Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/GndNIt9G7qZhnR5IIBXP3kbyL_4.roa
File: GndNIt9G7qZhnR5IIBXP3kbyL_4.roa (raw, json)
Hash identifier: SBp7dhTz+pfIJxl9syItY+Kj164I5JLZ7F2dz4iFPso=
Subject key identifier: 1A:77:4D:22:DF:46:EE:A6:61:9D:1E:48:20:15:CF:DE:46:F2:2F:FE
Certificate issuer: /CN=74633239baa2103106a6260ddfd7e78b8094355c
Certificate serial: 019424B3A2B20CDE24DC1E754247A4BF16E8
Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/GndNIt9G7qZhnR5IIBXP3kbyL_4.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31074
IP address blocks: 194.146.125.0/24 maxlen: 24
195.242.158.0/24 maxlen: 24
195.242.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a2:b2:0c:de:24:dc:1e:75:42:47:a4:bf:16:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a774d22df46eea6619d1e482015cfde46f22ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:50:43:12:fd:b4:01:33:f2:6f:f2:72:90:
8f:4d:f4:1a:85:f1:50:03:36:17:da:34:3b:85:ba:
a1:5b:f7:de:e6:73:23:5c:31:43:dd:58:09:a5:46:
95:8b:2c:a7:c8:48:b5:38:41:57:f0:75:90:70:69:
0d:0e:c9:ec:ec:14:94:72:76:13:bc:2e:73:a4:96:
e4:36:80:f8:5d:85:15:d7:37:fd:7c:fb:f9:24:3c:
a9:4f:8d:8a:39:d9:56:6c:10:73:53:8b:bb:bf:1c:
35:c7:81:2e:df:a7:35:f7:fd:fd:be:13:e2:e6:51:
ae:3c:fc:0b:ba:f7:1d:a7:99:25:07:db:48:94:8b:
c5:95:f4:42:58:f2:a9:90:2d:34:b2:84:66:b5:7d:
1f:5b:ec:c0:e2:39:c4:c5:1b:64:cd:b3:cc:c6:b0:
d2:3e:34:1b:db:e1:0c:f0:34:2c:8d:bf:75:16:61:
23:c0:c4:e3:45:8b:88:a0:b7:54:ad:12:a8:0b:41:
ac:ea:e6:f2:13:3b:9c:fd:ba:a4:43:47:9e:15:a9:
8f:51:8a:27:42:fe:1d:19:6a:07:44:ce:76:85:7c:
aa:df:b8:45:10:48:e3:9a:9c:7c:f6:6c:5b:57:15:
b7:9d:e9:2b:a7:5f:b2:39:75:20:a8:d5:48:5d:ac:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:77:4D:22:DF:46:EE:A6:61:9D:1E:48:20:15:CF:DE:46:F2:2F:FE
X509v3 Authority Key Identifier:
keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/GndNIt9G7qZhnR5IIBXP3kbyL_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.125.0/24
195.242.158.0/23
Signature Algorithm: sha256WithRSAEncryption
44:fa:f1:81:8e:b7:86:d8:1c:9a:d1:fb:87:02:b1:10:8f:8c:
f4:5f:e4:d0:2f:89:d7:85:01:e1:e6:4e:30:2d:df:ad:14:f6:
9d:91:e0:db:6f:cc:2f:b2:bb:e7:5c:c8:ea:2f:61:6a:cf:fb:
bf:a9:33:e0:4d:49:36:c2:e8:ab:21:1f:fa:b0:cf:3d:c1:45:
c7:46:6a:a3:dc:d2:74:90:61:03:d5:f7:c6:f8:ff:2f:6f:26:
aa:5a:e6:20:62:7f:14:98:e9:b8:4d:bf:cb:31:e0:4d:95:d9:
af:c5:ca:72:44:98:5a:53:07:24:f4:f4:05:42:66:da:62:26:
5a:03:e5:c7:70:9d:4b:09:9a:d8:82:b3:6a:36:66:e8:ad:35:
65:77:f2:e6:c1:f2:d9:fa:9b:26:5a:40:1c:4a:26:04:77:7b:
5f:89:c7:76:87:e9:0a:f0:ea:d2:ab:be:67:1b:89:78:88:bf:
73:ae:d7:88:e9:42:ba:ba:f1:d7:54:91:9f:fd:f1:b2:cb:d5:
6a:8e:2d:14:ae:1b:1e:5a:9f:dc:bb:b2:3d:d7:5d:74:73:10:
3a:db:9b:a8:17:57:9f:48:7c:c3:a6:c9:47:89:76:25:39:13:
76:9a:c3:ff:d2:b2:61:c3:5e:3d:8c:82:97:1f:c0:e8:b6:33:
a9:5c:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:06 2025 by rpki-client