Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/_GcWVg1NloetvFlVnnsXCsqW9jA.roa
File: _GcWVg1NloetvFlVnnsXCsqW9jA.roa (raw, json)
Hash identifier: 8fDT+HFMs22XfNV5rWe49DrDAkwxKtbv8tRmabSl16Q=
Subject key identifier: FC:67:16:56:0D:4D:96:87:AD:BC:59:55:9E:7B:17:0A:CA:96:F6:30
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01942444EC75EC31A1A67743BFBE14724615
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/_GcWVg1NloetvFlVnnsXCsqW9jA.roa
Signing time: Wed 01 Jan 2025 23:48:04 +0000
ROA not before: Wed 01 Jan 2025 23:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 37.72.135.0/24 maxlen: 24
146.19.189.0/24 maxlen: 24
195.225.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ec:75:ec:31:a1:a6:77:43:bf:be:14:72:46:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jan 1 23:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc6716560d4d9687adbc59559e7b170aca96f630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:79:55:80:d7:47:eb:67:e9:11:b4:d2:93:
f4:c6:c0:fd:49:f9:12:ed:90:b3:84:ef:ed:3b:04:
1c:57:d6:57:e8:44:68:ca:a8:d5:75:ff:91:09:c5:
94:25:fe:d6:ad:9e:a6:65:85:3d:56:5e:7f:83:fa:
07:85:10:c1:a4:82:44:ca:7e:17:7f:58:40:4b:fb:
85:80:6d:89:23:ac:43:e8:06:a2:38:0f:fb:53:fd:
99:c5:d0:db:6a:04:ff:c4:54:07:3f:09:f3:cc:d7:
5e:c8:0f:8d:0e:72:a5:cc:c0:0b:a3:b9:f3:3f:29:
5d:94:ef:91:e2:dd:18:8b:a6:79:94:b1:61:75:5e:
c7:34:67:a9:f8:a5:53:84:2f:bb:e7:4b:89:b8:df:
bb:a4:18:6e:45:a2:02:6d:c5:b3:c1:eb:2f:88:66:
ff:35:7e:45:52:bd:f9:ce:36:e7:76:89:5f:4b:a6:
f8:e7:78:fd:cc:d7:dc:0e:c0:d1:cb:9f:4f:65:e8:
03:62:68:a5:58:b0:80:b7:55:02:2e:e1:48:a6:0b:
e4:4b:9c:61:76:7b:70:5d:21:9b:cf:d8:f1:7e:69:
37:7f:b9:42:e3:b1:b8:b5:63:b0:3f:7c:58:5b:32:
1a:2c:a4:ec:bf:1e:98:9f:d8:51:1b:a5:32:df:f5:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:67:16:56:0D:4D:96:87:AD:BC:59:55:9E:7B:17:0A:CA:96:F6:30
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/_GcWVg1NloetvFlVnnsXCsqW9jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.135.0/24
146.19.189.0/24
195.225.98.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c1:f2:c5:87:6d:2f:74:be:6e:99:74:08:c0:f6:ed:81:a6:
6d:12:80:5b:09:cc:bb:24:71:34:0f:46:ab:26:8f:66:7b:2d:
19:25:a0:39:30:72:f0:e3:b8:18:6c:67:12:6d:de:42:2d:f2:
d5:f1:9c:68:9e:aa:ee:39:c6:0b:d8:1f:8d:a0:25:63:40:44:
b4:b3:c1:f5:c9:fa:07:89:d7:cd:dd:00:52:2c:95:ab:41:88:
43:a9:f8:d7:a1:63:42:c2:03:4e:30:96:a0:e0:d6:ad:84:4a:
70:2f:ff:7b:85:ff:45:03:99:eb:01:38:b4:88:a2:54:a5:f9:
1d:c1:eb:cd:43:62:dc:89:a3:13:27:23:88:0f:39:75:20:85:
4d:25:0b:09:ad:a8:20:e3:58:0d:59:5e:4d:bb:1f:b0:20:f2:
a7:fd:79:71:51:68:ad:bc:0b:b7:66:9c:58:a0:ee:4b:14:e8:
70:1a:27:8c:08:d2:4b:64:d9:b5:97:b8:94:f9:d6:ae:db:24:
d3:c4:90:98:81:80:46:85:4f:8e:ab:d7:6d:f0:eb:57:0c:7d:
fb:a3:18:6c:03:1e:07:96:70:05:29:36:1f:c9:f4:16:18:ba:
12:a2:31:05:27:a4:53:fa:1b:c5:d0:9a:ce:36:fe:16:a9:f5:
f9:14:6a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:00 2025 by rpki-client