Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/Gp0R5zDh8lM3SO2TjRE-IgUbcO4.roa
File: Gp0R5zDh8lM3SO2TjRE-IgUbcO4.roa (raw, json)
Hash identifier: 7jHco5ZuwfFCZy8s7K6w6Z+7cmvFX9c1LH/XB4jVbqc=
Subject key identifier: 1A:9D:11:E7:30:E1:F2:53:37:48:ED:93:8D:11:3E:22:05:1B:70:EE
Certificate issuer: /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Certificate serial: 0195C76FD5B56541058940227235B738F674
Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/Gp0R5zDh8lM3SO2TjRE-IgUbcO4.roa
Signing time: Mon 24 Mar 2025 09:15:49 +0000
ROA not before: Mon 24 Mar 2025 09:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 194.46.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:6f:d5:b5:65:41:05:89:40:22:72:35:b7:38:f6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Validity
Not Before: Mar 24 09:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a9d11e730e1f2533748ed938d113e22051b70ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:d9:0d:9d:81:b6:eb:2b:a6:72:6c:75:54:
04:63:e5:79:1c:f4:17:55:b2:40:ff:3c:71:a1:74:
9b:e0:42:f7:34:0f:6a:08:65:10:74:d3:05:85:84:
3f:39:fc:e0:8d:45:cd:72:bd:da:0e:ff:ae:b3:aa:
b3:c6:25:8d:9a:4d:e3:60:d8:ee:f3:3d:d7:99:c4:
bc:90:50:8c:e2:74:8b:89:ac:7f:76:43:08:16:6e:
09:e3:cf:6a:e6:21:43:ed:19:6e:3e:0d:b0:cd:81:
82:8a:0c:37:9d:55:21:48:d8:9b:0d:3e:d9:f8:cf:
63:5c:d0:99:35:a3:c5:be:18:19:1c:51:b5:0a:11:
da:bb:c9:4b:20:b9:4a:69:20:4f:16:59:6a:77:36:
ac:6b:18:e2:3c:79:42:48:d1:9b:9c:f0:7f:27:ed:
20:10:98:d4:87:65:8e:de:62:36:36:70:fc:30:4f:
0b:bf:5c:ce:ab:16:0b:8c:ca:be:8a:42:d9:9e:31:
56:e6:33:f7:3d:f7:bf:3f:80:56:e4:54:19:15:eb:
b5:55:00:bb:47:24:9a:a8:36:5c:8a:0f:21:97:c9:
92:fa:1b:05:31:a9:d5:60:58:a0:27:55:6d:ca:4c:
65:d7:96:ca:60:dc:3d:13:42:48:47:46:9f:aa:2a:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9D:11:E7:30:E1:F2:53:37:48:ED:93:8D:11:3E:22:05:1B:70:EE
X509v3 Authority Key Identifier:
keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/Gp0R5zDh8lM3SO2TjRE-IgUbcO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.46.32.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d2:f7:ca:7d:2e:2e:ea:fd:45:52:06:54:09:d3:92:26:f1:
c2:f4:22:ee:19:0a:dd:b0:82:77:99:42:29:8b:af:ed:69:91:
88:d7:d2:91:49:69:66:93:33:42:29:b2:23:a3:0c:22:a9:f4:
9b:eb:71:e7:c7:4d:cc:f6:61:da:7f:bb:ad:43:a1:b7:b4:b2:
f6:ea:f8:52:b1:6e:e6:eb:1c:6a:83:f1:18:5a:88:a5:46:04:
99:77:01:a5:0d:9c:fa:72:61:d4:54:02:af:26:19:f5:09:96:
99:36:ed:ca:c4:9f:a2:b8:88:22:41:d3:7c:59:65:82:1b:2c:
a0:bd:2c:b4:fa:7e:e4:25:35:dd:47:e9:14:ee:c8:b1:b3:84:
d8:55:30:96:2c:58:09:c2:dd:e9:ef:ba:bd:34:d9:f0:11:03:
2b:1c:8a:12:d2:0b:2d:14:b3:88:46:cd:80:c8:09:52:1d:7e:
e9:31:72:f1:c0:ea:d1:7a:47:d2:f5:44:36:5f:77:80:b1:30:
8c:aa:4f:17:77:c9:83:26:08:bc:25:2c:55:02:83:b7:38:ba:
96:4e:0a:16:27:78:26:51:32:20:09:da:54:e1:06:12:c6:80:
55:aa:24:53:1f:e7:07:8b:54:fc:fc:f8:90:7f:b5:a2:17:b7:
06:51:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:42 2025 by rpki-client