Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/G6NF9ymfo6IBfncxr6hZzT8shrA.roa
File: G6NF9ymfo6IBfncxr6hZzT8shrA.roa (raw, json)
Hash identifier: KN9APMhcp+nyIXYv7KyJxAwbCh/QgNBc6XW/57QK7/c=
Subject key identifier: 1B:A3:45:F7:29:9F:A3:A2:01:7E:77:31:AF:A8:59:CD:3F:2C:86:B0
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C5B0BB1D2856DA57997B45685C094
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/G6NF9ymfo6IBfncxr6hZzT8shrA.roa
Signing time: Thu 02 Jan 2025 09:50:22 +0000
ROA not before: Thu 02 Jan 2025 09:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12730
IP address blocks: 5.143.192.0/19 maxlen: 19
95.106.0.0/17 maxlen: 17
212.26.224.0/19 maxlen: 19
212.26.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:5b:0b:b1:d2:85:6d:a5:79:97:b4:56:85:c0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ba345f7299fa3a2017e7731afa859cd3f2c86b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:ab:05:c4:6d:ca:d1:7a:83:64:b8:33:b3:
80:59:94:5d:0c:42:2c:b9:e4:e2:d8:05:ed:6b:5c:
ea:a1:87:e4:91:db:73:76:69:5e:4e:a3:14:08:f9:
a7:56:e7:f3:0f:58:f1:77:ce:5c:b3:ee:8f:4f:38:
66:31:85:db:c0:5e:51:af:cf:6c:ef:e9:38:23:3c:
de:6e:99:ea:0e:a8:d0:8c:f5:08:91:d2:4b:32:12:
66:e5:8d:03:7e:e5:9e:8b:8a:be:90:f1:18:cf:22:
a3:64:31:72:64:af:ea:cd:88:eb:0f:c3:70:9d:fe:
dc:9b:c6:9d:25:de:74:c2:9e:48:4f:01:51:cd:2d:
49:18:39:6e:78:e1:76:6f:07:8a:db:6f:2f:db:43:
76:cc:b7:6d:63:9c:58:63:fb:a1:83:d1:13:65:de:
aa:79:7b:58:67:c6:f8:50:78:8b:74:13:fd:67:b1:
74:c2:d0:0d:08:7b:00:2c:a6:4d:ba:23:98:26:88:
0d:9c:d3:e2:fd:dd:0d:57:d9:54:5b:20:d7:62:77:
31:03:ea:a7:7e:28:46:a4:99:02:9a:99:09:ab:68:
00:cc:8c:8f:6c:7b:38:c1:a5:4a:c8:b6:6a:09:90:
78:2b:ad:35:48:b0:08:26:6a:90:01:7e:33:7a:60:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A3:45:F7:29:9F:A3:A2:01:7E:77:31:AF:A8:59:CD:3F:2C:86:B0
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/G6NF9ymfo6IBfncxr6hZzT8shrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.143.192.0/19
95.106.0.0/17
212.26.224.0/19
Signature Algorithm: sha256WithRSAEncryption
89:02:f9:41:e1:90:e6:11:0b:67:66:8a:3e:f3:39:0e:3e:30:
e6:17:35:ae:02:4c:c1:04:5b:be:a8:ac:d7:26:9e:af:e6:30:
d5:24:cf:f2:78:15:56:f0:6b:a8:9d:c1:16:ea:82:6c:15:42:
a0:68:28:6c:72:6d:8d:21:bc:72:98:9e:da:dc:d1:6e:f0:9c:
33:4f:9b:97:8c:7e:80:79:5b:a8:12:f9:ab:da:bf:f7:0d:88:
ce:6d:b3:79:28:47:c1:6a:5a:26:ec:29:40:46:32:63:be:b3:
54:0a:96:65:b1:26:c2:d9:cb:27:31:92:1e:13:01:e7:db:93:
1b:2b:a7:58:8d:cf:e7:14:4d:a0:12:ec:5a:b0:ce:bc:ea:7a:
39:80:bf:c9:84:8b:40:14:0b:f6:a0:da:bc:26:77:26:cd:85:
ae:8a:92:68:63:1e:53:2d:2f:b8:b4:e5:1e:3a:7e:ae:8e:ff:
ff:7e:5c:5e:93:e2:dd:02:02:62:c5:eb:3b:8b:ef:d6:81:29:
43:48:f4:9d:48:35:f7:8b:5e:86:cd:4b:2e:90:73:a0:a2:70:
10:eb:26:6d:60:b0:ba:94:9e:f3:2e:8b:17:27:46:c2:91:f0:
07:c5:73:56:d9:cf:d9:01:42:39:78:5d:fa:bf:11:2c:29:9d:
60:3c:ca:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:58:43 2025 by rpki-client