Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/g4GI57zRcwc78atAcKzvcX8O_Jg.roa
File: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (raw, json)
Hash identifier: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=
Subject key identifier: 83:81:88:E7:BC:D1:73:07:3B:F1:AB:40:70:AC:EF:71:7F:0E:FC:98
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 0194221FF9ACB31E9DA15B91A1A1F9363A49
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/g4GI57zRcwc78atAcKzvcX8O_Jg.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 185.174.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f9:ac:b3:1e:9d:a1:5b:91:a1:a1:f9:36:3a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=838188e7bcd173073bf1ab4070acef717f0efc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:ba:b6:d7:08:d5:2a:3f:e8:54:87:6c:3a:
8f:3a:ad:b9:45:b3:32:10:fa:8a:73:ca:8e:56:49:
ed:67:fb:bb:5d:d4:01:6c:90:7b:49:95:d2:7d:47:
94:c5:83:a3:39:37:5f:82:cf:62:1b:f1:57:16:55:
62:fe:34:b5:51:97:b7:29:d2:37:1d:d3:9f:9e:1a:
c9:6e:51:96:b4:fc:2a:78:55:18:40:b5:11:45:fb:
54:29:ad:03:88:7b:8e:dc:01:c9:53:9d:56:94:27:
99:4a:e1:d7:13:e7:78:95:8a:82:cd:de:8b:70:65:
a2:55:16:1e:3c:6d:0f:48:fc:9b:9c:4b:02:d9:e0:
37:08:ac:ad:d6:0a:f8:58:38:c5:d1:b0:2d:6d:58:
38:13:5e:46:92:ba:30:42:55:c2:ba:13:dd:ac:6a:
a9:b6:7a:05:89:94:73:fa:3b:75:7a:2a:77:a7:03:
c0:70:9e:1d:28:a2:90:2a:9d:03:3a:71:13:5a:eb:
53:ab:de:18:d5:57:41:ff:6a:32:10:d6:bb:eb:fc:
4d:6c:66:f7:6f:2d:41:45:e7:c2:de:45:cc:3b:a2:
f2:63:e1:1e:e7:5f:ec:57:9f:d1:51:f4:6e:4b:46:
2b:8a:bb:82:61:bb:f3:68:14:49:f6:10:70:90:a4:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:81:88:E7:BC:D1:73:07:3B:F1:AB:40:70:AC:EF:71:7F:0E:FC:98
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/g4GI57zRcwc78atAcKzvcX8O_Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d8:21:8f:e1:3d:74:95:1c:44:da:ca:71:87:14:50:03:9a:
07:e5:f5:1e:88:c1:a5:27:9f:d2:7e:5b:c6:10:2a:72:40:12:
2e:86:22:3f:40:19:04:ed:1c:8c:34:a9:fa:f3:8a:1b:53:8f:
f5:08:04:1a:f4:ef:e5:9a:3e:b1:c3:4f:e9:32:2f:f6:2c:1a:
a4:09:dd:f5:d0:bf:42:24:8e:22:ad:18:c4:ad:8d:83:d3:92:
9a:5b:9c:a8:16:cd:0b:b6:e7:aa:ff:df:75:00:4f:1a:e4:24:
dc:43:20:0c:27:8f:fb:62:9d:bc:90:53:ab:c9:f2:aa:ee:28:
c2:22:c7:74:2e:c5:ef:2d:7f:20:8d:be:be:59:d2:3a:65:f5:
9b:d3:cc:0d:97:c4:00:24:b5:fa:77:70:f2:4b:06:b5:7a:d1:
ae:10:06:b8:1e:be:d8:da:e0:fd:96:00:56:3c:16:2e:d2:8c:
5d:9d:29:cc:2c:fb:50:66:f4:85:6c:94:9d:55:f9:95:81:b3:
23:80:50:b3:b7:41:4b:bc:35:25:2d:2a:a2:09:c7:54:02:f1:
94:52:b1:3b:10:d0:d1:16:b4:b3:6b:0f:90:08:17:9b:79:ed:
3f:1f:d2:02:29:ba:9d:1b:93:e4:f7:04:a0:dd:d0:69:f8:e8:
71:3f:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:57:49 2025 by rpki-client