Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/GAo7ZduAV60PzhY9o_GDH21ot64.roa
File: GAo7ZduAV60PzhY9o_GDH21ot64.roa (raw, json)
Hash identifier: L65aKQ/diSXQMwJ1Sh2UT0BCtlwKc371uG33rtI8OVw=
Subject key identifier: 18:0A:3B:65:DB:80:57:AD:0F:CE:16:3D:A3:F1:83:1F:6D:68:B7:AE
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 01942444DD4F20262A04E7FC6782AB6897CE
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/GAo7ZduAV60PzhY9o_GDH21ot64.roa
Signing time: Wed 01 Jan 2025 23:48:00 +0000
ROA not before: Wed 01 Jan 2025 23:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 195.234.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:dd:4f:20:26:2a:04:e7:fc:67:82:ab:68:97:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Jan 1 23:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=180a3b65db8057ad0fce163da3f1831f6d68b7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:f5:74:41:8c:e4:93:70:20:1c:2a:79:3e:
73:e5:0c:82:d5:1f:a1:45:81:5b:b5:91:cd:c6:ff:
cb:c8:bd:8a:d5:6f:1d:56:66:57:a7:df:e3:4d:c8:
ca:29:7a:04:c1:d9:f1:9c:ad:f2:65:07:6b:66:7f:
38:94:d8:c5:58:3a:8b:44:27:84:4f:98:4a:0d:ac:
fe:55:d1:08:10:e3:0f:b6:c7:42:ee:24:bb:e2:65:
42:c6:3f:91:d3:56:d2:0c:34:bc:46:85:e6:52:94:
6c:8e:1e:76:e8:65:76:5d:3f:3e:54:55:8b:66:1a:
2f:c0:29:14:3e:f3:67:29:ba:9e:7f:38:bb:29:dd:
24:21:6e:aa:d5:02:aa:dd:4e:31:f8:01:7a:f7:e4:
fc:0c:b1:3e:82:72:c8:40:66:3e:ef:90:a7:58:65:
c3:e3:1d:c5:23:81:20:81:cb:3c:a1:17:9c:41:f9:
78:b8:23:9b:4e:4d:4e:67:c7:e7:67:a8:cb:a9:ec:
4a:ff:81:38:22:16:74:2e:e5:7e:cd:e1:ba:de:f5:
d1:c7:68:5e:f7:d5:65:a6:1f:e4:67:0e:d4:56:a5:
60:65:60:f1:70:3e:03:5b:58:63:be:68:b8:63:25:
28:22:9e:c4:e5:4b:30:4a:dd:49:5a:e1:c4:65:37:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0A:3B:65:DB:80:57:AD:0F:CE:16:3D:A3:F1:83:1F:6D:68:B7:AE
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/GAo7ZduAV60PzhY9o_GDH21ot64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.155.0/24
Signature Algorithm: sha256WithRSAEncryption
be:fe:79:1a:b0:18:5e:3f:4d:db:dd:eb:7f:02:c2:b6:43:c3:
e9:7b:13:47:67:2f:60:e7:9b:a5:c0:51:05:0e:ac:aa:63:12:
58:c8:81:cf:18:ba:c4:8d:17:8d:62:3c:bb:9a:01:7b:f0:90:
b6:aa:74:73:ee:19:d3:b3:29:5d:3c:a3:86:e7:91:fd:3d:98:
78:d8:05:55:0a:0f:5c:7d:8d:b3:17:32:62:28:c1:23:a6:09:
d3:b3:7e:47:67:e5:d9:c6:3c:14:88:af:3c:fd:88:04:91:6b:
60:17:49:85:df:a5:83:39:05:63:dd:b1:a6:c3:f4:3f:83:61:
5b:68:26:24:c9:d4:4d:cf:e2:e9:c3:e9:21:5b:57:bb:c7:05:
77:e9:0a:da:32:fd:70:3c:97:cc:15:5f:20:82:11:ae:e3:62:
ea:0c:53:1d:fc:9d:86:29:b2:b9:66:e0:7f:b2:54:ad:59:92:
ec:b0:7c:b3:45:4b:d9:61:d7:bf:c1:74:82:8d:b5:ef:74:06:
86:ef:04:59:3f:7e:c1:81:d3:0a:c0:94:cb:74:af:5e:ef:97:
03:99:9f:db:20:cd:60:04:7a:20:57:a9:9c:30:9a:a8:29:42:
4a:e2:b5:61:5d:06:fc:83:e3:3b:68:1e:a7:42:d2:a8:95:cc:
c6:28:2c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:23 2025 by rpki-client