Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/goyOFyNzCSnjNoSGUslWBJblZKU.roa
File: goyOFyNzCSnjNoSGUslWBJblZKU.roa (raw, json)
Hash identifier: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=
Subject key identifier: 82:8C:8E:17:23:73:09:29:E3:36:84:86:52:C9:56:04:96:E5:64:A5
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 0195D42688CDEB24590F20EEAEFE71D7F984
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/goyOFyNzCSnjNoSGUslWBJblZKU.roa
Signing time: Wed 26 Mar 2025 20:30:49 +0000
ROA not before: Wed 26 Mar 2025 20:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60894
IP address blocks: 203.34.219.0/24 maxlen: 24
2001:67c:26c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:26:88:cd:eb:24:59:0f:20:ee:ae:fe:71:d7:f9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Mar 26 20:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=828c8e1723730929e336848652c9560496e564a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:9c:38:3f:e5:c9:76:3e:bd:6f:f2:cc:70:
dd:93:06:0f:47:ef:1e:54:2c:c8:76:95:1f:df:cf:
36:92:92:6e:48:cd:3e:11:1b:19:1a:6c:10:ff:ad:
d1:4a:2d:f5:cb:5a:26:79:bd:61:29:53:37:4a:a8:
4d:b3:8b:5d:f6:d0:4e:7e:03:62:f4:63:6a:91:f6:
b6:03:64:e1:2d:65:46:f4:cf:92:0b:a5:a8:27:f3:
f1:7a:b3:cc:37:f4:46:00:2d:46:a0:a0:3f:e5:5c:
21:fa:e1:90:24:64:89:af:4f:1f:e0:0f:e8:b6:cc:
15:9c:6f:ea:00:98:0d:13:bd:92:d0:d2:4c:80:6d:
7f:eb:de:6f:03:a5:3b:ee:9b:a8:90:f2:29:21:b1:
95:2c:c6:76:e3:c6:ec:5e:0b:54:fe:ed:a4:db:99:
53:e3:67:7f:fe:07:ea:31:4c:44:e0:6a:ac:78:cb:
63:3d:18:16:c7:1e:d2:02:3d:11:4c:a2:b3:de:70:
0f:3b:c9:57:e5:88:67:33:b4:29:0e:23:2f:82:1b:
e0:0f:ef:4c:c5:3c:eb:71:6c:8c:98:87:f6:2e:ee:
45:b0:f3:20:76:79:4c:75:c4:8e:37:a8:e9:8d:cf:
3b:76:33:d6:bc:e7:ca:29:e9:74:54:d6:2a:59:f8:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8C:8E:17:23:73:09:29:E3:36:84:86:52:C9:56:04:96:E5:64:A5
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/goyOFyNzCSnjNoSGUslWBJblZKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.34.219.0/24
IPv6:
2001:67c:26c4::/48
Signature Algorithm: sha256WithRSAEncryption
a8:f1:31:30:ca:d4:ba:f8:7f:56:72:f1:93:6c:7e:b3:7c:57:
7c:54:73:d9:14:ff:c5:08:1f:65:9b:40:2b:38:d3:fe:43:12:
a6:70:65:15:7d:ad:3e:bd:9a:86:60:eb:fa:43:ad:27:08:a8:
d6:a1:8c:36:a2:5f:07:d4:ad:f1:db:05:d9:3b:7d:e4:e0:fb:
41:4b:5b:fe:b8:fc:0e:56:e9:1a:d1:56:09:0e:ab:96:22:2c:
30:4c:c2:6c:71:5f:e3:d7:7c:d9:3e:48:b9:ec:3b:21:e4:d6:
29:d9:35:00:50:05:c7:7a:35:17:6c:de:95:54:24:a2:1b:79:
3c:c9:f2:62:70:cf:cd:5a:80:be:34:ed:9b:99:27:85:50:84:
8c:0a:8a:15:57:ca:b7:c8:2b:c8:e2:76:47:23:89:07:70:5f:
d6:ee:fe:2e:39:3d:9b:cc:9e:41:3c:47:1f:4e:3d:36:0a:0c:
4b:7c:4d:3b:33:ab:48:8b:bf:03:10:9a:aa:dc:98:b3:65:dc:
5f:bd:05:da:2a:91:d5:a9:94:04:23:8a:a1:1f:cd:27:31:1e:
02:bc:08:1f:71:2c:9d:b4:16:8c:6e:79:f5:a3:74:79:ce:31:
0c:23:a6:4b:a0:af:61:18:9a:6e:89:a0:66:28:8a:72:53:7e:
ce:e0:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:56 2025 by rpki-client