Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/4AWGZqxgdDbuinb8PgzycPgjQHo.roa
File: 4AWGZqxgdDbuinb8PgzycPgjQHo.roa (raw, json)
Hash identifier: 0MUhlNn3UwdUKa27OAF15oWX5cYNcmG6DsLUO/PP0pE=
Subject key identifier: E0:05:86:66:AC:60:74:36:EE:8A:76:FC:3E:0C:F2:70:F8:23:40:7A
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019420D5F44A35E1CBEF3C9F7956564E2F4E
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/4AWGZqxgdDbuinb8PgzycPgjQHo.roa
Signing time: Wed 01 Jan 2025 07:48:00 +0000
ROA not before: Wed 01 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199159
IP address blocks: 217.146.7.0/24 maxlen: 24
2a05:8900:36::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f4:4a:35:e1:cb:ef:3c:9f:79:56:56:4e:2f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0058666ac607436ee8a76fc3e0cf270f823407a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:2f:90:d3:84:c2:06:bd:a9:18:46:3d:d0:
35:a3:fa:ee:f7:3e:b2:63:ef:cf:5f:9f:f8:4d:d3:
38:37:fb:81:a5:b3:e5:f1:0d:e7:e1:72:95:4c:fe:
f1:04:3d:5b:ad:db:1f:b1:85:f9:cd:51:17:be:bb:
f9:db:5d:3d:2c:91:b0:10:0d:de:ce:3c:6c:bb:ba:
d0:d2:0d:a4:ad:43:00:5b:38:25:3d:1e:4f:fd:3f:
54:c6:2f:ab:42:db:2f:75:fc:7c:40:07:ce:e9:d3:
ce:72:ce:a7:80:e1:dc:16:d2:20:e9:1b:ca:87:61:
59:4c:3c:42:ed:aa:a4:29:f5:35:bd:0c:ec:6e:ac:
c1:03:21:37:9f:4b:ac:eb:9e:89:04:ec:02:d4:f2:
75:62:00:5c:46:a2:60:01:47:01:78:24:80:14:71:
df:4d:ce:a5:d0:b3:f1:6d:cc:b4:16:23:d0:96:c6:
f3:8a:cf:c1:29:53:8b:89:f3:cc:23:3e:cb:b8:81:
26:be:ef:7a:14:84:7f:6f:a0:ee:b0:78:80:25:f2:
85:ec:16:62:b4:bf:21:22:e9:5b:14:a1:4d:05:36:
14:03:61:e9:b6:14:1e:54:1c:89:f5:91:d2:da:f2:
85:be:82:61:37:a1:67:7c:45:da:21:d4:e7:bc:71:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:05:86:66:AC:60:74:36:EE:8A:76:FC:3E:0C:F2:70:F8:23:40:7A
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/4AWGZqxgdDbuinb8PgzycPgjQHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.146.7.0/24
IPv6:
2a05:8900:36::/48
Signature Algorithm: sha256WithRSAEncryption
b9:ba:4c:7f:46:73:49:38:c2:13:24:13:9a:c5:b7:68:66:f6:
59:3a:86:5f:20:9e:45:00:6d:a8:38:dd:09:eb:b7:6d:2e:3c:
68:d2:80:6f:ff:35:96:61:d9:49:56:6b:21:b6:01:c9:cd:f9:
de:87:a7:67:eb:e6:dc:af:34:6b:c4:ed:52:23:7e:a5:e0:09:
0b:c0:5b:91:26:17:9c:de:49:1b:72:7d:24:a7:cd:a6:60:47:
a4:3f:ce:0b:47:16:f5:b5:28:07:6a:04:78:43:b7:ae:39:e2:
7f:a7:72:75:19:23:4f:72:57:24:d2:ca:0c:85:03:da:a8:0e:
44:9f:07:b0:34:9b:95:0f:2d:54:c1:20:58:3c:6f:87:9b:f9:
7b:0b:24:32:46:57:e8:7d:40:eb:05:36:27:69:f4:60:d6:c1:
82:71:d5:43:f5:11:c7:37:61:c2:cd:86:78:ad:1e:23:e6:09:
e5:91:e0:71:ba:e1:22:e3:ed:cb:3e:7d:fd:dd:b2:14:1c:a0:
38:ec:7e:7f:5e:8c:7b:17:af:10:79:15:48:fb:5b:ff:e1:3f:
7e:77:cd:80:6f:8e:97:dc:29:e1:dd:fa:e9:cb:31:47:58:6a:
19:c0:a2:1e:f9:a5:1a:b6:9e:e7:e0:5e:da:f8:24:7d:73:37:
d5:6f:b2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:01:04 2025 by rpki-client