Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/4jVhugmC2uGXX9qjBfKJOL1wKWU.roa
File: 4jVhugmC2uGXX9qjBfKJOL1wKWU.roa (raw, json)
Hash identifier: eFVhLl1ftzPLXQQU7fL/9lmHD3obNugz2bktQUPKzBw=
Subject key identifier: E2:35:61:BA:09:82:DA:E1:97:5F:DA:A3:05:F2:89:38:BD:70:29:65
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64B47B3F8EC21793615262A2881FF7
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/4jVhugmC2uGXX9qjBfKJOL1wKWU.roa
Signing time: Thu 09 Jan 2025 09:28:21 +0000
ROA not before: Thu 09 Jan 2025 09:28:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59763
IP address blocks: 79.124.88.0/23 maxlen: 24
79.124.91.0/24 maxlen: 24
79.124.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:b4:7b:3f:8e:c2:17:93:61:52:62:a2:88:1f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e23561ba0982dae1975fdaa305f28938bd702965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:e9:89:4a:d9:c2:ff:d3:2f:3e:96:fe:48:
5a:b0:51:12:c7:29:d7:87:a7:0c:2c:6e:02:9c:3b:
fb:5c:54:5f:f4:57:9b:a2:72:1d:2b:30:fd:54:eb:
63:83:09:10:e7:d6:87:05:49:d0:c7:0d:9f:7d:ec:
e6:48:dc:df:35:b7:8d:03:16:bf:69:a1:f8:8e:a9:
14:a9:72:8d:b0:4a:60:fc:5c:53:e5:27:60:2e:fa:
0a:d8:40:3c:f0:b1:79:66:e2:71:97:7d:ad:1a:d1:
39:48:d9:a9:85:74:84:5d:c8:20:98:4b:ca:91:e0:
2c:9e:3c:89:32:ba:8c:ae:7d:64:c5:bf:bf:ed:c6:
88:5f:dd:66:43:51:ef:74:dc:82:12:63:d0:ad:98:
30:30:31:1c:b9:c4:c1:85:3f:c5:b6:6b:9e:3d:65:
2f:b7:dd:60:de:78:fd:79:df:b2:61:54:bf:82:df:
10:33:b0:57:c8:b2:af:3a:76:31:57:d6:ba:3f:32:
36:9e:b8:6f:55:76:8b:34:ae:fd:df:2a:2a:aa:5d:
59:52:07:cd:ad:58:c4:93:23:5b:d1:63:16:e7:dc:
bb:48:19:89:3a:11:d7:69:d0:c4:43:a5:e9:06:72:
92:af:b9:11:52:b1:0e:8d:a9:63:74:f1:b0:bd:ae:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:35:61:BA:09:82:DA:E1:97:5F:DA:A3:05:F2:89:38:BD:70:29:65
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/4jVhugmC2uGXX9qjBfKJOL1wKWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.88.0/23
79.124.91.0-79.124.95.255
Signature Algorithm: sha256WithRSAEncryption
8b:68:e6:f1:56:ed:95:ab:e1:a3:e4:32:cf:41:ef:12:2f:64:
2e:f7:4e:53:56:b2:3d:d8:34:a3:4c:93:0f:99:55:50:9c:be:
6e:56:d2:03:ce:83:d2:9a:20:4f:f7:c9:ba:f7:9a:3e:8c:69:
92:4a:7f:90:f9:f7:37:22:3b:71:fb:b1:cf:de:dd:ba:30:aa:
1c:00:c1:f6:84:74:19:0f:a7:0f:a5:e5:e6:f2:2a:9f:86:7d:
77:05:c1:27:03:53:f8:5c:89:41:8a:a1:4a:82:67:29:ad:a9:
57:08:b0:d1:06:a5:af:d6:fa:f8:37:f1:6f:44:20:f4:55:88:
c3:6d:7c:d0:92:3d:48:11:0d:f8:ec:b2:24:89:f3:b4:c9:14:
89:d8:b8:0a:30:72:20:a4:8c:45:62:8d:7f:5c:0e:9d:93:b1:
e7:70:ff:1f:e4:aa:ef:c2:23:e2:34:f7:03:9b:20:e3:f6:9a:
9b:65:3c:f2:75:32:de:b1:7e:94:83:2f:20:e8:09:1e:a9:44:
84:c7:89:8c:9e:2d:10:bf:e9:f9:5f:91:a4:be:48:2e:49:1b:
1e:4a:31:fa:c0:53:45:0b:ad:41:ee:ce:f6:3e:24:ab:ec:65:
27:89:eb:a4:12:12:81:ca:72:64:b1:41:e4:08:56:ed:3a:74:
a6:07:8c:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:11 2025 by rpki-client