Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gZ6U3YoxqgYHSJfIhUc6jKO7Xw0.roa
File: gZ6U3YoxqgYHSJfIhUc6jKO7Xw0.roa (raw, json)
Hash identifier: k5TKeSWJieXgSWKbI8nBfvdkGeRcvDHDasslA7hrn+A=
Subject key identifier: 81:9E:94:DD:8A:31:AA:06:07:48:97:C8:85:47:3A:8C:A3:BB:5F:0D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194214434501FF840DAEA5FFA6DE2C34716
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gZ6U3YoxqgYHSJfIhUc6jKO7Xw0.roa
Signing time: Wed 01 Jan 2025 09:48:25 +0000
ROA not before: Wed 01 Jan 2025 09:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216022
IP address blocks: 82.152.249.0/24 maxlen: 24
185.101.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:34:50:1f:f8:40:da:ea:5f:fa:6d:e2:c3:47:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=819e94dd8a31aa06074897c885473a8ca3bb5f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:30:17:c9:2a:ad:74:2b:4b:9d:f1:6d:0e:
ac:d8:03:12:2b:42:db:b8:d1:74:e7:51:80:4b:43:
77:b5:f0:f5:b1:3e:7f:fe:49:ff:8c:d1:f6:3c:63:
0b:0a:92:39:69:0e:f2:ee:5d:13:83:d2:69:a4:05:
ac:75:e2:32:38:22:45:8e:63:d6:8c:cd:4e:2e:26:
14:68:5b:1a:41:13:9a:bd:99:75:bc:e0:cc:a4:24:
0a:aa:19:cc:19:0a:e1:88:3d:6c:f9:27:6b:49:25:
21:ff:4d:f7:d0:40:d7:48:8d:ab:fb:5b:43:db:ac:
cf:fd:27:2c:96:07:eb:5c:79:e9:c8:a2:cf:39:4b:
bc:38:c7:63:a0:b6:2b:3b:2f:b2:32:8f:ea:4f:90:
b4:33:63:cc:b8:0a:fc:83:f4:b5:c7:90:dd:5a:71:
71:9c:60:43:b0:3e:19:b4:75:6b:59:9a:b8:f9:b7:
23:d0:e3:70:8d:71:b9:30:e3:d7:b6:a7:0c:34:28:
a3:f8:31:86:65:47:39:ae:5e:db:7f:31:8f:6b:61:
6c:89:ec:3a:58:3c:36:aa:0a:00:e1:94:fc:81:ac:
f3:1f:9d:4a:23:e1:53:40:d4:8f:ee:bb:03:93:9c:
17:74:ea:e8:da:ba:59:37:bc:e3:60:40:91:bf:30:
e7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9E:94:DD:8A:31:AA:06:07:48:97:C8:85:47:3A:8C:A3:BB:5F:0D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gZ6U3YoxqgYHSJfIhUc6jKO7Xw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.249.0/24
185.101.47.0/24
Signature Algorithm: sha256WithRSAEncryption
78:6b:1a:ea:d6:d2:09:fb:b8:3a:df:d9:62:42:6f:85:8f:9f:
29:c8:aa:d0:8d:ec:b0:19:e1:eb:89:7c:ed:c6:0a:45:d3:40:
f1:00:e3:42:3f:78:91:b1:74:35:d3:8d:3a:f5:ef:ed:2f:ca:
ca:37:64:28:9d:50:da:6b:12:2e:7a:8a:e5:55:49:f4:5d:fe:
22:18:55:e0:6e:eb:22:7b:67:36:72:d4:fe:40:af:d9:0e:1b:
56:ac:e9:3f:cd:bd:09:7a:33:06:8a:15:66:8e:80:e2:80:91:
d7:77:54:f5:f2:17:b6:83:c3:dd:b3:df:d1:59:22:20:17:14:
85:97:1b:4f:81:e2:3d:47:c8:78:ac:9d:65:c6:d2:ac:7d:fc:
d5:aa:12:6c:d1:c3:24:f7:94:45:8b:62:1f:ff:f3:cc:7e:e9:
d2:f1:28:49:3c:f3:8e:67:20:10:ba:5e:99:e1:13:1b:8c:aa:
f3:da:f8:58:de:57:69:04:4a:9c:0d:b4:57:29:15:7f:6f:16:
3a:3c:27:ff:66:18:b9:00:c0:ae:81:3d:4e:9c:ac:b0:78:e1:
2e:1a:fd:5a:44:2c:b5:38:f7:f8:e0:89:0c:af:62:51:51:97:
63:3f:7f:b9:fe:68:10:1d:59:cc:7b:13:93:31:73:51:d4:17:
4d:ad:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:40:00 2025 by rpki-client