Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/gljC_B2rLOcaRp9AWxqW22c-7Qo.roa
File: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (raw, json)
Hash identifier: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=
Subject key identifier: 82:58:C2:FC:1D:AB:2C:E7:1A:46:9F:40:5B:1A:96:DB:67:3E:ED:0A
Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Certificate serial: 0194266C1F924D1DE59E12FCECEA2904EB4F
Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/gljC_B2rLOcaRp9AWxqW22c-7Qo.roa
Signing time: Thu 02 Jan 2025 09:50:07 +0000
ROA not before: Thu 02 Jan 2025 09:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35625
IP address blocks: 195.95.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1f:92:4d:1d:e5:9e:12:fc:ec:ea:29:04:eb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8
Validity
Not Before: Jan 2 09:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8258c2fc1dab2ce71a469f405b1a96db673eed0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:3b:ab:02:e4:1d:5d:4d:6e:46:7d:20:a1:
19:19:a7:5a:f6:9c:e0:29:d0:c5:f1:48:df:46:82:
03:18:14:b4:9a:24:f4:6a:6f:67:bf:17:72:4e:46:
77:43:eb:c7:70:4c:02:d4:95:e8:0e:2c:0d:37:ae:
4c:dc:a3:72:62:0a:90:c3:e7:60:61:1e:d8:66:a0:
ad:d6:ca:55:bb:c6:58:ab:8b:6d:3c:ef:df:6e:45:
82:88:c2:38:c8:08:d5:43:45:cd:a7:09:64:dd:50:
c5:de:23:01:23:08:38:a4:ce:3f:57:6e:76:a5:bd:
02:01:b0:52:7f:2a:76:c8:f0:6b:18:f5:47:59:5b:
12:3e:e1:73:d7:8d:55:5e:27:7d:33:e6:5d:4c:88:
a8:86:12:ee:ba:1e:6c:2a:ad:ea:c2:5c:b4:ca:81:
79:83:ef:4b:e5:ec:7d:45:76:ab:ff:df:bd:62:38:
63:d4:92:43:e3:8e:f5:fb:bf:5f:1e:ce:ac:68:2d:
7b:0b:46:c6:b2:76:1a:a2:e5:92:98:0e:ed:22:af:
0b:81:40:fd:9f:f0:fd:f5:b4:8b:13:88:30:49:89:
23:29:19:9f:f3:b3:62:4e:4e:7d:e0:8e:49:e5:38:
96:8b:a5:6a:1a:d9:73:e0:f9:8f:f8:1e:68:b4:2c:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:58:C2:FC:1D:AB:2C:E7:1A:46:9F:40:5B:1A:96:DB:67:3E:ED:0A
X509v3 Authority Key Identifier:
keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/gljC_B2rLOcaRp9AWxqW22c-7Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.168.0/24
Signature Algorithm: sha256WithRSAEncryption
25:df:7d:e7:08:3c:bb:9c:b0:34:90:e1:da:47:cd:6a:28:8c:
06:e2:fd:40:33:62:26:60:71:78:e9:dd:7a:1a:b6:cf:27:e0:
de:8e:14:b0:fb:bf:93:8d:05:e7:35:40:30:11:ed:22:fc:f7:
8d:d6:4e:46:46:27:1c:77:37:4c:57:3c:d7:c6:00:e1:10:f2:
3e:4b:72:8c:f3:71:15:25:08:6c:24:89:e0:45:a8:1c:88:85:
f7:3f:e2:c1:d8:95:1c:49:91:36:36:25:3f:59:4f:ed:d7:c1:
0c:de:6e:40:7d:c0:1f:80:b6:af:ad:90:c1:4f:bd:82:24:a1:
d1:03:28:1c:85:35:c5:5f:a5:ad:e0:f5:ef:56:63:cd:ec:dc:
f8:8b:80:1d:b7:be:5f:46:d5:c8:71:1d:e9:45:49:76:59:7d:
c2:0d:e5:fe:3c:a5:e1:6b:d5:a5:38:cc:a0:0c:60:3b:1c:33:
d7:6b:51:ad:80:88:ff:86:1a:2c:60:50:e7:38:c8:61:12:52:
44:1d:73:c7:2d:e7:30:0b:eb:08:09:b4:7d:0e:44:ba:d7:c8:
09:b4:8f:cb:3d:22:b3:2b:2b:73:a7:79:a0:11:df:b6:eb:1e:
7b:3b:96:20:9a:f7:c2:85:32:82:9d:25:81:81:55:05:54:23:
54:4a:04:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:27:16 2025 by rpki-client