Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Glo14qtmpC8ODrlVFlRrulfG4cM.roa
File: Glo14qtmpC8ODrlVFlRrulfG4cM.roa (raw, json)
Hash identifier: BKxHar9ze5I0E4fvJLTZIW70QwrkOMbxI3mUeAspQOs=
Subject key identifier: 1A:5A:35:E2:AB:66:A4:2F:0E:0E:B9:55:16:54:6B:BA:57:C6:E1:C3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01946734F6379EE571A80D3DF33F956E7F4D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Glo14qtmpC8ODrlVFlRrulfG4cM.roa
Signing time: Tue 14 Jan 2025 23:45:11 +0000
ROA not before: Tue 14 Jan 2025 23:45:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203576
IP address blocks: 78.135.89.0/24 maxlen: 24
78.135.110.0/24 maxlen: 24
188.132.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:67:34:f6:37:9e:e5:71:a8:0d:3d:f3:3f:95:6e:7f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 14 23:45:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a5a35e2ab66a42f0e0eb95516546bba57c6e1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:bd:83:dd:a4:2f:4a:c9:76:46:d9:42:d8:
35:58:3d:99:72:0d:40:ac:4f:9f:2d:67:a0:36:00:
f5:37:71:fa:d1:2a:f3:90:61:42:f6:b4:c7:c2:d2:
fa:6d:3d:8c:2d:f8:af:ae:41:bb:c2:d8:8a:e2:85:
86:28:db:20:b9:10:fe:83:2a:1a:85:02:06:c0:e3:
03:63:af:ff:f0:1b:09:a4:5a:2e:16:c5:90:d2:1f:
8c:2e:ce:92:29:71:3d:15:8f:90:0b:22:84:5b:e8:
d4:3a:99:5e:cb:4b:4d:7c:4d:0e:c3:7b:4e:5c:e1:
66:e8:8e:51:cb:e3:76:30:df:ff:6e:6e:52:9e:4f:
59:05:b1:c8:fb:03:9c:94:1b:b1:59:93:1f:49:6d:
76:58:4d:2b:40:cd:76:3a:49:73:5f:8f:d7:c2:72:
f9:47:24:c1:dd:1f:78:bc:db:bf:47:88:b2:8d:d2:
ae:0a:f0:89:79:4d:c6:15:e9:96:14:8c:f3:3d:91:
18:d0:3f:55:ae:bd:f7:53:10:3a:6b:fb:92:c0:9f:
d9:8b:54:37:1f:5c:b5:fb:1c:95:e5:0f:88:f8:94:
68:db:72:79:c8:90:1e:87:1f:ba:60:45:fb:33:09:
8c:7b:2e:37:ba:bc:8f:8b:20:8f:bb:ef:17:7d:84:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5A:35:E2:AB:66:A4:2F:0E:0E:B9:55:16:54:6B:BA:57:C6:E1:C3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Glo14qtmpC8ODrlVFlRrulfG4cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.89.0/24
78.135.110.0/24
188.132.196.0/24
Signature Algorithm: sha256WithRSAEncryption
23:2e:fd:38:d2:5e:82:f8:f8:80:44:f5:dd:5a:2f:2e:c4:eb:
e9:76:c6:d9:e6:e7:7f:d5:46:a2:6e:5f:7a:21:46:e7:25:c8:
15:33:e4:20:01:11:d3:7c:35:ab:75:d6:7e:af:2e:26:a3:6f:
68:c0:ab:2d:65:18:2d:80:ff:52:da:5f:c2:8f:1c:60:a3:fd:
2c:47:f1:d5:89:55:e5:d3:4e:c1:5c:5d:6d:34:6f:e3:38:67:
95:bd:b6:bd:9c:4a:20:d5:69:cc:4a:bf:96:5d:a9:db:33:e0:
1a:6f:d3:1a:d1:e0:33:5d:9d:40:f3:5f:cd:72:5e:83:4b:9f:
67:6d:cc:e6:21:e7:b0:01:83:e1:f6:51:5e:c7:27:29:69:7e:
a5:1d:21:6e:fc:9a:76:dd:70:8e:b7:79:c2:87:84:08:1a:91:
f8:43:df:24:91:fc:e0:05:cf:43:8a:cd:62:bd:3b:b6:64:fa:
f8:5f:bd:7e:0e:dc:62:a5:7b:1f:c0:95:5a:58:a7:c8:9a:b2:
69:19:21:7e:af:ac:80:b6:97:2e:2b:17:1b:6e:65:e3:9e:9e:
a2:a2:bf:88:09:34:c7:9e:88:2f:67:4d:6d:1f:84:6e:97:6e:
95:31:2a:a7:e2:0b:8c:27:e1:c0:00:47:79:45:c1:41:a5:27:
08:a2:b9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:09 2025 by rpki-client