Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/xF8fZFbI8NRA4qk_N5CLpw6Nmj8.roa
File: xF8fZFbI8NRA4qk_N5CLpw6Nmj8.roa (raw, json)
Hash identifier: uVos6KXGCj74GgHG7sOPwpP0it60WyuUCM+9kzZw+Fw=
Subject key identifier: C4:5F:1F:64:56:C8:F0:D4:40:E2:A9:3F:37:90:8B:A7:0E:8D:9A:3F
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 0198D5
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/xF8fZFbI8NRA4qk_N5CLpw6Nmj8.roa
Signing time: Sun 20 Apr 2025 17:37:29 +0000
ROA not before: Sun 20 Apr 2025 17:37:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3130
IP address blocks: 198.180.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 22:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104661 (0x198d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Apr 20 17:37:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=C45F1F6456C8F0D440E2A93F37908BA70E8D9A3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:fb:cf:53:b6:ce:8f:7f:3e:42:80:b8:c7:
25:ae:04:6c:0c:21:a9:59:13:b9:78:c6:b9:95:1e:
82:69:c6:36:64:3b:a8:f5:c7:72:d4:63:46:13:e1:
29:64:67:e3:cf:fa:25:52:e9:58:70:9a:fb:da:b6:
c0:e7:db:31:c1:4c:08:3e:85:b3:67:bb:b5:9e:bc:
6f:25:7e:af:c0:33:ff:04:3f:f4:ef:02:9a:57:46:
2b:e5:7c:87:38:36:1d:5e:89:3f:25:5e:79:9c:e7:
34:19:e5:de:78:0f:dc:02:65:d1:21:43:8a:4b:d6:
2e:16:fb:6b:ff:4d:1e:84:46:58:94:3a:3f:eb:ae:
e9:8b:7c:c9:0c:d2:8b:84:d0:e7:b7:f5:fd:7e:91:
89:d0:96:49:9d:cb:75:63:c8:21:58:64:0f:d9:bd:
4b:db:e0:74:2f:1d:75:91:c0:f1:af:c9:04:a7:d4:
e9:4c:db:d0:c7:21:fb:23:46:52:8a:56:bd:74:a4:
b7:40:69:12:fc:3b:b7:c1:fb:36:7d:4e:f2:c4:c5:
16:52:52:d9:78:91:ad:fe:38:86:bf:9f:2b:b8:78:
da:df:a9:a5:2e:98:69:30:07:86:ed:df:86:04:f9:
a9:59:c9:68:ac:cf:6a:b7:61:7b:40:1f:f2:af:40:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5F:1F:64:56:C8:F0:D4:40:E2:A9:3F:37:90:8B:A7:0E:8D:9A:3F
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/xF8fZFbI8NRA4qk_N5CLpw6Nmj8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.153.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:bf:e0:48:08:a9:d9:a7:72:c1:f0:48:65:1b:57:1e:f2:41:
3b:01:0c:a2:df:90:a8:7c:d6:ad:26:da:86:81:28:2e:83:37:
74:40:c5:0d:51:3d:9a:28:6f:84:6f:41:15:12:fb:b7:38:49:
cb:04:53:9a:44:7c:5b:9f:b4:d4:a7:ab:41:2e:a8:bd:40:fd:
55:c6:97:dd:1a:2f:9c:4f:39:b6:22:02:2c:69:e0:12:84:d4:
70:c6:13:56:65:2e:d7:58:ee:bd:74:0e:ed:d9:86:88:48:fa:
2d:c3:7a:d4:ed:48:04:e5:9d:06:37:d2:a4:b0:c6:28:54:27:
ec:c6:da:bf:2d:3d:fe:f6:43:af:c9:5c:0b:57:8d:e2:a2:c4:
f7:d6:e3:d0:37:5a:b5:e0:7c:f4:5e:65:ad:27:35:fd:44:31:
4f:48:16:5b:f9:e0:b4:d9:c0:63:9c:b8:21:00:87:0a:86:97:
f1:e4:37:6f:24:5b:28:2e:8e:b0:1e:f5:62:20:fd:71:f7:80:
6b:42:f4:21:dc:e5:38:d0:ce:55:1b:f0:ed:64:ea:1e:fb:78:
30:ed:cc:1f:fc:9f:a2:6b:5b:a8:d0:94:5b:dd:92:df:a1:6f:
c1:20:47:53:34:ea:f9:ac:c8:9b:fe:21:92:ba:b6:8b:c3:56:
47:d0:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:55:07 2025 by rpki-client