Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/gg8zzgS55uq5P6kGkuaJFoKcCTA.roa
File: gg8zzgS55uq5P6kGkuaJFoKcCTA.roa (raw, json)
Hash identifier: nEDs7oqRrIVyofxdHlPaduwYU8FU0iwSUVYcN9fZIC8=
Subject key identifier: 82:0F:33:CE:04:B9:E6:EA:B9:3F:A9:06:92:E6:89:16:82:9C:09:30
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019482E3FB09BB0A270D45EC7BAF9192590F
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/gg8zzgS55uq5P6kGkuaJFoKcCTA.roa
Signing time: Mon 20 Jan 2025 08:46:06 +0000
ROA not before: Mon 20 Jan 2025 08:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 92.118.88.0/24 maxlen: 24
92.118.89.0/24 maxlen: 24
92.118.90.0/24 maxlen: 24
92.118.91.0/24 maxlen: 24
92.119.200.0/24 maxlen: 24
92.119.201.0/24 maxlen: 24
92.119.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:e3:fb:09:bb:0a:27:0d:45:ec:7b:af:91:92:59:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 20 08:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=820f33ce04b9e6eab93fa90692e68916829c0930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e5:b0:97:81:b3:bf:c3:8e:f1:54:24:6c:37:
93:64:2c:ea:1b:1f:9f:f3:13:da:f1:05:06:73:23:
c6:65:5d:a1:54:da:b6:d0:5a:62:5e:5e:ae:75:a1:
da:3d:50:51:f5:83:40:a6:39:91:d4:3a:1a:46:d6:
1b:cb:00:5c:f1:f8:2e:ed:27:66:cb:a5:55:7d:b9:
9c:d3:a3:b9:f4:48:77:ee:a1:a8:45:d8:e2:4d:b0:
9c:5b:39:2a:a5:ac:54:d4:06:34:4a:ac:59:50:da:
f7:c6:82:64:ca:4b:2c:f7:9e:f0:a5:c9:86:17:af:
f1:87:a1:59:87:c9:9f:60:af:52:75:71:e5:13:ae:
4d:e3:a0:c6:68:f8:77:de:da:ca:33:50:c5:83:f8:
55:36:c6:3b:f6:70:23:c1:dc:09:be:27:15:fd:9f:
b6:a7:10:0a:ab:57:24:69:d8:00:89:50:4e:d0:0c:
c1:31:a3:a7:bb:c5:56:af:3e:42:0e:29:20:6b:0a:
ac:a5:27:ae:e3:87:ab:e5:c4:c4:60:8c:39:09:1b:
1d:6d:28:f7:f8:d1:d6:43:ab:7d:d3:b6:ee:0b:b2:
2d:a0:70:20:49:7c:9b:c5:53:ed:a0:29:4a:4a:14:
b5:76:23:bb:68:de:17:00:25:6d:ff:cd:e7:89:61:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0F:33:CE:04:B9:E6:EA:B9:3F:A9:06:92:E6:89:16:82:9C:09:30
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/gg8zzgS55uq5P6kGkuaJFoKcCTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.88.0/22
92.119.200.0/23
92.119.203.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:6d:04:44:41:74:f4:c1:b9:50:88:b3:fa:fb:2e:37:f4:89:
d8:f7:0d:96:1d:72:c1:77:58:19:fd:14:7c:46:16:c2:41:36:
bc:3b:63:ae:5b:ef:34:d7:62:d6:14:4e:41:ad:7a:8f:4d:7b:
d3:6b:ec:9d:6e:5b:2e:7d:b7:df:5d:a2:e2:bd:8e:fc:fe:56:
56:25:4a:62:8e:ab:41:75:8b:ac:ec:01:18:cb:f8:ed:e8:d6:
7b:65:f4:47:bf:87:45:5c:4f:b3:a7:77:de:0c:df:f3:2d:10:
9b:71:1e:4f:f6:09:5a:d4:98:ad:54:1a:cc:61:c7:4f:d0:10:
3a:f0:da:be:40:db:12:20:ee:c5:ed:7f:14:91:3c:00:03:d5:
ed:ad:97:3a:05:18:c9:cf:5a:e6:45:63:25:3e:d5:f6:94:70:
b3:00:a1:0c:a1:8e:df:a7:d1:5e:9d:2e:03:2e:a5:fb:07:6a:
f4:05:9c:6d:97:2f:5a:57:e9:11:be:e2:e2:16:0b:36:60:11:
95:0e:f4:c9:ec:ce:48:7c:1c:87:0a:8f:36:51:48:66:ed:06:
f7:d3:bc:c5:fc:9c:a5:62:f2:35:06:3a:73:5c:62:f6:9d:37:
fb:71:65:4a:d4:9e:b2:ba:b5:9e:3a:16:a3:2f:c8:db:fa:f8:
14:38:ca:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:28:01 2025 by rpki-client