Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/AHTg9VmGDmboYzdnURPHEfscAhc.roa
File: AHTg9VmGDmboYzdnURPHEfscAhc.roa (raw, json)
Hash identifier: EJAnurSy7dL6/EOxEWzPx0E5tdB8mhFHSs+OUGdmNJE=
Subject key identifier: 00:74:E0:F5:59:86:0E:66:E8:63:37:67:51:13:C7:11:FB:1C:02:17
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 01941FFA69338F50434A0559C4D0839767F1
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/AHTg9VmGDmboYzdnURPHEfscAhc.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211250
IP address blocks: 195.64.229.0/24 maxlen: 24
195.64.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:69:33:8f:50:43:4a:05:59:c4:d0:83:97:67:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0074e0f559860e66e86337675113c711fb1c0217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:6e:1c:c9:3a:e3:21:27:64:ed:5f:b0:7d:
67:2f:54:22:6c:f6:80:ba:29:7e:27:3c:25:b1:e9:
1a:ce:3b:94:dc:b6:fe:c1:70:aa:5f:36:84:8b:4d:
fa:f9:e8:03:35:7a:61:31:fc:63:5d:b7:ef:0b:b5:
e4:cc:c2:6b:b3:ad:47:5a:21:48:cf:28:42:af:79:
dd:e3:c8:4a:c4:b6:c4:fb:11:21:0a:89:e2:3e:f9:
58:a7:e5:07:b1:67:49:c6:fc:e6:55:f7:59:69:6c:
7c:1f:d2:19:5d:f9:30:11:8f:fc:a4:0d:97:7f:cd:
3d:b8:0a:01:6d:01:c2:57:09:e3:94:9d:4b:18:b0:
10:a4:5e:92:21:4c:66:33:59:a8:97:59:b3:7d:cb:
48:7f:34:7b:d9:a3:eb:1e:e6:bb:0f:e8:dd:79:fd:
1c:a7:fd:18:66:4d:7e:b1:82:ec:98:15:2e:7a:dd:
18:d5:cf:93:8c:e5:ee:43:61:d4:18:d3:34:87:36:
56:c9:0a:48:37:7a:ca:85:7a:60:14:66:1d:60:91:
5a:0e:d2:eb:1a:05:80:5e:be:2f:f7:bd:8a:34:19:
14:15:07:90:80:79:9f:72:e0:3f:2b:84:10:6a:08:
cd:6d:a0:eb:97:0f:88:8a:cd:66:7c:23:35:fa:33:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:74:E0:F5:59:86:0E:66:E8:63:37:67:51:13:C7:11:FB:1C:02:17
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/AHTg9VmGDmboYzdnURPHEfscAhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.229.0/24
195.64.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1d:dc:13:d6:2e:40:ed:5c:be:b3:98:29:15:80:02:7d:49:
2d:1c:9c:c0:37:8f:9e:ec:f8:4f:14:a0:b7:57:b8:f5:fd:97:
73:4d:11:0a:a6:91:26:bc:b8:ab:9d:2d:f7:86:88:0e:51:64:
7e:4f:fa:98:51:e7:89:95:51:92:0f:88:3f:bd:5b:d7:c9:90:
1f:d5:78:b7:39:88:03:b6:0c:ec:70:62:20:44:00:27:e7:67:
d6:52:21:82:ee:61:50:96:27:0c:31:f1:ea:ad:a7:df:e6:fa:
85:c9:b1:9a:60:85:25:58:df:ba:01:15:33:16:6e:34:34:85:
cd:3d:58:b9:2a:93:e3:51:e8:65:00:c1:e1:43:f8:e4:88:89:
31:11:a3:23:36:06:0d:8e:87:c6:65:cc:42:83:bd:c8:b4:01:
31:8e:0a:9b:0b:d7:5a:3a:cb:b0:fe:78:d7:c0:7e:c0:43:43:
8e:b8:1b:29:d2:fd:24:14:60:88:4d:26:c5:b2:d2:da:d3:c5:
86:93:a8:10:69:3f:6f:eb:18:38:a6:30:1a:78:80:aa:ab:d7:
5b:d2:69:8c:f7:ba:e4:92:12:b3:9c:5a:83:82:2e:f0:fe:d8:
44:58:71:3b:3f:15:f6:20:e1:c5:65:d8:66:84:00:e6:92:5d:
69:9b:74:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:46:55 2025 by rpki-client