Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/g4S5t0Rp-z-9CsfX3x0k4M2-Zqc.roa
File: g4S5t0Rp-z-9CsfX3x0k4M2-Zqc.roa (raw, json)
Hash identifier: WcwE0p+i38z1vNPiQ1G2pAllKLPQ9IAMSRdMVsiu038=
Subject key identifier: 83:84:B9:B7:44:69:FB:3F:BD:0A:C7:D7:DF:1D:24:E0:CD:BE:66:A7
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0194274882DC03366DC8819DA864431B9C55
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/g4S5t0Rp-z-9CsfX3x0k4M2-Zqc.roa
Signing time: Thu 02 Jan 2025 13:50:50 +0000
ROA not before: Thu 02 Jan 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35575
IP address blocks: 194.15.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:82:dc:03:36:6d:c8:81:9d:a8:64:43:1b:9c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8384b9b74469fb3fbd0ac7d7df1d24e0cdbe66a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:9a:d8:9b:f1:f5:d6:b7:ca:19:d8:49:e8:
75:67:e8:ed:e9:d7:03:ed:aa:50:24:f5:6d:78:3d:
f1:9a:1c:48:f9:47:70:bf:8c:b2:91:9d:3d:21:98:
9a:7e:51:78:4d:3d:6d:c1:a4:ef:29:96:ec:d3:84:
66:82:49:04:7d:91:8d:48:89:90:d2:ee:61:56:99:
88:0f:41:a9:22:84:ab:d5:37:0e:f3:d4:43:b5:3e:
25:83:47:18:8e:78:39:ca:c7:44:75:94:7e:d1:ac:
f7:5b:29:3f:fa:2b:24:24:08:b8:0f:37:3c:40:f9:
2c:43:4e:ea:b1:bd:c8:65:d5:34:39:79:21:2d:97:
4c:fd:14:c5:2c:56:1a:9b:cc:c7:6d:95:37:9c:be:
16:76:6f:c9:b1:7f:ba:a1:c7:a7:7a:f9:95:34:7d:
a3:97:e8:8b:01:b2:6d:8f:64:08:14:d4:db:5b:2f:
03:d9:ee:4a:1f:0b:9d:db:ab:26:9f:c4:6e:9c:4f:
2a:cc:be:55:ab:87:30:af:e6:d7:8b:9f:6e:ed:70:
dd:27:66:c6:f2:00:bf:16:9d:bc:14:50:0b:7f:17:
e5:15:3e:f9:ce:c2:b5:6c:27:e8:39:f7:6a:75:9c:
0f:3e:22:89:74:ca:26:4e:6c:f9:5d:9b:5f:fe:89:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:84:B9:B7:44:69:FB:3F:BD:0A:C7:D7:DF:1D:24:E0:CD:BE:66:A7
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/g4S5t0Rp-z-9CsfX3x0k4M2-Zqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.37.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:7e:75:1e:b7:56:20:68:00:ae:0c:d0:8c:59:26:33:12:c7:
2b:e7:36:f1:0d:b5:f8:97:1f:a8:7d:cb:04:22:fe:8a:5d:66:
12:e6:74:9c:69:fe:e0:8e:24:b6:98:f3:48:7d:ce:aa:88:4e:
f8:eb:49:aa:8d:0a:ca:bf:04:a8:fa:ae:4b:37:21:6a:75:d9:
de:65:e4:28:0c:c2:54:0c:88:c9:a9:1d:13:75:83:1d:1e:fd:
97:c8:5f:17:88:7d:31:dc:b6:06:6f:1e:3c:a9:75:38:89:22:
46:99:f2:e3:d8:b9:5c:19:9c:e4:df:14:2e:e1:19:7f:97:66:
56:d8:75:8f:2d:67:9e:10:0a:a7:c3:eb:86:f8:39:b3:56:c6:
f2:c3:81:24:00:cf:85:99:42:bc:b4:a7:12:c7:fb:dc:39:85:
59:2d:4d:f8:c0:da:16:6f:42:4b:91:8d:db:c2:08:5a:18:a5:
e4:1c:a2:8b:88:dd:05:7d:0f:6e:f1:af:0b:17:a3:25:a0:64:
a8:3e:2c:b0:4a:9b:08:e8:f0:cf:24:65:5f:3a:a4:b5:fe:22:
13:24:a3:ba:af:7f:06:48:53:68:a2:67:c9:c5:61:02:aa:ae:
83:37:0a:0b:f8:3b:57:44:ec:3a:e1:8e:8a:e4:38:6e:2b:56:
be:9b:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:36 2025 by rpki-client