Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/dD6GIMFFXfcUZKikgptCTP1SjMg.roa
File: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (raw, json)
Hash identifier: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=
Subject key identifier: 74:3E:86:20:C1:45:5D:F7:14:64:A8:A4:82:9B:42:4C:FD:52:8C:C8
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 0194236A4297B650CAFA7A96FEC044360344
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/dD6GIMFFXfcUZKikgptCTP1SjMg.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44827
IP address blocks: 91.203.24.0/22 maxlen: 22
91.203.24.0/24 maxlen: 24
91.203.25.0/24 maxlen: 24
91.203.26.0/24 maxlen: 24
91.203.27.0/24 maxlen: 24
109.95.40.0/21 maxlen: 21
109.95.40.0/24 maxlen: 24
109.95.42.0/24 maxlen: 24
109.95.43.0/24 maxlen: 24
109.95.44.0/24 maxlen: 24
109.95.45.0/24 maxlen: 24
109.95.46.0/24 maxlen: 24
109.95.47.0/24 maxlen: 24
176.120.112.0/21 maxlen: 21
176.120.112.0/24 maxlen: 24
176.120.113.0/24 maxlen: 24
176.120.114.0/24 maxlen: 24
176.120.115.0/24 maxlen: 24
176.120.116.0/24 maxlen: 24
176.120.117.0/24 maxlen: 24
176.120.118.0/24 maxlen: 24
176.120.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:42:97:b6:50:ca:fa:7a:96:fe:c0:44:36:03:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=743e8620c1455df71464a8a4829b424cfd528cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f3:65:fa:02:88:0b:b2:8e:b8:96:85:4c:e6:
cc:6d:e9:9c:0e:ee:cf:38:e9:8d:7c:41:4a:2e:86:
24:8a:44:cb:4f:98:49:68:fe:12:0e:8b:94:73:8e:
6d:e8:44:f1:84:84:e5:be:c8:9d:ed:9a:4b:3b:26:
28:6f:11:6b:a1:01:0c:ef:1f:b4:a1:f2:d5:02:2d:
f4:3c:93:0c:2c:08:b6:de:8b:7f:c6:4e:b0:86:36:
8a:5d:4d:15:0c:16:e7:85:1f:67:9b:c8:0f:a7:97:
a0:04:f0:c7:ea:6c:6d:46:9c:48:9c:a5:fd:17:d9:
e6:3c:13:51:e0:f2:5b:cf:d1:e5:66:47:ae:56:2e:
34:8f:d7:77:e6:f2:c1:19:1d:04:64:0a:94:7c:08:
74:b4:21:7e:36:38:45:3b:c6:3a:bb:b0:e0:a4:eb:
fd:e3:21:ca:87:a5:fd:3e:e0:ee:52:cc:28:85:1e:
13:f7:3d:e3:d8:3b:f6:79:c0:cb:a9:3f:50:6d:d3:
03:bb:1c:28:af:e7:fa:83:77:76:1b:06:37:58:17:
d2:43:f3:80:c4:49:f0:df:37:0f:9c:16:18:34:7e:
90:93:8c:21:d4:d1:b9:f4:07:26:68:e3:58:37:14:
d3:9a:63:94:d8:e5:6c:93:1d:18:04:d4:fd:e9:83:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3E:86:20:C1:45:5D:F7:14:64:A8:A4:82:9B:42:4C:FD:52:8C:C8
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/dD6GIMFFXfcUZKikgptCTP1SjMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.24.0/22
109.95.40.0/21
176.120.112.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:df:21:a5:25:2c:c0:71:c9:75:50:28:c7:71:7f:0f:c1:49:
5d:fa:64:72:d6:84:72:5a:ae:89:32:21:d6:1d:cd:b7:ad:98:
44:83:c0:33:74:08:a4:43:81:cd:60:f7:cd:71:d8:11:96:2d:
3f:21:7f:f3:dd:65:6a:f2:6d:cd:30:06:8b:43:42:d4:bc:e5:
c8:bd:1d:0e:24:d5:1b:5b:d5:f7:b9:fc:bb:54:db:05:da:e9:
69:68:99:d9:77:48:69:98:bf:02:f6:5a:f1:6b:51:ca:53:73:
45:e5:0c:b4:64:39:26:dd:4d:34:63:8e:92:1b:10:a9:c7:71:
eb:d7:c4:84:60:fc:49:8a:94:f2:a1:79:b0:a8:1f:b9:2c:86:
44:94:c2:a1:d7:51:21:51:d3:ae:75:da:40:13:fb:0c:06:04:
ad:6f:ee:93:c0:9f:8f:c5:e4:07:1d:d8:0d:0e:1e:f0:e3:73:
df:49:5b:1c:f8:5d:39:79:89:14:53:ae:77:72:f1:8e:a8:8d:
b9:ef:4f:d6:de:0c:06:e6:e3:d6:90:5e:3d:59:a1:89:d3:4e:
e7:be:06:22:64:36:9c:35:a8:1b:97:30:50:d5:6e:94:43:99:
e3:8c:98:76:e8:3f:2a:bb:70:dc:b5:3e:b4:e7:d0:7f:53:65:
91:c0:33:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:19:47 2025 by rpki-client