Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/1GAA9RXUZFiO200bDHHgj0azbq4.roa
File: 1GAA9RXUZFiO200bDHHgj0azbq4.roa (raw, json)
Hash identifier: tS4ee1uFzhVa+UdElOzwvh+A6ENy1LuuOQxxEe9qEtY=
Subject key identifier: D4:60:00:F5:15:D4:64:58:8E:DB:4D:1B:0C:71:E0:8F:46:B3:6E:AE
Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial: 019426D9C5808E321FFD109B21FA4BF37458
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/1GAA9RXUZFiO200bDHHgj0azbq4.roa
Signing time: Thu 02 Jan 2025 11:49:53 +0000
ROA not before: Thu 02 Jan 2025 11:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.195.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c5:80:8e:32:1f:fd:10:9b:21:fa:4b:f3:74:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Validity
Not Before: Jan 2 11:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d46000f515d464588edb4d1b0c71e08f46b36eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:ad:2a:8d:56:5f:28:67:64:6f:41:00:25:
ad:af:23:41:df:e2:e4:29:73:cd:a5:73:c2:58:d1:
c5:1e:44:11:14:e2:51:fb:cd:45:93:ae:19:51:e8:
2c:3f:27:cf:a8:4f:db:7b:40:2f:41:0a:f8:0b:35:
cc:4f:04:92:b9:f9:14:20:d6:96:d9:24:60:73:75:
ea:bb:e9:b2:f0:51:d8:1d:6e:fa:d1:5e:1a:98:93:
90:b5:4c:b2:04:13:c9:2b:38:c9:00:e8:fa:31:73:
29:2f:bc:4e:b2:08:1d:42:1b:e6:1e:7a:fa:de:79:
9f:d8:4c:e2:8c:08:80:01:c4:b3:c5:c9:74:72:b2:
a2:27:b4:93:e3:04:bb:fe:05:35:4d:f4:07:f7:f9:
20:db:fd:90:51:cd:ba:75:4f:d7:b4:de:6d:47:93:
4e:32:53:d3:84:8a:17:f0:c2:c8:d5:90:33:11:d6:
0c:c4:d0:cd:f1:aa:31:af:1e:4c:24:55:62:df:6c:
9a:f6:2e:0e:b3:75:54:cd:3c:d6:72:61:df:0f:3c:
3a:0d:5a:20:24:d3:d3:ca:e4:48:e4:eb:6e:22:9b:
88:0b:57:74:d7:fd:eb:24:ce:8b:97:02:c7:3e:62:
4c:9e:17:5d:f2:a2:de:52:ba:52:9a:e1:db:6e:7a:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:60:00:F5:15:D4:64:58:8E:DB:4D:1B:0C:71:E0:8F:46:B3:6E:AE
X509v3 Authority Key Identifier:
keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/1GAA9RXUZFiO200bDHHgj0azbq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.148.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:cb:82:66:5d:b3:0c:1e:65:f2:bb:50:5f:d4:ce:d7:85:06:
cf:fe:43:15:80:7d:7c:71:ce:07:3c:80:b4:db:fb:a6:13:a8:
47:11:9b:f8:a3:b0:d7:bc:e1:e5:f9:b3:34:8a:9b:c0:ab:a1:
3a:eb:fa:02:71:23:8b:6a:a6:11:23:d0:2f:a0:e1:93:86:0f:
5e:cf:16:2c:24:5d:3c:3d:4f:30:62:a8:05:a1:4a:3f:9d:17:
88:6d:0d:4b:42:b8:a2:ae:68:93:b3:1e:c7:1d:b0:12:62:32:
27:6a:9a:44:36:16:48:25:13:c4:79:ce:0d:36:b7:91:bc:02:
2e:ee:0b:c5:ab:e9:98:4a:21:67:1b:ab:8f:7c:2e:09:67:3e:
75:f7:63:73:58:cb:89:f7:71:db:50:e4:be:5f:ea:5b:ed:23:
59:3f:9c:bc:7e:60:eb:8c:5d:11:04:f2:fd:97:a4:af:3e:00:
49:88:4c:13:3a:18:35:b1:44:ae:61:70:15:aa:2c:52:d2:e9:
0a:c2:0d:17:47:31:ca:5b:dc:f6:98:60:4e:06:a5:21:41:7c:
8b:a6:7b:f1:88:21:d5:c6:ef:02:cd:59:0a:74:35:46:4b:87:
06:2d:3a:52:11:f3:06:39:89:a1:01:60:f7:d0:d3:4b:8d:b1:
6e:f1:d1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:35 2025 by rpki-client