Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/rGsU2ZkcNAPfnTYcJ0xOGkEFav8.roa
File: rGsU2ZkcNAPfnTYcJ0xOGkEFav8.roa (raw, json)
Hash identifier: pob5Gk3ii6Z8pPugpFKGScd6y3cYxp1AE5yYcUpWbig=
Subject key identifier: AC:6B:14:D9:99:1C:34:03:DF:9D:36:1C:27:4C:4E:1A:41:05:6A:FF
Certificate issuer: /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial: 01942521C1FF0B75936257974635E2CBBAC4
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/rGsU2ZkcNAPfnTYcJ0xOGkEFav8.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43352
IP address blocks: 37.9.200.0/21 maxlen: 24
185.4.208.0/22 maxlen: 24
185.4.211.0/24 maxlen: 24
195.155.128.0/19 maxlen: 24
195.155.135.0/24 maxlen: 24
195.155.155.0/24 maxlen: 24
2a02:cb00::/29 maxlen: 48
2a02:cb04:4::/48 maxlen: 48
2a02:cb04:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c1:ff:0b:75:93:62:57:97:46:35:e2:cb:ba:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac6b14d9991c3403df9d361c274c4e1a41056aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:fc:dd:ba:5b:e6:59:60:b2:60:f1:e6:58:
7d:3d:ec:b5:c1:ca:c7:21:17:66:55:89:79:ff:bc:
e3:a2:56:5c:33:42:be:3b:bb:d6:be:2d:1b:b8:43:
00:86:e0:fb:ef:20:6a:29:3e:85:ca:21:36:3e:15:
ea:84:54:47:f7:d6:04:5c:28:2d:56:bf:02:27:ca:
2f:8c:ff:9d:1f:e9:ce:4f:c5:bc:bd:e9:28:83:6d:
ea:74:e4:e6:d8:89:b5:18:6c:3b:6d:95:9b:a0:2e:
23:e5:8b:33:f1:e3:b5:d3:24:3e:a2:28:c7:f2:ab:
51:57:58:8e:c4:1b:d7:61:24:6a:ee:ae:3e:ed:a1:
ce:98:9f:e3:a8:d1:ff:32:2f:1e:10:b4:d7:f0:c7:
0f:04:48:b7:a1:a6:cb:b3:61:eb:7f:7b:17:9b:60:
4e:93:dc:6d:19:5f:b6:0d:1f:46:be:01:97:21:bb:
17:6a:31:f4:78:78:7b:48:55:0a:5b:a7:db:5f:bf:
35:b7:45:95:05:c1:22:9e:1d:8a:8f:98:a0:24:66:
a1:8f:c1:e9:ec:4c:32:eb:fa:71:ab:f3:9a:23:f5:
db:3c:2a:64:d7:ae:81:07:b8:8a:fe:55:6e:36:16:
30:bd:4e:d1:93:3e:90:49:24:ed:28:5f:b5:8c:ca:
d4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6B:14:D9:99:1C:34:03:DF:9D:36:1C:27:4C:4E:1A:41:05:6A:FF
X509v3 Authority Key Identifier:
keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/rGsU2ZkcNAPfnTYcJ0xOGkEFav8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.200.0/21
185.4.208.0/22
195.155.128.0/19
IPv6:
2a02:cb00::/29
Signature Algorithm: sha256WithRSAEncryption
5c:f4:e9:0b:3a:26:b4:d5:a4:87:f0:f7:c7:12:22:99:b7:b5:
f1:06:79:63:e4:01:ff:df:60:5e:b2:01:42:a3:04:31:b5:df:
c8:5b:c1:79:76:44:90:af:ae:55:10:9d:9d:84:fa:c0:74:d9:
0b:00:0d:28:c4:50:5e:61:bb:2d:33:d7:d3:74:e8:12:ae:53:
6f:13:76:68:dd:c2:7d:ee:49:12:f5:8b:4a:56:4b:24:bd:69:
32:60:6a:af:64:ea:d7:76:89:b1:d6:94:a7:d2:29:50:09:cd:
c4:99:54:34:69:79:1b:20:62:4f:ee:c0:86:8d:6e:e4:52:83:
66:91:0f:62:62:02:fa:42:d1:1f:27:a7:63:fa:4e:d2:de:1c:
d2:de:74:e0:0a:2e:ae:65:9c:67:ed:bc:5b:b5:3a:88:e8:d9:
2e:13:92:c6:92:18:c1:16:20:cc:3f:d5:12:db:2f:3b:1e:7d:
60:a1:6e:27:68:5b:e1:bc:88:b3:38:39:29:d6:6c:4c:3b:8b:
b6:ef:bc:b0:50:13:6c:b1:02:d4:e0:b8:1e:7a:36:e1:8a:bd:
ec:fb:d9:bb:ff:c0:93:7c:5f:51:af:e2:ea:7c:ca:e0:5d:e2:
7a:45:19:d7:e5:7b:5e:1d:97:72:57:d8:b3:dd:31:99:e6:1c:
62:e3:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 20:26:09 2025 by rpki-client