Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/AgBjgI35YWeABs8oCUWHz3K2zWw.roa
File: AgBjgI35YWeABs8oCUWHz3K2zWw.roa (raw, json)
Hash identifier: 4E8DBT5sfAcPhRkXfwuGn/b4aAai3g0fbeGZYZUWlss=
Subject key identifier: 02:00:63:80:8D:F9:61:67:80:06:CF:28:09:45:87:CF:72:B6:CD:6C
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 0194258F751DA03ACA6FA3400530001386B1
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/AgBjgI35YWeABs8oCUWHz3K2zWw.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 194.26.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:75:1d:a0:3a:ca:6f:a3:40:05:30:00:13:86:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=020063808df961678006cf28094587cf72b6cd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:2f:f5:f9:6d:1a:44:d4:7b:21:3c:b2:5f:
a1:aa:b9:71:cb:e5:bd:d8:89:17:7e:0c:e5:ea:04:
01:27:21:6f:cf:a6:aa:f3:25:15:a3:1b:d8:ad:b9:
91:92:df:51:ba:31:91:3a:c2:8d:41:a6:c3:ed:46:
4a:ea:a2:41:a2:27:e6:98:db:46:46:7c:8a:ec:bd:
c2:4d:a4:31:ad:61:51:e8:91:7a:fc:8e:5c:24:f8:
f5:9f:2a:52:73:d5:bb:d9:2d:25:6b:86:dd:b9:76:
50:74:f4:79:03:f0:6a:56:9d:d0:2b:c9:a1:da:08:
c3:50:8c:fd:ed:a0:b4:55:16:78:85:12:e8:55:78:
b3:ce:a0:2c:d1:bf:0c:eb:31:80:d1:01:7f:88:8f:
47:49:40:e8:d5:6d:af:0e:bf:27:ff:d3:7c:e9:c8:
98:3b:e6:f1:e3:2b:19:8a:58:04:c4:9c:c4:38:66:
5b:ae:8a:9a:13:0c:62:c5:5e:b2:08:4e:90:2a:6f:
89:7a:77:31:f9:be:13:e8:11:2e:da:a5:e8:cd:a3:
58:9f:2f:eb:a3:62:ea:30:c8:3c:bc:a9:ae:0b:a1:
66:4f:5a:f7:7b:cf:e2:2c:1c:f2:6f:48:3a:d6:79:
de:2f:4d:a4:ff:2b:81:f7:41:21:b2:c6:6f:ce:cc:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:00:63:80:8D:F9:61:67:80:06:CF:28:09:45:87:CF:72:B6:CD:6C
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/AgBjgI35YWeABs8oCUWHz3K2zWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:96:92:b6:73:42:0c:a8:bd:6e:ea:bf:e8:17:12:50:8f:72:
dc:03:76:f2:09:a2:f6:9e:59:78:5e:b9:b8:cd:a1:55:58:97:
2c:5b:1b:f4:41:1b:80:10:a0:de:c8:c2:1b:cc:bc:61:1e:71:
9c:a4:98:a2:97:dc:aa:21:45:72:8b:8e:43:c3:0f:84:d7:52:
61:bf:1a:f6:39:89:41:1d:20:0f:e4:7e:f1:86:63:c3:a5:34:
d6:0a:8a:13:fc:8c:e6:32:61:61:a8:a9:66:94:ea:5c:fb:e0:
bd:c5:78:94:e1:ef:10:76:af:88:88:98:61:0f:ed:69:cc:3e:
41:a4:19:b4:31:cb:45:99:c7:eb:03:87:1c:11:81:23:43:68:
1a:83:80:ca:ad:f2:6c:35:37:ae:42:15:80:d6:74:48:78:1b:
f9:76:9a:a7:bb:3e:0d:0f:45:6b:94:39:e4:15:1a:45:f0:16:
bd:30:dd:32:21:ee:4e:28:59:58:6f:01:5a:fd:b0:7a:f9:24:
8a:33:28:a2:66:d3:78:26:d9:41:aa:a4:f2:a6:f0:00:17:b5:
f0:fb:47:39:c8:45:b2:81:09:11:6c:f9:00:23:0d:dd:c6:51:
0b:2b:87:9b:fc:26:85:49:2a:75:1d:d2:59:67:2a:75:d9:b1:
d1:a1:01:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:16 2025 by rpki-client