Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/moIHrCUIysvqre1db9iG8YhXiD4.roa
File: moIHrCUIysvqre1db9iG8YhXiD4.roa (raw, json)
Hash identifier: 3qmhRdBwt3IbZM/x/JJkjl8tv0bK7oEsrL8A8nVm2tw=
Subject key identifier: 9A:82:07:AC:25:08:CA:CB:EA:AD:ED:5D:6F:D8:86:F1:88:57:88:3E
Certificate issuer: /CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Certificate serial: 01949E43A5CC7F7F6F9358CAE7F89BA92CE6
Authority key identifier: 82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/moIHrCUIysvqre1db9iG8YhXiD4.roa
Signing time: Sat 25 Jan 2025 16:20:20 +0000
ROA not before: Sat 25 Jan 2025 16:20:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 195.26.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9e:43:a5:cc:7f:7f:6f:93:58:ca:e7:f8:9b:a9:2c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Validity
Not Before: Jan 25 16:20:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a8207ac2508cacbeaaded5d6fd886f18857883e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:9b:68:59:61:46:1e:7e:ff:a3:97:cd:ea:
0a:a0:c3:4d:08:24:24:d3:24:5a:80:a3:f3:e3:cc:
4e:d9:f1:0d:28:a6:aa:ff:61:ae:a4:51:38:e8:91:
2d:1a:d9:2d:03:50:09:45:6d:f4:c9:ec:92:92:a2:
4f:77:42:df:af:b7:ab:e2:a4:b5:92:b7:83:79:22:
ea:24:bf:ec:2f:24:9c:77:c1:5e:cd:aa:f4:a4:f0:
11:7c:db:d7:58:a7:27:be:35:44:8f:52:06:47:b2:
4e:96:3c:ff:7d:7d:ee:8c:d7:ae:b0:4e:9f:27:ac:
10:16:32:ab:20:a7:b7:dc:7e:a7:8f:23:0f:a0:75:
99:9e:20:eb:21:ce:2d:81:22:15:a2:a3:d7:0e:d1:
d2:6c:55:44:d2:b2:0f:17:79:10:16:81:a8:a7:98:
e3:69:9e:04:21:0f:f7:fd:4d:93:d7:d1:6b:d0:65:
94:29:cb:e0:e0:b6:9c:31:d6:85:b1:74:33:58:ac:
08:97:59:ba:7f:e4:2e:fb:df:95:42:65:bd:09:e2:
e8:bc:4b:5e:15:55:24:e2:ad:69:95:0d:b0:7f:dc:
ac:33:b8:45:f4:81:2d:0d:42:74:37:26:49:3c:05:
11:3a:b7:a2:0f:8c:ac:23:23:86:1a:b5:5e:fc:cd:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:82:07:AC:25:08:CA:CB:EA:AD:ED:5D:6F:D8:86:F1:88:57:88:3E
X509v3 Authority Key Identifier:
keyid:82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/moIHrCUIysvqre1db9iG8YhXiD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b4:a2:30:48:3c:79:24:1c:d9:69:7d:b7:6d:83:17:a0:c0:
20:bb:ef:3e:9f:a3:c3:80:83:d7:f8:5a:45:08:3f:ce:bc:aa:
9e:ed:e9:b4:42:d2:e8:2a:35:07:a3:57:ac:6c:bd:cf:2b:28:
44:70:a4:df:b8:5d:23:82:d1:b0:33:38:a8:1a:79:e2:a4:51:
e2:11:ea:80:40:ad:9a:41:24:a6:cf:86:6c:e9:c7:73:5f:a1:
44:66:fc:5f:f4:af:24:b5:68:26:fb:7b:71:f1:ad:b9:f1:cb:
ef:84:d7:76:7b:11:2b:bd:7d:8c:e5:50:6d:46:6e:b1:88:f7:
43:77:fb:f5:6d:32:3f:ce:f7:ed:f4:c4:62:61:f6:f7:f9:9d:
98:53:a5:c8:c7:b9:0d:d8:2c:36:07:44:6a:d4:6e:dc:77:00:
d5:aa:2e:cb:d8:98:c4:f5:65:96:17:73:59:22:bd:c9:36:f5:
ef:98:6f:55:5a:b3:4a:0c:32:69:26:5d:45:3e:4b:f7:1f:e9:
0a:29:e3:f6:05:37:ec:3d:23:66:ac:ca:57:a0:e1:57:cc:b3:
e4:33:c0:42:6f:94:6b:85:dd:ff:64:a6:b8:65:5e:0b:59:ea:
c8:f4:29:08:eb:21:e5:8b:08:55:ab:6d:5e:52:2d:63:ee:1c:
95:f8:db:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:06:59 2025 by rpki-client