Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/N_GpQaNWWGxkbuDZ3ulfH-r64tk.roa
File: N_GpQaNWWGxkbuDZ3ulfH-r64tk.roa (raw, json)
Hash identifier: IM2SiURjMxHWXsFqFI4woiJ2ADSr+qZUIrRaSOqm3m0=
Subject key identifier: 37:F1:A9:41:A3:56:58:6C:64:6E:E0:D9:DE:E9:5F:1F:EA:FA:E2:D9
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 01941FFA097D5E26F751BFF99A9E67B6B57E
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/N_GpQaNWWGxkbuDZ3ulfH-r64tk.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21034
IP address blocks: 195.32.69.0/24 maxlen: 24
195.32.80.0/22 maxlen: 22
195.32.84.0/24 maxlen: 24
195.32.85.0/24 maxlen: 24
195.32.86.0/23 maxlen: 23
195.32.88.0/21 maxlen: 22
195.32.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:09:7d:5e:26:f7:51:bf:f9:9a:9e:67:b6:b5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37f1a941a356586c646ee0d9dee95f1feafae2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:ec:da:5a:a5:42:9a:c1:db:46:01:69:88:
c9:03:ae:86:ec:36:78:f9:e5:2d:24:8b:ac:92:57:
39:c8:11:b7:55:35:c7:db:ae:29:e8:76:09:90:7f:
aa:8d:7f:c3:04:ed:d5:90:a1:0d:ae:0b:93:91:9e:
c0:03:31:a3:f3:fc:9a:7f:30:d1:ec:d5:c6:90:61:
0c:4f:7f:ff:fe:4c:0b:88:14:66:0c:a6:96:f2:f4:
16:6d:da:2c:79:bd:54:18:6d:b0:87:dd:18:c9:26:
8b:7a:68:b8:7e:08:61:83:58:fb:a0:9f:67:03:2c:
31:1f:6e:05:25:2a:0b:79:df:a7:c9:d8:18:65:22:
b5:d3:47:ff:a8:3a:a9:07:72:5e:97:e5:30:75:c9:
e5:c4:c3:cc:4b:d1:fd:27:0c:09:eb:96:4a:74:f5:
70:9a:79:f2:ac:73:2e:55:5c:69:94:bd:9e:09:02:
c4:19:83:59:e2:a9:16:2b:32:c2:c8:f4:e0:a8:dc:
35:9e:ba:fc:a9:ac:a5:68:60:ec:ce:ef:1f:7a:12:
5b:77:20:fc:33:0e:31:e2:de:52:64:b6:6b:40:de:
c5:ac:f5:29:91:13:6b:9b:73:58:d2:d4:ef:c5:d0:
35:f4:ef:46:3b:99:21:54:33:c5:78:98:a4:45:9e:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F1:A9:41:A3:56:58:6C:64:6E:E0:D9:DE:E9:5F:1F:EA:FA:E2:D9
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/N_GpQaNWWGxkbuDZ3ulfH-r64tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.32.69.0/24
195.32.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:6b:98:44:3b:8b:c5:56:10:59:83:92:46:ea:f7:2e:e9:a9:
24:14:2a:4e:47:35:d0:1f:d2:03:ae:9b:64:9a:47:a6:57:0c:
29:fc:d9:13:0a:a8:88:f3:5e:7a:61:e5:6b:da:1a:a6:78:f2:
4f:e9:d7:cf:30:ef:00:0e:d2:9d:2f:f0:39:68:2b:52:e2:7d:
d0:63:09:d1:1d:45:21:12:b0:28:ef:73:6b:17:25:23:ff:7c:
d8:36:f0:8b:ed:f1:a5:9c:96:4b:ab:f8:20:56:1e:54:ab:6e:
ce:f2:51:1b:7e:e7:6c:81:a4:cd:0b:b5:7d:14:ec:1f:19:4a:
11:ea:b6:a9:4b:62:c8:4a:54:92:98:6c:65:f3:23:99:ed:10:
ab:8d:2f:91:ba:45:60:ad:8d:b9:9e:5b:0a:44:c2:09:db:58:
f0:b8:41:c7:3a:bc:df:6c:46:8e:9c:99:46:d2:33:ad:97:9a:
89:e4:7c:3d:b5:9e:45:c0:61:1b:5e:98:25:6a:9c:30:c3:82:
2f:7b:cf:e5:87:18:b2:5b:40:53:a7:58:f3:b2:00:37:ff:43:
b0:b4:ea:a2:56:46:e9:e9:a9:b9:86:e1:f6:5b:7b:47:de:f9:
05:d3:57:9e:43:f2:43:4d:38:70:7c:e1:ec:c5:a1:fa:74:3b:
70:33:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:58:15 2025 by rpki-client