Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1giNisA34DcJvt7kJqS9yzEPhf4.roa
File: 1giNisA34DcJvt7kJqS9yzEPhf4.roa (raw, json)
Hash identifier: nsYsxOIt9xtrVJ8UBwnXYAXKwxYpPMbJsWv1+1YznfE=
Subject key identifier: D6:08:8D:8A:C0:37:E0:37:09:BE:DE:E4:26:A4:BD:CB:31:0F:85:FE
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D0CBDCD843198A0CDB91A50E45F7
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1giNisA34DcJvt7kJqS9yzEPhf4.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61042
IP address blocks: 194.209.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d0:cb:dc:d8:43:19:8a:0c:db:91:a5:0e:45:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6088d8ac037e03709bedee426a4bdcb310f85fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:71:4e:55:4a:00:3a:93:98:27:ff:7b:f1:
ae:66:63:9f:74:7c:ef:03:84:b3:c4:4e:b6:fd:26:
c2:2c:cb:a3:42:e6:8b:3d:a2:f1:ce:83:f2:04:13:
ba:92:6f:84:7f:35:af:a0:9f:0e:80:27:0c:a1:80:
18:8c:33:50:5d:9f:5f:65:25:c7:bc:75:8d:44:c6:
ac:0f:3d:27:89:11:8f:bb:0e:4c:1a:0f:74:87:4e:
de:36:ac:1c:d3:eb:c9:ba:a5:9e:64:bd:1c:88:1b:
59:79:2a:a8:31:f5:b0:b8:2b:40:f0:1c:0f:04:4f:
bc:49:a7:b0:4f:3c:55:2d:53:a9:61:32:6a:39:92:
93:1d:c9:ac:0a:85:47:b3:cc:c7:a4:24:8c:cb:3d:
b1:23:09:2e:64:a8:2c:23:7f:ea:d2:3c:67:8d:a2:
99:0b:d8:91:de:5f:c8:84:6f:d9:54:04:d3:11:8e:
a1:ee:c1:3d:c6:2f:76:07:54:a0:4f:ca:41:19:40:
74:e9:53:b1:9a:bf:4d:62:40:24:68:9c:d1:92:bf:
fb:ac:e4:0f:66:43:58:de:8c:d9:66:7a:98:64:da:
1b:29:6b:bc:5d:76:85:97:e4:10:2c:93:00:c3:23:
24:35:85:01:8d:ff:bf:67:f4:a4:62:41:0b:06:a8:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:08:8D:8A:C0:37:E0:37:09:BE:DE:E4:26:A4:BD:CB:31:0F:85:FE
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1giNisA34DcJvt7kJqS9yzEPhf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ed:56:fc:3e:44:bf:4f:4e:d8:3c:55:a8:24:93:85:a3:01:
39:d8:ac:4a:bb:de:7c:b8:17:54:75:4c:fb:4e:8f:54:0e:1c:
15:16:81:50:b1:fa:a2:a9:d8:cd:01:a5:d3:dd:55:5a:01:8d:
b1:db:e0:a2:6d:9f:6d:1c:22:49:7f:dc:8a:29:29:b0:d3:50:
1a:19:ff:8d:fe:7c:18:88:13:a2:90:0d:74:1d:39:b7:91:99:
97:b1:ca:98:8e:cd:4a:a9:d8:0d:ae:d3:43:26:5d:04:ea:21:
d9:a7:49:1b:28:ae:e2:06:af:88:a4:5b:1c:22:cd:49:5a:ba:
b2:1e:42:14:5d:08:a6:09:92:20:89:c5:55:66:28:8a:6a:f1:
c5:be:8a:3b:96:f2:48:7b:79:2a:66:9d:5c:50:4e:56:4e:7f:
15:f2:b6:3e:21:0c:eb:02:db:52:b8:99:31:b6:7c:a7:84:8a:
ae:83:74:84:7e:84:db:83:b4:4a:a9:70:9f:6c:fe:da:ce:6e:
69:f5:06:17:a5:b8:1b:f6:2f:5a:14:17:a5:9c:68:ea:ae:20:
30:95:73:67:02:64:d0:d0:37:a2:e7:dc:c1:11:f4:8b:1b:ea:
91:d8:5d:93:f4:06:81:bf:7c:e8:a9:a0:a5:df:ec:c9:c4:b1:
5c:b9:3a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:46:02 2025 by rpki-client