Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/12KGssEvUxE_j6gW5XD7n08rX3c.roa
File: 12KGssEvUxE_j6gW5XD7n08rX3c.roa (raw, json)
Hash identifier: oAK8MdXi4RIAuKXDq0kKdU/AlzFdNzb1DFaGPQEQF/k=
Subject key identifier: D7:62:86:B2:C1:2F:53:11:3F:8F:A8:16:E5:70:FB:9F:4F:2B:5F:77
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D8C2AA929CD92373387FD820BC9CB
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/12KGssEvUxE_j6gW5XD7n08rX3c.roa
Signing time: Wed 01 Jan 2025 15:48:09 +0000
ROA not before: Wed 01 Jan 2025 15:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5580
IP address blocks: 185.162.112.0/22 maxlen: 22
195.143.68.0/22 maxlen: 22
212.56.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8c:2a:a9:29:cd:92:37:33:87:fd:82:0b:c9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d76286b2c12f53113f8fa816e570fb9f4f2b5f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:98:04:cb:85:df:7b:8a:ca:db:3f:c0:c0:
2a:89:fc:2d:9c:e9:bc:d8:df:c9:e2:c5:f7:b9:4c:
76:aa:e7:92:37:7f:ea:fc:5e:fe:99:8e:13:5e:48:
2b:9d:80:5e:96:df:48:44:19:e2:c5:ac:af:97:d2:
5b:2d:fa:e5:83:cf:c3:2c:ae:82:c1:be:98:8e:fe:
86:46:31:11:8d:f3:3c:54:f3:5d:e0:b9:03:a4:83:
bb:6f:ce:bf:3c:1e:2a:dd:8a:32:b6:29:14:2e:81:
3b:e9:18:86:de:ec:5d:e1:f7:3e:ad:50:3b:90:d0:
3a:7f:6a:57:04:ea:8c:75:f9:bc:72:12:0a:45:6c:
16:98:2f:6a:1f:e4:c6:ad:5e:0c:fb:b2:52:3a:87:
5f:ac:58:69:1f:8c:30:dd:b3:b2:1b:4c:8f:ac:64:
00:69:c7:38:c6:03:78:f4:b6:3d:78:19:cb:f3:eb:
b6:a6:63:51:94:d4:75:f8:ec:4f:50:f2:0d:80:58:
12:c2:b2:5f:96:b0:f0:2f:fc:50:1e:5d:d1:43:62:
d2:ed:55:18:7f:c5:81:cd:51:15:d0:91:92:5d:cc:
43:da:c6:d5:21:ca:ac:4b:5b:62:8b:3c:7d:ce:7b:
82:bb:dd:57:45:50:a9:5a:8f:86:71:ef:4d:23:2b:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:62:86:B2:C1:2F:53:11:3F:8F:A8:16:E5:70:FB:9F:4F:2B:5F:77
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/12KGssEvUxE_j6gW5XD7n08rX3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.112.0/22
195.143.68.0/22
212.56.20.0/22
Signature Algorithm: sha256WithRSAEncryption
45:53:1b:1c:4a:4c:81:5a:45:b9:f7:61:af:69:ed:00:21:10:
46:5e:cd:7c:5b:45:7c:67:a5:ea:08:45:3f:7b:0d:57:16:4b:
83:df:70:6a:e0:65:d4:26:c0:7e:27:51:b4:7d:c2:16:c3:b8:
dd:0b:f8:9a:db:8b:1f:ec:a6:48:40:9b:b9:8d:d6:cc:6b:6f:
c6:69:9f:c5:99:1f:48:d0:e0:99:93:1d:a4:42:98:dc:c8:44:
5d:95:cd:b8:4c:5e:a8:d5:4e:58:ab:7f:71:fb:69:bf:90:fa:
84:30:2d:68:f3:b3:2f:de:58:e0:89:d5:ba:f5:2d:b2:ac:a2:
c0:a0:1c:51:95:a0:fa:a9:9d:5c:e6:fc:12:b8:e3:6b:5d:3b:
a6:ff:b8:57:28:35:fe:36:bc:b3:b4:e0:8d:4a:eb:69:da:bf:
a7:54:4a:8a:e0:d8:14:77:de:1c:25:2c:b9:bf:f8:f8:1d:58:
49:e1:97:e4:61:58:52:b6:c2:4c:e6:28:85:64:d2:1c:a7:ba:
70:b8:94:36:fe:7f:1b:61:04:20:2d:71:7d:a9:03:38:e1:aa:
55:a9:79:99:67:4e:82:6b:57:a5:ca:62:5f:cd:5c:51:ff:bd:
66:a7:2b:77:42:cd:4e:2e:96:aa:4c:d5:40:f4:70:01:06:72:
c7:38:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:27 2025 by rpki-client