Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa
File: Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa (raw, json)
Hash identifier: iN7hsvC2N6zVGHZJzHIWk+L6xeaF90AdvlMynpLLSsQ=
Subject key identifier: 1B:0F:71:5C:65:10:EA:03:8B:C6:60:F7:BA:13:DB:1D:48:F1:A9:D6
Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial: 019425FDB60A8B3945DCC9F18BEBBC3DB31E
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48712
IP address blocks: 194.28.32.0/22 maxlen: 22
195.130.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b6:0a:8b:39:45:dc:c9:f1:8b:eb:bc:3d:b3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b0f715c6510ea038bc660f7ba13db1d48f1a9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:c6:76:a4:28:09:05:d7:41:00:1e:1c:bc:
3e:bf:96:cb:8e:eb:f3:63:d5:ba:a5:c9:1e:76:29:
e5:5b:c9:c2:70:6f:64:42:42:e6:43:c2:d9:e5:9e:
3c:39:14:fc:56:1f:e0:1f:00:77:ff:ca:a3:87:c8:
60:c0:43:11:3c:c5:49:51:1c:a4:7a:ba:64:b3:53:
70:6a:a1:87:97:02:0a:70:3f:26:c2:1f:96:91:0b:
2d:48:15:8e:16:66:ee:a5:d7:26:08:df:58:23:b7:
05:e0:ae:ca:52:f0:ad:b9:c2:09:44:cc:29:37:ec:
a9:a8:35:43:68:3d:eb:d2:51:cb:09:97:01:35:df:
2c:87:db:5d:c1:85:0e:c9:ca:0f:84:ed:24:3c:eb:
96:32:b3:7e:e6:2d:84:f5:7f:7c:a3:3c:14:00:a7:
22:ec:93:3a:b8:a4:8c:2e:75:8a:f4:a8:88:41:0e:
4d:c9:01:6a:76:18:89:0c:db:3e:eb:ad:b1:0f:e4:
90:9a:31:de:07:03:a1:5e:af:d4:ad:ac:e3:b9:6a:
36:12:8f:7c:98:7d:2e:b1:6e:4e:ff:35:0c:a6:a0:
ca:03:6a:6f:d0:df:38:7b:e7:77:4a:36:77:25:4c:
00:83:2b:71:4b:4f:03:f0:a0:90:09:b2:56:80:e8:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0F:71:5C:65:10:EA:03:8B:C6:60:F7:BA:13:DB:1D:48:F1:A9:D6
X509v3 Authority Key Identifier:
keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Gw9xXGUQ6gOLxmD3uhPbHUjxqdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.32.0/22
195.130.197.0/24
Signature Algorithm: sha256WithRSAEncryption
74:43:1d:72:4f:51:cb:b8:79:b3:7d:a6:c5:e5:92:68:a1:93:
0f:45:1f:a4:32:61:de:6b:72:37:ff:98:9c:92:05:82:9d:d9:
d6:35:fb:bc:3e:88:9c:62:72:b8:57:8d:e1:6a:3b:38:06:96:
07:35:75:08:21:cc:52:68:b5:78:b1:7f:99:91:bd:83:24:7a:
fb:03:89:b2:2f:3b:52:48:80:b0:a6:80:76:c4:73:28:e3:39:
08:c0:c5:d0:64:ee:3c:bd:14:22:0c:8d:cd:ff:e2:7a:71:41:
01:2b:93:1b:17:13:24:4c:3c:2d:22:c1:0b:e8:74:bf:62:e9:
53:3d:d6:36:fa:2d:45:35:69:3b:2c:e6:07:62:2f:c7:41:04:
a4:97:93:52:03:1d:9f:30:be:1e:78:bb:01:cf:73:f4:c6:4a:
c8:4b:9f:b0:dd:6e:a8:b4:2c:9f:34:49:2c:a6:d6:0d:96:13:
ce:7b:6f:df:a4:f4:e2:af:f3:10:c4:3e:c0:6f:07:fc:e0:b4:
a9:29:e7:7b:af:ae:dd:85:aa:dc:63:92:ba:e4:53:70:a5:cf:
2d:eb:95:16:bb:0a:68:2d:0f:08:21:ca:fa:5e:2f:f8:8f:35:
d4:09:09:16:b6:ad:c3:ab:77:47:51:b6:69:59:9f:db:3e:32:
b3:23:fb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:15:16 2025 by rpki-client