Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/GAOT9zYxLw8oZDIwUIGywpBcjB4.roa
File: GAOT9zYxLw8oZDIwUIGywpBcjB4.roa (raw, json)
Hash identifier: hUanzkdOKXITITs1YgDbKjXXABKxTMzchE87QAQ0bYE=
Subject key identifier: 18:03:93:F7:36:31:2F:0F:28:64:32:30:50:81:B2:C2:90:5C:8C:1E
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01942747A3A95BD33D89B1B21539412ACB3C
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/GAOT9zYxLw8oZDIwUIGywpBcjB4.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202468
IP address blocks: 2.178.254.0/24 maxlen: 24
2.178.255.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a3:a9:5b:d3:3d:89:b1:b2:15:39:41:2a:cb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=180393f736312f0f286432305081b2c2905c8c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:35:28:79:1c:bc:c1:d9:3d:3a:5c:33:2a:
fa:5a:46:35:8b:7e:89:1b:00:5e:0e:17:1a:01:64:
f1:ec:71:12:79:5a:07:3d:c3:d6:db:c3:72:65:34:
29:16:ba:c3:52:56:e8:2b:40:a2:54:0d:f5:5b:93:
81:7e:97:ca:ed:af:77:53:1b:f6:23:76:82:00:75:
2c:ac:1e:89:8f:7b:ba:6f:14:04:c4:96:d1:a7:3a:
f2:b7:54:1a:0e:c2:9d:84:82:84:c1:6f:d3:cd:76:
c8:7a:51:80:c1:ad:9c:61:0d:ca:fe:57:a0:93:ac:
90:f1:03:6f:1e:f7:2a:6b:71:55:7a:1b:c1:89:1c:
a3:80:29:c2:6f:34:23:13:1b:4b:61:35:62:18:f8:
a7:d6:e7:dc:ac:35:3b:87:03:e6:9b:ea:ff:78:16:
05:5d:6f:90:e6:d4:b6:f2:5b:4c:2a:84:86:52:cc:
93:4e:2b:41:7d:c5:42:c7:c2:a3:b7:93:48:b0:fa:
29:4b:f3:bd:34:db:f4:57:8e:eb:fc:dd:5d:a2:52:
86:aa:09:ee:78:2b:bf:32:d9:d2:d9:50:48:a1:3d:
d8:55:62:bd:3a:1a:28:4d:52:85:00:62:35:cc:62:
df:c0:2a:02:59:c5:33:cf:d0:01:6f:14:48:2f:55:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:03:93:F7:36:31:2F:0F:28:64:32:30:50:81:B2:C2:90:5C:8C:1E
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/GAOT9zYxLw8oZDIwUIGywpBcjB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.178.254.0/23
78.39.156.0/24
78.39.198.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e8:47:22:b5:37:57:e6:51:ba:00:26:ce:a0:7c:05:d6:73:
c9:5d:69:fa:ce:72:ab:4e:c8:7b:bf:e1:c7:51:76:fc:2c:95:
0a:19:42:2d:29:a3:ab:59:80:87:6f:4f:9f:dc:9d:bc:05:83:
bb:7c:62:20:a5:54:16:ad:61:c5:d2:b0:10:63:6a:81:28:27:
db:be:26:66:1a:dd:3d:ea:90:86:c4:62:d7:65:c7:45:3b:05:
f1:53:1b:51:b8:4d:56:c8:f0:ed:55:87:e7:5c:dd:9b:ce:09:
d9:22:65:fa:54:84:bc:be:84:9d:5f:d0:f2:10:f0:2c:e1:6f:
c1:d5:9d:03:e2:d8:8e:15:8f:e6:ee:4a:c6:a2:6e:b6:a8:18:
8b:01:50:57:fc:0e:82:92:10:d8:b6:e0:58:d1:16:da:a9:de:
95:f6:be:bf:8e:b7:a2:91:33:52:e0:6d:aa:51:cf:0d:8b:47:
e8:3b:b3:48:86:a0:ec:ae:e6:04:e6:27:0b:e1:18:ee:02:5a:
1d:56:fa:14:fa:4f:eb:2b:48:18:d0:ea:61:65:33:78:5e:6e:
4a:4c:2e:9e:ea:b6:10:3d:4b:2b:3a:cc:1c:ef:dc:1b:49:16:
a2:33:b2:00:8f:5a:29:2a:2e:8f:ff:50:41:6b:2b:0d:93:3f:
ba:4c:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:37:02 2025 by rpki-client