Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/gPum4DXKDMJ6BVlCRX41E_z1RtE.roa
File: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (raw, json)
Hash identifier: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=
Subject key identifier: 80:FB:A6:E0:35:CA:0C:C2:7A:05:59:42:45:7E:35:13:FC:F5:46:D1
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194266B832AECFF8D9C91D86CCAB7F86EC3
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/gPum4DXKDMJ6BVlCRX41E_z1RtE.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211885
IP address blocks: 176.103.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:83:2a:ec:ff:8d:9c:91:d8:6c:ca:b7:f8:6e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80fba6e035ca0cc27a055942457e3513fcf546d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:38:53:46:9b:d1:8a:2f:89:4c:8e:b4:94:
d3:d1:91:c7:f6:76:1c:6c:2e:4f:eb:e4:bd:a0:3f:
c6:71:e0:79:49:a2:76:8a:d7:c6:19:fa:3f:10:f1:
70:a2:e2:03:81:91:19:d3:3c:a1:c2:b3:92:b9:d9:
05:51:27:73:6d:13:08:08:b4:48:56:b5:18:41:c3:
d7:ac:88:40:ee:9e:4d:66:cc:f7:ed:da:6e:c3:8f:
88:4f:b1:96:cd:1b:d8:87:5c:8f:c9:3e:93:da:c6:
ad:fb:24:62:71:22:da:b1:bb:14:bb:5a:9b:9c:14:
33:e8:9d:e6:4f:15:00:ed:05:03:eb:b0:a2:19:a7:
05:72:05:63:d1:4e:a5:a2:33:d1:a0:42:62:0a:65:
8b:a8:5c:93:9c:0f:92:df:50:24:55:9d:97:79:6f:
5d:63:06:c9:35:9a:b1:b0:25:e8:a2:26:9d:c6:60:
46:7c:87:3b:11:a4:80:17:9d:3f:ed:8f:cc:f8:9b:
8b:2c:bf:7d:a6:f8:1b:7c:d3:2d:fb:ae:8f:46:f3:
07:e9:1d:ab:5c:2c:7a:19:9a:d4:73:a6:2c:65:70:
37:e6:72:0b:43:48:3f:54:a5:bf:6c:a3:0f:76:18:
d8:09:c9:a6:e5:b2:20:bf:2d:15:5b:3e:e9:0e:0d:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FB:A6:E0:35:CA:0C:C2:7A:05:59:42:45:7E:35:13:FC:F5:46:D1
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/gPum4DXKDMJ6BVlCRX41E_z1RtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:19:bc:98:32:97:05:62:bd:9c:3d:fa:61:20:5f:0c:dd:45:
f2:01:82:87:41:19:84:d6:d0:d2:be:f9:9d:b2:3e:bd:c4:5c:
a4:d9:5d:a6:e2:6c:bf:0d:c8:e4:ba:8f:c8:5d:2f:38:fd:4f:
ea:74:cf:ed:94:51:3f:1a:ad:f2:18:f0:09:27:69:7c:41:3d:
fd:ca:81:b6:08:68:ac:91:85:8d:54:bf:3b:53:bc:8d:b6:b9:
4e:ff:3a:1c:91:a0:a4:73:01:cc:9f:77:63:a5:6f:9f:6e:38:
31:5f:6b:3e:7a:dd:a3:4d:4b:a2:8a:d6:cf:c5:f8:c7:07:14:
ed:b6:f5:09:b7:e8:5c:22:a3:a9:68:a9:96:24:3b:a3:5f:df:
b1:87:f5:a8:bd:de:06:23:82:8c:0d:f4:62:71:12:b2:a9:47:
47:f6:f7:df:b7:83:bc:dd:58:3d:e6:ad:a1:c9:88:5b:be:3f:
0a:9e:13:ee:c9:31:08:01:50:f3:7b:d0:f5:10:be:5a:89:db:
82:37:2b:09:48:b0:ce:29:96:bd:31:e9:15:f6:ce:4e:1a:20:
96:22:c0:93:3d:e0:5e:f5:59:df:9a:3f:c7:4d:db:0b:fa:80:
95:09:58:e5:ed:52:da:38:b6:5b:01:63:07:69:f5:a1:b7:32:
5d:3a:e8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:06:22 2025 by rpki-client