Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/G0EuC5gcuWT080VoEG7kh2ciczs.roa
File: G0EuC5gcuWT080VoEG7kh2ciczs.roa (raw, json)
Hash identifier: +/zxN6fiBn4VpF+CnbcDuEGEZJqsBLyKlNEuxOShneY=
Subject key identifier: 1B:41:2E:0B:98:1C:B9:64:F4:F3:45:68:10:6E:E4:87:67:22:73:3B
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 0194274803F46AF53E1A860AC66ED700DFAF
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/G0EuC5gcuWT080VoEG7kh2ciczs.roa
Signing time: Thu 02 Jan 2025 13:50:18 +0000
ROA not before: Thu 02 Jan 2025 13:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207826
IP address blocks: 94.236.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:03:f4:6a:f5:3e:1a:86:0a:c6:6e:d7:00:df:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b412e0b981cb964f4f34568106ee4876722733b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:b0:e2:3b:81:ec:47:9b:ae:9a:df:7b:4c:
4c:88:e6:fe:1a:b7:4c:c6:f7:04:13:ac:25:8f:00:
a1:ae:db:88:07:a9:08:fe:15:b3:db:49:30:0d:a4:
b3:33:b2:8b:74:d6:ec:f7:f6:1d:2c:ef:e1:43:e5:
e6:bb:02:4a:4e:7c:6e:31:bd:37:d0:af:ff:0a:8f:
50:4e:50:82:ca:73:58:b2:d8:1e:fd:4f:23:68:0e:
f3:ba:f1:ac:5e:09:13:65:06:36:32:3e:e2:83:62:
ee:8e:1b:c8:07:ce:e8:40:2c:a5:af:39:7f:b7:88:
d2:c3:1f:1a:06:35:4d:fa:c8:4a:4c:f1:0e:1b:d0:
ac:25:3c:4f:a3:87:22:aa:ba:d7:1c:e1:5d:3e:25:
03:8f:d6:38:85:d7:55:f3:b1:82:9d:aa:24:33:40:
93:3b:5d:8f:d1:67:6f:3c:2c:14:4c:bb:ff:46:f6:
2c:07:f9:04:84:47:a6:5f:c2:f0:09:c0:d7:3d:3d:
62:ff:22:3d:3c:9d:c8:e7:f4:a0:ae:f3:97:70:96:
3d:db:a7:10:d5:59:e0:d2:f8:5b:8c:ad:98:46:31:
8c:b2:31:ce:1a:03:ed:df:50:7c:23:6c:9e:9a:93:
f0:c3:38:a0:b7:d4:c6:60:38:9a:52:cb:6f:b0:6f:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:2E:0B:98:1C:B9:64:F4:F3:45:68:10:6E:E4:87:67:22:73:3B
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/G0EuC5gcuWT080VoEG7kh2ciczs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.236.169.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:29:27:01:31:91:69:25:03:00:e4:9a:35:80:ce:ba:84:69:
8d:29:13:f2:c5:b3:fc:38:0d:f4:3e:51:8f:2f:e0:99:10:60:
a5:46:96:93:cb:bd:2a:dd:7a:b8:60:08:61:0b:a0:a5:01:7e:
11:db:84:4b:d4:6d:3d:48:bf:ba:76:d4:4d:6a:a2:52:fc:25:
aa:d5:3f:b2:3b:b3:19:e4:38:5a:81:8e:9e:ff:21:c8:96:c4:
23:e5:06:12:08:65:d7:55:3a:16:88:b3:82:6a:c1:a9:f2:04:
48:e1:89:94:ad:cc:6c:51:d1:76:49:1d:20:5d:26:90:64:48:
44:b6:0d:b8:b4:f1:76:03:f2:7b:fc:45:bc:8d:6c:24:35:e0:
f9:56:23:4b:f3:2a:01:77:d0:ff:b5:5e:1a:fb:ad:6c:07:6c:
e6:ec:49:5f:3b:21:ed:ed:28:16:5d:5d:20:23:f1:70:21:12:
ea:e4:dc:e0:70:ae:b0:9c:76:26:dc:fa:76:51:5e:80:f9:cf:
59:a8:64:26:82:c7:d9:00:de:dd:fc:df:ce:61:e8:53:84:44:
10:b4:51:fa:c3:0f:df:13:54:b0:0e:6f:16:93:10:cf:37:cf:
14:01:48:22:06:48:d7:75:06:30:8e:66:c1:e4:e1:da:ee:33:
f7:58:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:08:51 2025 by rpki-client