Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gSqGZ3ILK3I9YB9N21ns6qmiRa8.roa
File: gSqGZ3ILK3I9YB9N21ns6qmiRa8.roa (raw, json)
Hash identifier: J4XAvT5tZPvTOHy0OK0TxDdYN7DkuoEm8K0en8dr0cI=
Subject key identifier: 81:2A:86:67:72:0B:2B:72:3D:60:1F:4D:DB:59:EC:EA:A9:A2:45:AF
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0195899FDBE3FBF6B9DAE5F4C67E0E0EE64D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gSqGZ3ILK3I9YB9N21ns6qmiRa8.roa
Signing time: Wed 12 Mar 2025 09:11:49 +0000
ROA not before: Wed 12 Mar 2025 09:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 91.226.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:9f:db:e3:fb:f6:b9:da:e5:f4:c6:7e:0e:0e:e6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 12 09:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=812a8667720b2b723d601f4ddb59eceaa9a245af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:3b:6d:2b:3a:bc:4d:6d:4b:9e:39:c9:c5:
99:5e:84:76:10:5a:7f:fc:a8:04:23:fb:6b:35:88:
43:db:51:89:94:8c:79:fe:04:b9:19:a3:86:6f:a7:
b8:c1:93:eb:6b:a6:83:bd:17:81:7c:ff:23:fa:f4:
58:1f:db:9b:a7:6b:c1:1c:64:9f:56:95:d7:93:9a:
60:bd:42:11:78:a4:61:e2:3b:2e:85:5e:53:c2:96:
13:ef:cb:de:36:c1:f2:16:39:cb:ef:d3:f8:cf:ad:
c9:68:88:b1:95:3a:6b:1d:e0:c9:0a:5d:96:6f:20:
7a:50:3e:2d:a7:bf:58:78:d4:fc:f9:3e:62:3b:7c:
26:59:7b:4f:6a:ea:c4:09:3f:8f:da:b8:84:ce:8c:
48:40:df:88:8d:9b:f7:a5:29:14:46:ce:d3:f5:f0:
dc:da:9b:6f:d4:7a:33:2b:3c:ce:22:48:74:d9:ab:
20:ab:0b:74:31:13:5a:4d:7b:9b:06:49:85:49:4e:
2b:a4:9b:15:0e:2a:03:e2:3d:1e:d8:13:51:46:25:
cd:4d:92:67:36:7f:c7:e7:b1:f3:96:af:7b:2e:c4:
37:cc:3f:f4:0e:ea:81:f6:9c:0e:12:a9:eb:2b:b6:
cc:61:be:8e:05:68:46:59:c1:7a:ed:a3:14:3b:1f:
ac:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2A:86:67:72:0B:2B:72:3D:60:1F:4D:DB:59:EC:EA:A9:A2:45:AF
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gSqGZ3ILK3I9YB9N21ns6qmiRa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:4b:93:40:63:bc:3f:7c:81:01:54:05:9f:4d:7f:42:8d:c1:
6b:86:c3:cd:89:0f:67:df:1d:2e:03:95:2e:58:30:36:a6:7c:
2a:3e:67:a8:2a:19:ae:4c:98:01:16:97:a2:dc:68:9d:6f:18:
b9:05:6d:75:f4:b2:c3:48:02:6d:31:76:60:92:28:69:3f:94:
c9:36:7e:41:36:57:eb:5e:4d:2f:37:97:db:54:5e:6e:39:e0:
e2:90:4c:3d:38:f0:87:fc:ef:2b:29:87:c8:4f:c9:b0:34:8f:
58:b5:2d:9f:48:d7:6d:b1:67:b2:15:03:03:bd:ad:40:de:98:
ed:3f:40:ad:b2:85:4c:a2:62:c8:31:74:1e:ac:81:9a:93:fc:
a3:3c:b9:dd:b4:ad:fa:6d:f0:ae:a2:d6:f0:54:63:65:45:fd:
51:8c:ed:ea:fc:97:bf:d8:af:7d:5a:11:98:5d:9c:6e:7b:eb:
c5:54:5d:ba:21:6c:c2:a8:cd:2c:6e:97:a6:bd:f5:da:de:9c:
e9:69:f9:4f:98:d5:e2:24:68:18:c9:30:8b:d5:0b:e6:70:e3:
b4:40:9e:7b:c4:d7:55:02:94:f6:40:97:bf:bb:38:d5:62:7c:
90:20:75:73:07:dd:f5:01:e1:39:dd:67:89:06:d5:f2:e2:24:
59:dd:9f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:49 2025 by rpki-client