Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/g4273jNCglnFYa2BSwQJwPQNW7A.roa
File: g4273jNCglnFYa2BSwQJwPQNW7A.roa (raw, json)
Hash identifier: 0Pnqi0FI2lrrGJ9xypqAaxS0F/dUunJ0B8RsQqnOSHA=
Subject key identifier: 83:8D:BB:DE:33:42:82:59:C5:61:AD:81:4B:04:09:C0:F4:0D:5B:B0
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BF27BFF393B220EEAACFD1D75339B
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/g4273jNCglnFYa2BSwQJwPQNW7A.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205598
IP address blocks: 188.114.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f2:7b:ff:39:3b:22:0e:ea:ac:fd:1d:75:33:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=838dbbde33428259c561ad814b0409c0f40d5bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4a:fd:64:b3:7a:4f:b7:ff:e0:08:f3:c8:b6:
ad:e5:5c:32:2f:93:45:3e:57:24:18:91:65:22:b2:
c8:92:a4:c4:b4:29:e3:a6:64:62:30:fe:5c:93:c1:
e1:03:8e:a6:93:30:e8:a2:c9:fa:24:82:bb:6e:cd:
f2:45:3c:ac:e1:e4:b1:72:a6:ce:0c:60:11:92:c3:
82:87:e1:69:be:41:ab:b9:7c:c2:11:d2:24:21:1f:
33:e7:c4:3f:d4:a4:14:16:ce:99:4a:6a:7e:69:91:
28:a7:c0:d7:0f:06:7f:7d:f7:37:43:b9:73:d8:b9:
65:cc:ff:24:f4:19:65:71:f8:76:ba:cd:00:f5:e7:
cc:fa:e7:57:f0:06:82:e1:5b:d3:04:7c:b4:13:f3:
f6:99:80:a8:22:50:7c:77:14:ec:f4:3a:09:bd:d9:
04:18:1c:d7:93:2d:de:d5:3b:04:db:48:d1:84:88:
39:a7:3e:b3:e7:ae:88:50:2e:1b:d0:03:ca:3c:e4:
4d:3d:a0:e3:f2:e0:32:ca:18:f8:3b:66:ca:24:82:
f8:73:88:a7:fe:4f:07:d7:2a:d4:f7:b6:39:6e:14:
04:19:8a:87:1a:79:86:22:04:f3:5f:3d:86:6b:76:
3c:5e:c4:c8:58:be:9e:56:b8:8f:0b:54:ba:e4:ad:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8D:BB:DE:33:42:82:59:C5:61:AD:81:4B:04:09:C0:F4:0D:5B:B0
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/g4273jNCglnFYa2BSwQJwPQNW7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.87.0/24
Signature Algorithm: sha256WithRSAEncryption
50:88:20:eb:b1:92:f7:81:94:39:61:66:16:c0:d4:5d:cd:b9:
fe:b1:7d:d7:43:c6:df:42:18:89:47:b0:d9:88:8e:7a:38:ae:
ed:54:ad:e1:86:4b:dd:88:79:c3:41:3b:96:6e:fa:dd:4e:fb:
fe:43:49:ff:f1:d5:62:fd:4b:95:f2:d2:55:c9:fd:51:fd:04:
9c:17:1f:c9:4e:8a:e0:45:3d:5a:ff:3f:29:ab:a8:bb:44:34:
a5:b5:01:e9:37:f9:4f:12:77:ab:84:c1:8e:67:b9:13:d1:bc:
eb:77:db:d3:99:df:95:52:2d:56:0a:e3:c4:b5:47:4d:e2:59:
50:be:28:49:41:41:34:57:54:4c:89:f6:d4:3b:ce:08:33:db:
6c:65:65:e3:41:3e:c4:00:1e:87:4f:23:3d:ef:3e:d1:93:b9:
b4:32:f4:9e:b9:7c:56:34:f6:f4:f7:62:f4:b1:07:35:d3:fb:
45:df:ee:86:fe:38:5d:15:6f:fe:04:d4:61:99:20:cc:ee:d6:
2e:cc:f6:f7:e7:75:c5:12:c8:7d:f8:fb:8c:f4:67:68:07:41:
c8:fb:42:f0:43:bb:cc:51:1c:dd:70:82:d3:df:d1:97:d1:53:
9c:a6:7c:13:f4:b9:f3:7b:5c:b5:d9:2e:e9:42:c2:db:ac:22:
d9:5a:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:34 2025 by rpki-client