Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/9gtsAx5FJEnGGDpA05vpeEmKqKo.roa
File: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (raw, json)
Hash identifier: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=
Subject key identifier: F6:0B:6C:03:1E:45:24:49:C6:18:3A:40:D3:9B:E9:78:49:8A:A8:AA
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 01942444904C790E1BF8B203D572E1C0B1C5
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/9gtsAx5FJEnGGDpA05vpeEmKqKo.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29624
IP address blocks: 82.212.192.0/19 maxlen: 19
2a00:cb0::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:90:4c:79:0e:1b:f8:b2:03:d5:72:e1:c0:b1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f60b6c031e452449c6183a40d39be978498aa8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:1f:ca:29:cb:f5:8f:2c:83:01:63:21:03:
f2:25:45:90:00:53:a1:b9:24:35:14:9b:24:8c:de:
62:53:3a:51:45:ab:7a:58:61:59:d3:4e:c5:88:32:
ff:d9:48:c4:8a:fe:2f:51:9b:a4:12:f9:7b:4f:8d:
71:8f:5f:0f:0d:1b:13:83:18:1d:e8:95:3a:73:a0:
ac:61:83:3c:02:f3:c4:3d:2c:a2:57:c5:e6:a3:fa:
ed:47:ba:26:ae:0a:a2:c3:99:c8:c1:86:4f:92:0c:
f0:23:e4:c8:31:72:54:48:1d:df:23:83:0a:3f:82:
41:ab:61:2d:e5:8e:87:2a:58:2b:b6:6f:b8:87:53:
27:bc:e6:63:fb:97:c7:13:32:37:d0:59:ac:90:40:
a0:72:60:3a:c1:1c:bf:1d:5c:cb:f7:bd:8e:92:e7:
87:3c:d3:02:00:66:af:bd:62:c9:ac:b1:60:28:db:
cf:15:ea:d4:29:7b:7c:84:e4:81:36:d3:fe:c2:b0:
c2:13:50:ad:97:5a:1b:b5:07:e7:cc:27:e3:2b:dd:
73:ea:03:a8:5b:26:48:b7:27:f4:11:78:61:97:9b:
62:53:4c:72:5f:33:c6:fb:df:27:10:1d:7a:a0:e7:
19:61:f3:81:54:ae:62:98:92:2e:1e:72:f6:32:3d:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0B:6C:03:1E:45:24:49:C6:18:3A:40:D3:9B:E9:78:49:8A:A8:AA
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/9gtsAx5FJEnGGDpA05vpeEmKqKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.212.192.0/19
IPv6:
2a00:cb0::/34
Signature Algorithm: sha256WithRSAEncryption
2f:36:88:99:a5:e8:44:ad:d2:80:02:26:a6:a9:c0:db:05:96:
bf:79:8a:be:0a:c1:3b:69:44:e9:ec:1a:fe:b2:39:0a:29:95:
5a:72:ca:24:a7:9e:85:d3:7f:40:dc:74:fa:e9:d4:f2:cc:39:
c3:b1:6a:c5:d8:2e:6a:5f:c5:98:6c:68:09:39:d3:07:a1:57:
28:4f:21:98:e3:b1:14:69:f8:89:03:f8:43:e9:9f:b2:ea:13:
91:33:7d:d1:1f:ea:ac:c2:0e:dc:2e:df:c9:a8:c8:bd:4d:fc:
a7:68:84:33:c4:7c:cc:8b:ab:fb:e8:93:9b:8d:bf:ae:9f:83:
90:58:b5:ac:d2:45:dd:eb:c8:43:c7:db:f2:ce:24:68:18:b4:
c4:7c:d6:99:12:d1:88:07:eb:2a:55:d5:e9:16:5c:dc:74:9d:
90:f9:57:23:00:e0:e2:a9:cf:40:64:42:a5:62:5a:46:fb:3d:
5c:7d:ad:b9:eb:26:b7:cd:5a:3e:ea:3f:b5:e4:25:ed:43:47:
3a:4d:ec:58:e8:cf:9d:5c:ac:e5:52:18:01:18:c1:be:20:3d:
d0:bc:1c:91:63:15:5e:95:60:0a:d9:2a:80:8c:9f:4f:b5:a8:
ac:7e:5e:2f:31:5c:af:b2:60:54:88:95:c2:ba:0c:ea:9e:c2:
62:7c:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:45:06 2025 by rpki-client