:2b:ae:28:27:bf:
8e:7c:8e:22:a3:43:a2:c3:95:ee:21:d2:99:57:71:f3:d1:80:
cb:81:9f:cc:32:0c:8c:44:27:09:a4:5c:87:dc:eb:aa:e7:23:
7f:5c:9b:90:47:49:b0:1e:72:7b:a6:eb:48:5a:fb:be:58:72:
a5:22:c5:5b:45:60:e3:9f:6a:8b:5a:ac:e6:1e:fd:64:0f:04:
43:70:28:3e:dd:f6:e8:76:5f:bf:40:cf:e3:fc:46:37:28:fc:
b5:83:00:44:79:a8:b8:28:ae:78:d8:b7:3e:87:55:88:d6:70:
02:03:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:56:00 2025 by rpki-client