Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/GIdtnYTfB_OfNmkj58C5zvwyoiY.roa
File: GIdtnYTfB_OfNmkj58C5zvwyoiY.roa (raw, json)
Hash identifier: mrolhVBCf9ezcIiNdke1ILuseOXCo3lGnZtCw7CJdqk=
Subject key identifier: 18:87:6D:9D:84:DF:07:F3:9F:36:69:23:E7:C0:B9:CE:FC:32:A2:26
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0194274748B240835B070C68CBD2A010E75D
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/GIdtnYTfB_OfNmkj58C5zvwyoiY.roa
Signing time: Thu 02 Jan 2025 13:49:30 +0000
ROA not before: Thu 02 Jan 2025 13:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 185.226.56.0/23 maxlen: 23
185.226.58.0/23 maxlen: 23
194.179.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:48:b2:40:83:5b:07:0c:68:cb:d2:a0:10:e7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 13:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18876d9d84df07f39f366923e7c0b9cefc32a226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:c1:eb:27:ea:0d:81:26:73:b4:5c:e0:ec:
31:e4:44:ed:f7:d6:56:d5:cd:5c:a5:c9:bd:cc:7b:
6a:a5:a5:5c:13:76:ad:ab:e6:cd:82:13:1a:0b:32:
df:0c:df:ff:e9:32:7c:9c:12:a2:a0:22:f4:2a:6b:
9f:09:a4:8f:4b:be:6b:11:74:9e:96:de:7a:83:ec:
a6:f1:2b:44:c5:d3:74:63:a5:36:af:87:db:ea:83:
21:05:d0:1c:49:39:3f:cb:4b:05:a0:ec:3c:4a:e3:
4f:36:87:59:61:d3:a0:e6:cb:42:b8:a3:ab:86:1e:
a2:d9:d9:42:be:73:21:fa:af:8a:5c:e6:d0:d7:57:
0c:c4:e1:d6:c9:31:53:f2:27:0e:f1:e9:1b:79:c7:
9e:b2:e4:85:3f:cb:0b:2d:a0:f2:61:79:85:f5:36:
4f:14:fe:2b:5c:c0:b2:e9:7a:e7:86:b0:74:d1:4e:
16:0f:da:a3:38:e2:5b:d7:97:8d:97:0d:b7:08:66:
73:e5:19:24:2d:8d:e2:d1:c2:3b:0f:3a:c0:2c:4b:
d9:74:cd:cf:6f:5c:5e:f0:81:01:1b:b7:bc:d3:1c:
91:c6:be:c4:27:37:df:ae:2f:c4:69:87:2f:1e:09:
03:f9:34:e4:99:7b:45:15:f5:5a:02:cd:db:76:43:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:87:6D:9D:84:DF:07:F3:9F:36:69:23:E7:C0:B9:CE:FC:32:A2:26
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/GIdtnYTfB_OfNmkj58C5zvwyoiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.56.0/22
194.179.138.0/23
Signature Algorithm: sha256WithRSAEncryption
31:98:5c:54:f0:cc:f4:cc:64:03:d1:1b:a5:2b:14:91:15:01:
4e:e3:4f:ce:d3:1f:27:7e:e0:36:62:23:1c:89:c2:b2:d1:42:
f1:18:1a:b0:4d:bf:44:98:b3:9e:6f:19:45:07:0d:fd:0c:15:
3b:2c:2b:b1:65:cf:c5:30:74:09:eb:94:30:c1:f4:c9:5d:05:
db:fb:c6:c1:6d:c4:13:6f:0e:20:85:56:93:36:5e:e4:80:0d:
b5:a7:16:a9:8e:ce:85:99:e5:85:33:33:7f:7c:ea:d5:70:d3:
d1:c0:b8:16:00:a3:8e:ec:0f:28:ad:61:a4:2a:fd:48:4a:e2:
4b:ec:cc:00:1f:33:de:5c:c0:1f:26:0b:a4:d8:87:61:f1:4c:
16:55:05:88:7d:b3:79:5a:1a:07:0f:8c:3a:47:90:7e:a9:ee:
dc:9c:d2:46:ec:bc:53:5d:14:6f:10:8e:44:5a:6f:47:58:5e:
15:87:e9:4e:a2:c5:51:7e:36:31:af:24:e2:59:91:63:b5:5e:
29:b9:38:94:56:9f:11:62:ec:67:55:d2:52:d8:6f:d5:8b:21:
01:11:59:ea:cb:07:ea:fc:a6:80:d6:0e:d1:d2:8f:c0:1d:d3:
54:3b:32:1b:fb:16:30:20:59:e5:75:7f:05:ba:bd:7b:b7:aa:
99:df:6a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:23:16 2025 by rpki-client