Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/gZdvO4oXA6_QfENON99n9AVm8Ko.roa
File: gZdvO4oXA6_QfENON99n9AVm8Ko.roa (raw, json)
Hash identifier: /66rJ9F6iwSHP7TkwYayv9wvXVzakhzhjAbGkZBj5JU=
Subject key identifier: 81:97:6F:3B:8A:17:03:AF:D0:7C:43:4E:37:DF:67:F4:05:66:F0:AA
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01941FFA3E9687DEBED56CBD2ABB01A56609
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/gZdvO4oXA6_QfENON99n9AVm8Ko.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1732
IP address blocks: 192.58.44.0/24 maxlen: 24
192.83.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3e:96:87:de:be:d5:6c:bd:2a:bb:01:a5:66:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81976f3b8a1703afd07c434e37df67f40566f0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:56:86:41:1d:3b:b6:85:0d:b8:cb:c2:8c:
95:94:a7:85:b3:27:3d:e4:0d:3f:62:97:17:0b:89:
2b:f7:44:e3:73:d2:77:23:40:66:19:69:a1:3d:6f:
d9:ca:7e:b3:de:70:8a:fb:08:fe:04:d1:c2:fa:25:
3e:08:70:a5:9f:ba:f2:1b:70:e7:a2:a3:fb:ee:ac:
f8:39:cc:ec:49:1c:89:c9:74:62:92:02:b2:ac:2f:
e2:f9:4e:d0:2f:c6:eb:26:52:75:34:be:08:75:5e:
79:1a:a6:fa:39:37:4d:8e:68:45:1a:a6:a3:e1:9d:
2f:a0:69:7b:aa:ee:e0:74:ae:a1:32:93:71:8f:20:
97:60:10:13:49:6f:1c:19:4e:fd:bd:27:9d:4e:f5:
35:64:e3:a1:95:e3:ca:04:40:4b:64:11:cd:67:f1:
56:e7:0e:89:b3:78:82:ee:8a:0b:11:6f:7e:73:4b:
00:2c:39:27:e8:c4:e0:60:af:6b:09:ce:86:1b:94:
93:c1:1a:62:2f:e2:d1:cb:b1:ef:84:fb:db:50:2b:
fb:3a:bc:a9:d1:cb:d8:c3:57:eb:c9:b0:89:b7:90:
7b:6c:2e:85:bb:1c:10:bc:31:b3:77:21:55:f9:ba:
36:e0:fb:c6:c8:18:5a:e3:92:8d:8d:1f:ae:f8:9d:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:97:6F:3B:8A:17:03:AF:D0:7C:43:4E:37:DF:67:F4:05:66:F0:AA
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/gZdvO4oXA6_QfENON99n9AVm8Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.58.44.0/24
192.83.68.0/24
Signature Algorithm: sha256WithRSAEncryption
01:95:1c:7f:09:ca:73:e7:5c:b0:47:18:5c:1f:b3:f8:13:af:
b4:48:47:49:bf:ec:ef:96:3e:55:06:db:36:7e:58:c0:4f:cd:
45:e6:df:96:db:f2:c4:f4:8a:61:fd:72:d1:12:aa:a5:51:6a:
22:fe:fe:53:fd:76:3e:63:a7:79:ab:53:f4:8e:a5:5d:56:33:
09:aa:10:f9:26:66:19:fb:ca:80:3f:03:8a:5f:b1:12:33:6d:
64:1f:ea:7b:12:c7:27:d9:e9:f9:2e:60:c7:f1:79:3c:0b:04:
0b:20:6b:a1:ea:fe:3b:fb:4a:6a:46:f3:20:74:0f:0c:41:b0:
66:72:12:7f:fb:37:ae:13:be:e3:3c:ce:54:e4:41:d5:ce:34:
c5:ee:46:ce:f7:bd:4a:72:e0:41:4c:c2:8a:44:15:c9:d5:06:
fc:c3:d1:eb:04:11:31:d6:d5:b9:82:b4:52:de:86:14:49:ba:
9b:f6:68:f5:29:74:15:f5:fa:d1:86:35:14:a5:ec:52:60:57:
bf:a7:b5:64:e9:41:8d:f9:ac:29:d5:83:bc:75:8e:f3:74:03:
ac:39:4b:b3:57:5a:d0:02:c0:0e:36:ec:4d:9c:38:55:46:ff:
48:ca:d7:8a:d0:0d:31:6d:24:d8:f6:44:fd:50:21:91:e6:47:
2c:b6:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:34 2025 by rpki-client