Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/4WjbSjU6xiUtGmjrdhcmgTrCWEs.roa
File: 4WjbSjU6xiUtGmjrdhcmgTrCWEs.roa (raw, json)
Hash identifier: Op1Cd9ecUNfem1iITIQLJWs7rUVbhCcVd6VepaT6kFU=
Subject key identifier: E1:68:DB:4A:35:3A:C6:25:2D:1A:68:EB:76:17:26:81:3A:C2:58:4B
Certificate issuer: /CN=d38579e4c7da01df0465186236e9af27eb7312ed
Certificate serial: 0195DE4AF7C3F6D38DFAC0798331B2F27D55
Authority key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/4WjbSjU6xiUtGmjrdhcmgTrCWEs.roa
Signing time: Fri 28 Mar 2025 19:46:49 +0000
ROA not before: Fri 28 Mar 2025 19:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29469
IP address blocks: 194.9.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:de:4a:f7:c3:f6:d3:8d:fa:c0:79:83:31:b2:f2:7d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38579e4c7da01df0465186236e9af27eb7312ed
Validity
Not Before: Mar 28 19:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e168db4a353ac6252d1a68eb761726813ac2584b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:2a:ea:f7:c8:4e:9d:e3:19:38:c8:f7:31:
d2:a6:9b:a4:10:93:11:5b:fb:52:4b:11:9b:8b:57:
1a:1d:1e:a2:66:c7:15:86:56:58:52:be:a6:ea:26:
65:7c:26:82:09:49:9c:d9:23:24:cd:99:44:94:a2:
e3:7d:96:fe:ef:c1:5f:b6:4a:7a:aa:69:0e:d2:74:
bd:4d:13:2f:fb:44:6c:99:2e:04:67:71:8b:e9:3e:
90:4d:82:19:ac:52:1d:aa:22:3a:ad:95:17:39:19:
51:91:6f:ac:ec:7a:71:6a:58:da:48:05:5a:bd:8e:
8c:95:74:59:25:82:bc:99:c7:78:00:ad:51:94:3f:
b8:df:a8:3e:be:a3:de:d3:15:a4:5c:3e:92:32:20:
55:77:5f:e2:c1:ad:92:91:08:1c:c3:fe:5b:f3:74:
67:b8:ba:d8:14:ba:9a:5e:e5:f1:79:1d:3d:e9:bf:
7b:f1:6a:7c:ba:e1:74:1f:7b:b2:43:ae:c3:98:d8:
9b:b3:4b:15:2f:fe:d3:38:9f:11:e9:77:2b:e8:50:
6c:9e:26:f8:b3:7a:fe:1b:f9:e6:c8:9a:c8:10:5e:
2a:20:8d:36:d1:62:01:73:a6:f2:d2:16:56:5e:b2:
af:e4:97:ce:eb:44:c4:20:87:22:3c:c2:85:db:40:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:68:DB:4A:35:3A:C6:25:2D:1A:68:EB:76:17:26:81:3A:C2:58:4B
X509v3 Authority Key Identifier:
keyid:D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/4WjbSjU6xiUtGmjrdhcmgTrCWEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.70.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:3b:85:a5:89:96:0b:bf:bc:a5:b6:39:d9:38:e2:ed:8b:a2:
92:01:95:aa:91:ae:b3:ea:82:b8:b5:65:82:d8:4d:07:f3:86:
f4:f8:d4:2a:4c:e7:1a:35:79:10:4c:27:81:d3:f8:fa:75:97:
f6:84:94:20:93:74:fe:85:e5:44:fb:04:6d:b3:9c:a7:28:52:
16:6f:68:78:66:bd:e8:e4:6a:ad:35:5d:90:9a:91:97:1c:ed:
9a:1f:f8:a2:5d:36:ce:3f:46:2f:88:a1:57:58:ce:79:5c:4b:
8b:b8:d3:b0:25:06:a7:3b:cf:e8:b7:d5:34:22:f7:d7:51:93:
13:02:55:94:e0:b9:6c:f1:ef:9c:12:bd:3f:37:fe:89:0d:6b:
33:53:d4:32:01:e7:e9:31:03:4a:ca:5b:15:8a:bb:3b:18:33:
75:c5:34:9f:a9:89:27:d2:ff:c2:83:2d:64:fc:21:dd:d7:1a:
78:c9:03:0f:fd:a2:fc:ba:c0:5d:73:68:b8:fb:f6:17:78:e6:
9f:b0:df:a0:4c:27:70:fb:48:3d:96:8b:a1:6f:ca:af:38:b1:
5a:9a:46:01:dd:6e:65:ab:45:b6:dd:e8:1b:a3:25:8c:30:13:
bb:65:7c:eb:e1:49:02:77:87:2e:9e:49:a1:d2:ac:c0:f7:39:
63:81:2b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:01 2025 by rpki-client