Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/GiEbCLb_ntJE9nkXIpHTVK3yT6g.roa
File: GiEbCLb_ntJE9nkXIpHTVK3yT6g.roa (raw, json)
Hash identifier: UkvxRNX70aIvJXPzKAnXBIMmTpv2f/Y+Dlu3mnma0Ac=
Subject key identifier: 1A:21:1B:08:B6:FF:9E:D2:44:F6:79:17:22:91:D3:54:AD:F2:4F:A8
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1DD6AC79D013E2B515C5713CC51D4
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/GiEbCLb_ntJE9nkXIpHTVK3yT6g.roa
Signing time: Wed 01 Jan 2025 11:48:12 +0000
ROA not before: Wed 01 Jan 2025 11:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202738
IP address blocks: 194.88.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:dd:6a:c7:9d:01:3e:2b:51:5c:57:13:cc:51:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a211b08b6ff9ed244f679172291d354adf24fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0a:72:c9:bb:6b:23:93:d7:26:91:d5:a1:4b:
f7:05:1c:ef:bd:b3:7b:9d:8d:5e:97:23:72:3c:1c:
58:3e:e8:1e:c5:81:c4:97:11:6b:92:38:78:2c:86:
08:50:2f:78:96:d1:30:8b:3f:70:bb:79:55:93:94:
d1:ef:9a:ee:67:cb:bb:b2:18:0b:78:d7:f6:3f:dd:
ce:14:08:06:51:55:e0:e3:ab:36:17:05:5b:43:a5:
03:05:7d:df:dc:e4:f0:3f:d7:6d:ef:ac:8c:9c:08:
43:7c:7c:33:8d:2d:a1:f3:06:a4:79:1b:c3:98:77:
d2:c7:c4:83:9b:50:05:c8:93:70:e0:bc:bb:0d:cb:
e9:dc:05:f5:8e:3a:fd:a2:97:b3:6e:d0:17:f6:bd:
8d:80:54:04:b0:0a:e8:cf:42:f2:cd:c6:a6:14:c8:
4c:70:44:64:6c:f1:ab:2d:59:71:5f:1e:bb:52:4d:
6d:af:e9:bc:bb:87:39:5b:4b:d7:85:46:81:2a:09:
4f:9b:23:04:a7:13:05:36:5d:6b:32:03:7d:d6:93:
2a:fa:4b:cb:16:37:b7:63:b1:f6:ae:15:07:99:21:
a9:94:7c:23:02:72:dd:40:f0:88:24:a5:95:25:e2:
5b:57:00:9a:b3:af:2f:49:d0:0d:4f:c6:d5:5a:59:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:21:1B:08:B6:FF:9E:D2:44:F6:79:17:22:91:D3:54:AD:F2:4F:A8
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/GiEbCLb_ntJE9nkXIpHTVK3yT6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.34.0/24
Signature Algorithm: sha256WithRSAEncryption
88:53:3c:1e:d9:bd:a6:bc:a1:86:e2:60:e3:36:b2:77:eb:45:
cc:4d:ef:b9:97:1d:2c:56:15:da:c5:d0:b8:9b:b1:6d:e0:61:
aa:1d:7d:aa:fa:6b:56:35:04:59:01:d1:8f:cc:90:98:88:ba:
a5:cb:a4:ee:64:18:05:5a:c3:e8:6e:45:b4:ac:fd:65:be:4c:
19:1a:32:4e:2c:34:17:41:b8:fd:26:8a:04:f6:0a:90:dc:af:
f5:cf:28:fe:1d:4a:2b:b9:cc:f0:ec:d4:75:1c:fd:57:0c:6c:
50:17:48:c9:ce:b2:37:a3:8e:ea:ef:0c:6d:31:0b:d8:e7:a8:
e6:1b:62:ad:7b:d4:13:47:05:a3:a2:e6:55:50:2e:87:b4:9d:
08:33:f7:6c:47:87:2d:a9:9e:c0:36:c0:af:6f:24:8d:e9:ee:
e7:8f:59:e5:bc:0c:a1:0d:af:b5:31:c7:fa:0d:bf:76:a1:1b:
87:85:38:2b:88:db:d9:32:36:8e:fb:f0:2c:61:86:56:e5:2a:
bc:92:2a:4f:c0:a6:95:31:5d:69:56:03:f1:49:fa:06:b5:77:
a2:d3:d2:53:f4:7c:35:4b:23:45:6b:7c:b1:48:1b:f0:1a:81:
b1:4b:d6:83:40:e1:4f:18:06:70:05:e7:bb:bf:3b:9c:60:f3:
08:88:f9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:34:08 2025 by rpki-client