Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/S4GC9z8T1D4fMhH9pz6xtTzGJy8.roa
File: S4GC9z8T1D4fMhH9pz6xtTzGJy8.roa (raw, json)
Hash identifier: oDc/JvXHI28ccd9ZG6/Yr60N+FV54r1lVJyg24riv30=
Subject key identifier: 4B:81:82:F7:3F:13:D4:3E:1F:32:11:FD:A7:3E:B1:B5:3C:C6:27:2F
Certificate issuer: /CN=76b8ec733b9f994d5a858c5e555178e8ae8aa2ed
Certificate serial: 019423D73F53A41E8FB2499D82C0601E9D7D
Authority key identifier: 76:B8:EC:73:3B:9F:99:4D:5A:85:8C:5E:55:51:78:E8:AE:8A:A2:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/S4GC9z8T1D4fMhH9pz6xtTzGJy8.roa
Signing time: Wed 01 Jan 2025 21:48:16 +0000
ROA not before: Wed 01 Jan 2025 21:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201283
IP address blocks: 185.79.124.0/24 maxlen: 24
185.79.126.0/24 maxlen: 24
185.79.127.0/24 maxlen: 24
2a05:7380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft
rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3f:53:a4:1e:8f:b2:49:9d:82:c0:60:1e:9d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b8ec733b9f994d5a858c5e555178e8ae8aa2ed
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b8182f73f13d43e1f3211fda73eb1b53cc6272f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:f4:ac:5f:b4:94:2b:31:c0:a4:1f:51:e2:
0d:a9:db:7d:59:f0:47:58:c9:4a:45:49:5d:b9:59:
4c:fb:4b:ee:6a:70:0a:e7:38:e5:4d:f5:43:3d:9e:
0c:41:3d:48:b8:36:7c:dd:17:cf:f3:7b:02:99:7e:
51:93:74:bc:3b:32:13:e5:fc:ed:3a:22:da:d5:fa:
48:84:9e:0c:bf:04:08:1d:30:b5:c5:db:d6:96:b0:
81:21:99:c6:e4:a2:eb:0a:03:e2:45:78:38:7e:3d:
f2:9c:5f:3d:48:3f:27:52:94:33:5a:3d:f6:d8:6e:
30:04:ba:ae:ae:0b:99:c1:50:56:df:fc:f3:53:7a:
83:92:e9:ce:24:5a:0a:95:95:66:21:91:d0:12:34:
7e:b8:5c:3d:cc:5d:5e:67:64:e6:bd:15:19:bb:1b:
9f:e2:42:f1:cf:2f:bf:2f:e2:70:53:15:46:b0:1b:
c1:21:31:5a:65:ca:d2:c4:8b:dd:58:05:e3:0c:bf:
85:68:ab:e9:ac:8c:54:d3:a3:97:a0:a0:9f:ed:d4:
0d:eb:9b:4b:9d:30:1d:c6:94:95:ab:25:20:43:91:
ff:74:d2:6b:5b:cc:70:2d:1f:cc:4d:48:d4:99:80:
0a:24:60:e4:50:ef:69:27:34:4b:89:34:2e:51:00:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:81:82:F7:3F:13:D4:3E:1F:32:11:FD:A7:3E:B1:B5:3C:C6:27:2F
X509v3 Authority Key Identifier:
keyid:76:B8:EC:73:3B:9F:99:4D:5A:85:8C:5E:55:51:78:E8:AE:8A:A2:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/S4GC9z8T1D4fMhH9pz6xtTzGJy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.124.0/24
185.79.126.0/23
IPv6:
2a05:7380::/29
Signature Algorithm: sha256WithRSAEncryption
23:49:a0:7a:ae:a7:f1:df:c9:c6:d1:b3:f6:36:21:f4:eb:a5:
21:38:38:9a:75:44:cd:0d:c4:15:fb:1c:0a:dd:d5:d3:ae:9f:
ab:08:8b:6d:60:4c:c6:ed:94:8c:b7:f3:0c:25:cc:de:15:ec:
d7:05:8d:05:5d:e1:13:54:0a:6e:42:77:3d:49:61:fe:7c:c8:
88:e3:68:86:ce:0a:2b:ef:15:98:15:c9:5d:f1:fe:f8:2d:02:
a0:dd:f3:28:e2:2f:94:0e:fb:ae:99:e6:15:9b:78:49:39:a0:
f6:fc:29:2e:dc:2b:16:8d:97:a6:52:82:a2:bd:d9:ed:ef:62:
9f:b3:8c:11:21:93:28:36:61:33:1b:e4:7a:5d:18:b0:08:8f:
97:1e:78:65:43:71:b7:a3:04:05:f5:4b:08:8a:e8:d4:8e:1f:
fe:ce:43:a7:ab:77:00:64:5e:59:a7:96:2d:d0:fb:93:09:29:
6d:79:16:4d:74:0e:5e:1f:d7:84:95:ab:03:35:70:08:cc:fe:
a5:87:31:65:26:04:d5:2e:5d:b4:32:76:e2:8d:b8:1e:08:e0:
81:a3:fb:9c:19:63:9e:1e:d8:a8:cb:3d:a8:53:0a:af:93:37:
54:d5:05:14:1b:62:d1:be:9f:fb:e8:b7:94:3c:8e:7d:b1:71:
27:b1:30:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:29 2025 by rpki-client