Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/gQYzmf6ITShbiQOv-E4IPv9srh4.roa
File: gQYzmf6ITShbiQOv-E4IPv9srh4.roa (raw, json)
Hash identifier: fi2BKmp1xnFSLXfCDfMkmvC2sWL44Qwu+h1WLCwFISs=
Subject key identifier: 81:06:33:99:FE:88:4D:28:5B:89:03:AF:F8:4E:08:3E:FF:6C:AE:1E
Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial: 01965D72DB153504981CEBCE8D6758183FCB
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/gQYzmf6ITShbiQOv-E4IPv9srh4.roa
Signing time: Tue 22 Apr 2025 12:22:10 +0000
ROA not before: Tue 22 Apr 2025 12:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30815
IP address blocks: 194.46.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:72:db:15:35:04:98:1c:eb:ce:8d:67:58:18:3f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fe040242651353d556b8c4240082190f271d13
Validity
Not Before: Apr 22 12:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81063399fe884d285b8903aff84e083eff6cae1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:39:be:5d:f2:61:ab:86:9b:86:7c:dc:3b:
14:de:b2:c0:5f:1b:4b:00:11:c0:39:53:b3:c1:1e:
a9:11:75:90:09:7a:62:d9:33:18:99:ff:51:91:1a:
2f:71:18:6e:70:91:af:b8:99:9a:ca:bf:eb:62:e6:
10:a0:e8:76:be:1a:9d:08:05:a9:c9:87:81:37:97:
1f:98:f3:ea:c3:16:27:e8:84:28:59:07:34:49:be:
70:35:77:4e:15:ed:cf:cc:32:db:52:ce:ae:de:8f:
3a:81:37:4c:03:00:44:34:75:b0:e3:25:e5:31:fe:
3e:71:72:fd:fb:1b:b9:65:2a:d8:1b:8b:dc:03:d3:
68:3b:00:a6:ed:a3:20:72:e6:90:86:94:50:27:76:
6d:f2:cd:e1:5a:d7:50:09:7d:5d:9e:54:98:e8:e1:
4c:ec:34:2a:ce:73:bc:28:32:d4:e2:a9:61:fd:d7:
4c:f9:b0:84:f5:ef:3f:fe:24:6e:92:fb:bf:28:49:
48:d5:a0:d5:75:b2:ee:97:f1:bb:45:06:17:7c:7e:
f4:74:d8:1b:db:37:12:13:13:4f:b1:c2:f4:0c:dc:
a4:bd:63:72:df:51:b9:e2:13:4e:f3:5e:7f:60:0b:
2a:ee:d6:82:73:99:02:1e:03:f6:a4:0a:3d:6a:29:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:33:99:FE:88:4D:28:5B:89:03:AF:F8:4E:08:3E:FF:6C:AE:1E
X509v3 Authority Key Identifier:
keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/gQYzmf6ITShbiQOv-E4IPv9srh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.46.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:83:39:8d:25:51:5d:48:1e:c6:8b:f1:41:28:d1:b3:05:72:
fb:b1:25:72:91:e4:41:a4:51:53:47:bf:96:7e:72:be:70:b5:
82:3f:36:12:d6:f9:ae:33:b9:c0:5d:e0:36:69:13:2e:74:96:
31:9a:32:15:1c:43:9a:e4:8e:7f:cf:50:d0:82:62:30:ee:8e:
3e:9b:94:b6:c3:3c:66:6b:da:6f:13:8e:6e:19:d9:c9:cc:f8:
35:32:a1:39:ef:2d:84:2c:8b:c7:ea:44:a5:bf:aa:13:02:01:
51:58:26:69:8b:19:c9:6f:dc:7d:09:2b:11:91:3d:bf:9e:24:
1f:d2:e1:fd:4c:04:ca:c8:47:b6:f3:50:8b:45:e6:3f:80:d0:
fd:b0:02:94:43:96:ff:7b:19:a1:54:f1:b0:d4:0f:8d:2a:2c:
02:d1:51:33:92:d3:07:07:ae:b9:de:cc:de:48:a4:15:69:c1:
d9:f8:5f:5c:84:be:b6:dc:ab:a7:0d:50:b0:45:cd:de:66:18:
28:f4:bb:9c:08:b4:19:1d:aa:d2:bc:fc:d4:fb:56:8b:2f:89:
ab:a6:e8:cb:67:63:63:68:fd:72:67:94:cf:84:77:70:3e:e5:
89:4e:5b:d0:50:03:c5:af:a9:75:b3:a8:14:81:07:26:3e:1e:
16:2a:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:13:32 2025 by rpki-client