Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/g8YJODXro9CO2yF2pYsONdf1vAo.roa
File: g8YJODXro9CO2yF2pYsONdf1vAo.roa (raw, json)
Hash identifier: DVZc7qoNEnBIJo34WraiiSuO/cbkugYmJ/2i0aSQTwI=
Subject key identifier: 83:C6:09:38:35:EB:A3:D0:8E:DB:21:76:A5:8B:0E:35:D7:F5:BC:0A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826BC34A671FCDC260488F72D4825E6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/g8YJODXro9CO2yF2pYsONdf1vAo.roa
Signing time: Thu 02 Jan 2025 17:53:34 +0000
ROA not before: Thu 02 Jan 2025 17:53:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142036
IP address blocks: 84.32.44.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:bc:34:a6:71:fc:dc:26:04:88:f7:2d:48:25:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83c6093835eba3d08edb2176a58b0e35d7f5bc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:e9:9d:3d:82:99:92:d4:c4:8a:33:24:60:
fc:e0:a2:de:9e:2e:b0:aa:a2:6c:f5:6e:d4:00:10:
cc:84:6e:35:6e:a0:9a:8a:c2:95:c2:60:2b:d0:39:
31:16:3f:3a:fc:57:50:8e:f7:12:18:e4:c5:64:6e:
1b:a3:12:c8:3e:d8:c6:a2:33:6c:52:54:ca:ed:26:
b7:3d:22:32:66:49:0f:8e:7a:69:3d:92:bf:37:2c:
34:f3:85:b5:ee:87:1f:ec:dd:01:30:22:be:2a:6d:
48:9c:49:e8:c8:37:af:14:0b:af:c6:a3:31:45:f3:
2d:51:c2:c5:90:87:78:4d:73:3f:21:79:00:61:1e:
8c:d0:c5:12:7b:b6:40:c7:9f:21:07:6c:6e:c1:20:
57:52:25:31:02:af:96:3a:d6:95:8a:86:ef:e3:bf:
c2:c8:9d:81:92:6d:fa:67:de:a7:8b:da:49:d7:d8:
7d:95:49:3b:df:66:62:16:4a:c1:b7:7c:fd:06:a1:
0b:fc:fa:ed:6d:ef:58:47:56:af:12:0b:3c:b0:57:
e4:29:e0:b4:61:8f:51:03:5d:19:50:ae:f8:be:f1:
13:53:34:31:cc:a7:a2:a4:fe:2f:40:11:2c:d7:55:
e7:90:53:65:1d:5f:e7:2b:a5:82:ed:28:5b:d6:25:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:09:38:35:EB:A3:D0:8E:DB:21:76:A5:8B:0E:35:D7:F5:BC:0A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/g8YJODXro9CO2yF2pYsONdf1vAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.44.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:7c:ba:39:07:9a:ee:bc:43:a7:0d:c8:74:f5:5f:1b:4a:af:
14:5c:6d:8a:b5:f1:c7:ac:93:4e:e3:04:15:c7:b5:8c:54:f0:
49:5c:02:b0:6a:7e:74:b5:b5:17:70:3a:ad:39:a6:7b:b4:8a:
ff:ef:f3:27:02:d3:7e:b9:55:46:60:23:67:ee:7f:cf:5e:36:
ac:c5:09:1b:83:17:a4:93:52:72:cc:78:d4:7b:73:5d:7b:38:
2f:cc:9f:60:6f:98:46:bb:5a:54:a9:fd:c9:4a:63:57:0f:1c:
b0:fe:2e:43:85:0d:ee:71:82:df:c3:57:a5:72:22:f2:6e:1f:
4a:e3:c6:ce:75:76:8d:9b:af:40:8a:64:d2:a7:fe:19:3c:9d:
db:4c:e5:21:c4:cb:8c:9b:cc:8b:b5:0d:e4:60:b0:24:18:79:
3d:a5:95:2e:7a:90:63:5d:e6:6c:dd:9c:3a:bc:ee:36:0d:c8:
94:74:0e:7a:e8:a7:fe:15:d3:dd:71:d2:83:24:d4:28:69:06:
cc:f0:a5:e5:50:b2:dd:96:df:5d:e5:e9:a4:57:b5:25:d4:0e:
d7:bd:7d:5f:a0:51:43:83:de:48:e8:67:67:7a:35:41:b0:73:
fb:4e:7d:30:ff:0e:66:dc:07:da:8c:ad:8a:27:42:78:5a:ea:
c1:e0:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:08 2025 by rpki-client