Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/g4ZCPviGonmRGPJlO9nSng_S-lo.roa
File: g4ZCPviGonmRGPJlO9nSng_S-lo.roa (raw, json)
Hash identifier: NBfLnaWFnRjJb4HXfFDgN4fD3VeUZZnkBAnPok8zBDM=
Subject key identifier: 83:86:42:3E:F8:86:A2:79:91:18:F2:65:3B:D9:D2:9E:0F:D2:FA:5A
Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial: 0194282537B3D6EA27DB379EDB5C327C2907
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/g4ZCPviGonmRGPJlO9nSng_S-lo.roa
Signing time: Thu 02 Jan 2025 17:51:55 +0000
ROA not before: Thu 02 Jan 2025 17:51:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47555
IP address blocks: 128.127.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:37:b3:d6:ea:27:db:37:9e:db:5c:32:7c:29:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Validity
Not Before: Jan 2 17:51:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8386423ef886a2799118f2653bd9d29e0fd2fa5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3a:1f:ff:f7:8b:f4:de:38:92:df:01:90:f6:
6c:63:5f:a9:6c:bc:78:06:dc:4c:64:7d:bc:b1:2d:
bf:a3:69:1e:af:e9:ca:9f:b8:ab:98:f6:75:41:d8:
b9:42:0f:a8:b7:15:b4:a4:72:07:8f:cd:62:78:3a:
28:1b:26:91:ed:db:6f:07:27:82:86:d9:fc:49:19:
77:28:56:89:c4:4f:43:8d:4a:d8:d2:f9:2e:70:5e:
b2:3a:c9:fd:8f:96:08:b5:8e:0f:fa:c4:a8:ed:de:
34:75:8b:d9:f7:39:6a:53:0b:25:93:e3:3a:28:d8:
27:b7:9a:47:3c:da:f2:21:e7:b2:a4:a1:ed:e2:7c:
be:84:f4:10:c8:e0:31:75:ad:81:22:55:1b:89:20:
f9:e0:8e:77:59:a4:c3:d8:4f:01:2b:49:a5:4a:e6:
3a:f7:e8:55:0f:fc:11:58:25:76:37:08:1b:b6:d8:
7c:c2:34:c4:84:a9:89:ba:b9:42:fe:67:19:1a:2e:
f4:68:e0:e0:e3:fa:c6:9e:e1:c5:d1:76:a5:d9:b5:
f9:df:6f:ec:19:8a:b4:3a:ed:3e:bc:d0:6d:a0:67:
50:0d:cf:ec:9a:98:07:33:bc:22:1c:87:cb:e2:ae:
cb:8c:18:91:40:e7:16:ee:c0:7b:39:36:19:07:08:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:86:42:3E:F8:86:A2:79:91:18:F2:65:3B:D9:D2:9E:0F:D2:FA:5A
X509v3 Authority Key Identifier:
keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/g4ZCPviGonmRGPJlO9nSng_S-lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.181.0/24
Signature Algorithm: sha256WithRSAEncryption
80:1a:6b:6b:9e:19:f8:64:73:1a:06:5b:e9:e2:45:aa:eb:8f:
25:57:0a:35:bb:ca:fd:82:4e:2b:d8:6a:32:a8:60:c4:36:2a:
dc:76:ff:52:8c:8b:16:28:3c:70:1d:fe:33:32:e6:dc:f7:70:
76:19:a3:ec:4e:0c:ac:a4:6f:c1:c6:e1:ce:c8:4e:17:71:2c:
0c:e5:e4:5d:8f:5d:bc:5c:84:b6:c8:00:8d:dc:40:b5:5e:ef:
83:65:77:19:97:15:00:6f:af:23:7e:c7:c9:53:e7:8d:bd:95:
d6:5a:39:a4:5a:54:65:ca:f3:5f:7f:db:5e:0f:c5:87:6c:d3:
7e:28:3e:47:53:35:0a:19:0f:81:40:ef:3d:b7:6f:89:7c:90:
e2:3e:1d:51:a7:e0:7a:02:58:6d:a4:7a:17:80:5a:8a:4b:c9:
c1:57:70:89:b5:88:98:c1:a2:83:81:32:f3:96:c7:02:4d:98:
9c:5e:d5:79:02:03:37:88:12:d1:e5:a2:01:58:ff:c4:36:f3:
b5:ba:73:00:42:83:26:d7:62:8a:e9:be:a3:74:f9:60:c4:13:
d8:93:e0:9a:bb:85:b7:97:83:8f:c1:1b:31:8b:34:9c:8d:94:
fe:17:86:7f:0b:45:72:d2:5a:c7:ee:c1:72:ca:fb:a6:c5:20:
5a:bf:27:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:52:18 2025 by rpki-client