Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/gS9qTUkzusPVnwIVsvZEcIJfkGw.roa
File: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (raw, json)
Hash identifier: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=
Subject key identifier: 81:2F:6A:4D:49:33:BA:C3:D5:9F:02:15:B2:F6:44:70:82:5F:90:6C
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 019427B3C7B0751DD09C506AB23736DBDC51
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/gS9qTUkzusPVnwIVsvZEcIJfkGw.roa
Signing time: Thu 02 Jan 2025 15:48:00 +0000
ROA not before: Thu 02 Jan 2025 15:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51328
IP address blocks: 195.226.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:c7:b0:75:1d:d0:9c:50:6a:b2:37:36:db:dc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: Jan 2 15:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=812f6a4d4933bac3d59f0215b2f64470825f906c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:20:0e:4f:50:3d:83:1c:15:97:6a:56:ad:
41:d3:30:76:a1:fa:34:8f:b7:ac:25:69:02:60:60:
3d:bc:f6:68:19:ab:f0:1f:fd:c9:50:fa:6e:bd:3d:
0e:85:1d:ee:65:de:3a:d0:d3:5f:db:62:1f:ea:a1:
d6:96:8a:e1:46:4c:8f:49:27:d5:2d:74:54:a1:17:
eb:3c:26:64:b5:1c:a1:cd:e5:5c:c0:b2:f6:39:a1:
8a:40:bd:92:d1:4d:42:9f:d7:4b:48:de:92:74:df:
30:d5:2c:7b:35:7d:bb:b8:93:1c:ac:89:cf:31:5a:
f9:05:9b:4a:8d:c3:b7:c0:7e:e9:23:cf:6c:8b:f1:
1d:22:14:77:a6:68:a4:de:38:1a:14:63:26:1f:5a:
b5:cc:f1:02:09:a1:f9:71:19:6e:82:f9:b0:3a:76:
4b:f2:ff:85:55:a8:67:84:bc:e3:4c:8a:7a:8c:75:
f8:75:e2:d7:61:61:c1:d1:f6:92:75:da:c3:c2:a3:
ef:d2:14:5b:5d:e3:31:2f:bf:8f:4a:04:97:be:1b:
ac:49:e6:2f:7d:8d:ba:9e:e8:cc:c7:16:e2:3c:24:
19:c1:35:bc:96:96:1f:48:42:5c:fb:4f:4f:76:b2:
70:1f:76:b5:f7:48:6a:6f:5c:e3:94:d8:de:1f:ef:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2F:6A:4D:49:33:BA:C3:D5:9F:02:15:B2:F6:44:70:82:5F:90:6C
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/gS9qTUkzusPVnwIVsvZEcIJfkGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.206.0/24
Signature Algorithm: sha256WithRSAEncryption
98:df:ab:5a:bf:ee:cd:37:82:96:a0:83:24:b4:c1:71:e7:8d:
11:fa:c3:a2:48:1e:ba:36:73:c4:23:6a:af:79:4c:fd:90:34:
44:43:0c:ba:27:86:3a:ff:87:8c:70:72:7f:41:87:14:b4:6f:
47:95:e3:0c:48:29:5c:fe:da:bc:b7:b1:e8:a9:ea:64:68:c1:
4b:3a:5a:3b:0b:11:f2:88:74:ca:3d:82:b5:5d:c4:ee:ec:24:
ab:64:ae:6c:9f:d2:63:f5:69:22:63:f3:9b:7b:0f:95:b8:6f:
4b:9f:ac:c0:8b:c2:61:06:47:2b:19:0a:e9:58:84:df:28:0a:
7b:de:6c:cc:e3:94:9d:e5:77:2c:f9:97:73:5d:3d:15:5b:b9:
b3:94:f6:07:98:96:ea:f4:78:b5:de:8e:0a:d1:b7:ff:2a:6e:
0a:4c:f3:90:5c:d8:c2:f4:b3:38:eb:97:c4:d3:c0:e7:5e:67:
6b:96:45:1b:a8:8f:06:88:fe:2d:58:b8:c3:23:40:93:dd:d7:
b0:4c:4b:07:b4:66:81:bd:ad:51:33:2b:8d:b3:3a:83:d0:1b:
5d:f7:97:0b:98:95:2c:93:7c:9f:a5:d3:9e:6c:83:a4:be:73:
e1:bb:e8:c4:bd:ef:f8:1f:15:33:c5:93:fe:37:df:0f:b0:00:
c2:41:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:49:24 2025 by rpki-client