Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa
File: pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa (raw, json)
Hash identifier: +D8etcwAhuaAWN3gXHXLkRiaN5uUVNnmE3FwZNf0dCU=
Subject key identifier: A4:67:6F:49:6F:4D:95:8E:E0:82:95:98:75:0C:6C:80:FA:54:90:87
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 019421445A82CFA7866AC5F78C40FA6BB5E1
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42424
IP address blocks: 194.126.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5a:82:cf:a7:86:6a:c5:f7:8c:40:fa:6b:b5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4676f496f4d958ee0829598750c6c80fa549087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:1c:3d:cb:22:55:e6:00:3b:1c:d5:6f:a2:
0a:74:13:9c:9b:2b:0e:fd:8c:f6:60:15:fb:b1:7d:
e4:a1:67:da:c4:8d:4b:29:b8:a7:f7:9e:70:c5:23:
33:c2:bb:3e:de:99:0b:c5:37:cb:47:6c:3f:01:69:
1b:ba:86:db:42:23:35:e1:fa:64:db:12:59:35:bb:
24:95:88:23:80:f9:a5:66:36:97:e3:16:c6:b9:80:
8a:fb:68:a1:50:6d:e3:0a:4b:26:e9:b4:a3:be:c8:
1e:f8:f9:e2:82:e3:c7:8c:83:b9:7c:7d:e8:32:57:
58:be:83:8f:d9:5a:01:11:6b:e8:4e:19:47:dd:a4:
db:e4:ef:7b:77:e9:31:4c:a7:50:ac:58:05:f4:fe:
a5:06:9a:3c:7c:58:61:c4:e3:a1:0b:9a:e5:2e:c4:
6d:b0:52:e9:f0:24:af:4c:c6:d7:52:df:9a:80:85:
65:0f:73:36:a2:a3:a0:e2:46:8d:82:71:1b:7d:57:
ee:d7:32:cf:77:7b:a5:82:8c:bd:fb:5f:cb:7b:9a:
af:c4:66:a4:8c:f0:fe:17:ed:5f:4b:87:2a:f8:41:
d6:1c:58:3f:7b:c6:45:6c:29:a6:44:4a:32:9d:ba:
a9:e2:92:c2:d2:63:26:90:ca:93:07:84:60:4c:ae:
db:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:67:6F:49:6F:4D:95:8E:E0:82:95:98:75:0C:6C:80:FA:54:90:87
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.146.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:86:87:92:be:a7:ec:f3:94:e7:21:15:05:aa:d7:03:b3:78:
8b:43:9f:fa:18:94:69:f7:c9:de:56:b2:98:3c:62:8c:7d:a0:
22:68:de:67:2f:f7:37:d4:ac:18:a5:3b:36:69:71:19:cf:9c:
ad:26:db:7c:81:5f:e1:bd:81:39:30:b9:1c:c3:d5:d3:68:41:
b1:5c:ad:40:29:d7:be:83:e7:5b:a7:22:5b:ca:b6:88:25:bc:
ba:0f:84:a2:5d:f9:39:da:8e:21:81:23:e6:17:ea:61:b9:d2:
76:a4:71:c1:b1:1d:36:4f:ff:4e:1b:2e:69:86:d7:7c:d1:fe:
bc:39:8c:bc:46:e8:62:c7:7f:ae:d1:f9:4e:c0:83:d8:9d:55:
b0:70:17:f0:71:be:06:9a:a0:6f:12:41:56:9c:d6:6e:97:68:
7b:d0:04:c3:50:cb:32:8a:d1:d3:bd:a4:0e:07:7f:fb:ba:f5:
0e:d6:30:36:21:74:46:d9:86:b5:57:e8:25:d2:1e:58:8f:a1:
d5:af:c7:42:b4:59:58:ce:65:17:2e:8c:b8:2b:dd:b3:58:44:
71:72:96:4b:19:93:a6:09:6b:1a:2e:b9:7d:4c:e1:79:08:1c:
f3:a8:15:f9:27:56:9e:28:ce:35:ab:bc:01:af:a0:c0:df:90:
a2:15:fe:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:22:39 2025 by rpki-client