Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/lAN537Pqyt3IsX0kCwc4qs0Cejk.roa
File: lAN537Pqyt3IsX0kCwc4qs0Cejk.roa (raw, json)
Hash identifier: lXT5FVM7+7MTpRMcu84qhNRJxD2GNBRwCl7nT4luylk=
Subject key identifier: 94:03:79:DF:B3:EA:CA:DD:C8:B1:7D:24:0B:07:38:AA:CD:02:7A:39
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 0198DA
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/lAN537Pqyt3IsX0kCwc4qs0Cejk.roa
Signing time: Sun 20 Apr 2025 17:37:31 +0000
ROA not before: Sun 20 Apr 2025 17:37:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4128
IP address blocks: 198.180.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104666 (0x198da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Apr 20 17:37:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=940379DFB3EACADDC8B17D240B0738AACD027A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:74:28:14:ab:69:4d:e1:4a:f4:bf:f8:8b:
3c:f3:d1:13:62:38:93:14:39:df:f2:dc:58:a5:ae:
f3:5e:23:a2:41:ff:cd:33:4f:6c:53:9f:a6:5d:87:
75:12:5d:e9:b1:58:d0:aa:22:0c:18:80:15:92:6e:
15:3d:c6:ce:ef:f4:1f:4b:9d:72:9b:1f:38:76:df:
10:1c:cd:2e:8c:45:8f:94:a3:8b:58:b3:ac:0f:12:
89:fe:c2:0b:4a:ad:e4:bd:cb:46:72:99:0b:bd:66:
a6:5d:12:8f:95:4b:bf:6f:bc:3f:13:4a:fe:36:7f:
c4:0e:18:3d:35:6b:7c:2a:3b:4f:be:66:ea:fb:d4:
3f:d0:c1:52:d5:78:3e:57:53:30:18:39:3d:86:65:
c3:ba:67:cc:6a:32:4b:7e:32:00:89:38:52:fc:76:
71:4a:90:af:85:59:6d:5c:f4:ba:6c:81:92:86:3b:
cc:42:ee:e5:e7:13:db:2f:17:af:06:4c:42:86:38:
ef:b9:99:e7:68:58:24:4c:5c:50:d4:70:37:f0:8d:
95:3b:33:73:54:1b:13:ed:bf:c0:22:7d:01:3c:b6:
ac:2c:da:e8:3c:71:7e:57:8e:78:f3:70:2a:0f:7b:
ab:8c:72:f9:b1:a0:a4:20:f3:cc:6e:8c:ad:44:7c:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:03:79:DF:B3:EA:CA:DD:C8:B1:7D:24:0B:07:38:AA:CD:02:7A:39
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/lAN537Pqyt3IsX0kCwc4qs0Cejk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.152.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b4:fb:3d:b7:4b:40:f3:d4:42:73:13:7d:4c:f6:d1:fa:33:
69:4a:30:d0:5b:5a:f6:47:95:a2:c9:23:6e:1a:bf:f0:eb:2f:
7f:0e:ac:33:ad:fa:55:58:9f:a1:b2:15:34:53:90:d5:2f:ec:
6a:81:3c:8b:b8:90:98:72:2e:58:b9:dc:6b:49:93:4f:0f:e9:
00:11:cc:7f:70:89:e0:2e:4c:c2:c3:a9:04:ff:53:f3:d1:b8:
98:b8:38:03:b2:08:1c:be:be:44:d7:37:24:a8:0c:37:46:64:
d6:58:a4:25:a9:1d:55:9b:32:a3:b8:00:a7:41:c1:91:af:e3:
8c:f7:c8:c3:e2:ff:c9:72:33:f0:4d:22:a0:01:9e:a8:19:45:
d5:29:83:89:ff:ba:55:8e:95:09:90:3d:05:d1:22:f1:9b:fa:
b5:40:40:8f:d0:c0:73:99:76:04:01:62:18:64:f0:1d:92:1f:
57:b9:fa:92:9e:87:ce:86:61:2a:3e:0b:da:0b:16:a3:53:8d:
aa:77:8f:fe:99:6e:24:74:75:8f:59:67:52:cb:85:0c:b9:3f:
98:5f:cf:26:c0:26:d4:0e:24:42:2e:5a:27:31:a7:3a:e3:c6:
cc:ec:2d:e4:6b:e3:5d:f1:0f:e2:3c:07:fa:14:3d:8b:c2:3c:
26:db:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:14:54 2025 by rpki-client