Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gfu9xtu3olPj4-9WIB9Lr85x1-Q.roa
File: gfu9xtu3olPj4-9WIB9Lr85x1-Q.roa (raw, json)
Hash identifier: Kv+oxiIUyxGUUzkNczTqR+ExWAlqFvL51c6MqjJrCKo=
Subject key identifier: 81:FB:BD:C6:DB:B7:A2:53:E3:E3:EF:56:20:1F:4B:AF:CE:71:D7:E4
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01963A7BBF794CEFA378F590CD40CF68EFA5
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gfu9xtu3olPj4-9WIB9Lr85x1-Q.roa
Signing time: Tue 15 Apr 2025 17:25:10 +0000
ROA not before: Tue 15 Apr 2025 17:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 78.135.72.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.88.0/24 maxlen: 24
188.132.188.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.229.0/24 maxlen: 24
188.132.236.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:7b:bf:79:4c:ef:a3:78:f5:90:cd:40:cf:68:ef:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 15 17:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81fbbdc6dbb7a253e3e3ef56201f4bafce71d7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:25:5b:77:22:e1:62:aa:9c:91:5c:7c:d4:
19:d4:05:9e:b4:fe:bc:6e:38:8c:03:e4:03:82:63:
6c:dc:1a:ba:dd:ee:45:56:87:ae:96:d1:a6:d4:8b:
cc:50:da:72:20:b8:74:0b:1a:27:70:65:dd:19:99:
4d:49:ca:7a:9c:50:72:01:05:0b:1f:d8:5d:cf:d0:
8f:76:27:8c:5b:e5:ca:e1:72:88:25:e7:d4:60:06:
b3:ab:6b:1c:da:7b:19:df:a3:f8:e2:13:b8:67:27:
5b:30:52:e0:04:7f:13:93:02:b6:a6:0d:cc:bd:21:
59:66:96:59:cf:19:0d:d4:d0:b0:53:03:e8:82:ce:
49:13:06:06:5a:e4:c0:da:f6:4d:0f:10:93:80:41:
46:e4:04:f5:ec:21:cf:73:a4:93:7a:2b:1b:da:6e:
8a:73:c9:9c:27:b8:eb:2c:5a:10:b8:3e:80:da:13:
55:c8:e5:fe:9f:17:b9:fc:5e:d1:bf:c1:2b:7f:2c:
94:a8:49:41:47:c3:c3:fa:8c:5b:22:5a:aa:5c:78:
3d:bb:40:1b:59:21:25:ce:21:cb:ba:a4:4f:d2:d8:
99:e6:90:bc:f1:07:fd:4f:82:d9:05:5a:29:52:13:
de:a5:4d:76:b1:a9:f8:d5:a1:fd:31:4c:20:da:7e:
45:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FB:BD:C6:DB:B7:A2:53:E3:E3:EF:56:20:1F:4B:AF:CE:71:D7:E4
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gfu9xtu3olPj4-9WIB9Lr85x1-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.72.0/24
78.135.78.0/24
78.135.88.0/24
188.132.188.0/23
188.132.191.0/24
188.132.229.0/24
188.132.236.0/24
212.68.55.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
44:19:46:23:c3:c5:3e:c3:ad:19:e0:09:aa:02:09:5a:26:80:
d0:cc:14:a3:3e:a3:06:43:52:20:27:43:6c:fe:eb:4c:8f:98:
1b:ea:4a:df:48:9d:43:32:b3:85:14:88:90:62:62:c4:2c:9b:
b5:1f:d2:6e:9d:21:91:8f:57:cd:13:e5:e8:a2:73:0a:91:19:
a4:fa:ff:a8:f6:64:4b:c6:94:44:55:90:c5:94:74:eb:41:c2:
71:13:40:b7:04:0a:a6:1d:10:5c:ad:ab:89:af:e3:89:a0:ca:
31:f0:94:6e:c1:c7:d4:5c:a1:c9:42:e8:36:7b:b4:5c:18:c5:
5b:2d:36:44:f8:f1:52:ab:17:a3:7b:9c:b7:0c:9a:b5:b3:62:
38:bd:3c:e4:7b:8b:18:33:32:d2:9c:1a:e6:89:c0:76:bd:c5:
f8:89:3a:f9:81:b2:e0:e9:24:a6:dd:21:ce:30:7b:a7:48:00:
a7:3e:6d:36:99:2c:b6:42:1a:01:c4:cb:dd:0f:22:34:c6:80:
1c:12:d0:ad:34:c9:84:a5:54:0c:c0:06:d7:d7:32:d3:45:53:
1e:b7:77:b7:88:74:28:e2:6d:bf:35:e9:f7:0c:da:8a:1c:81:
53:27:73:3b:87:e2:a6:f5:62:d4:b0:29:a1:17:e8:cc:e7:02:
3d:e3:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:52:04 2025 by rpki-client