Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GOFnou8WK89THsbnG87dMgPau78.roa
File: GOFnou8WK89THsbnG87dMgPau78.roa (raw, json)
Hash identifier: ZCYS2bASuDd0bGnFFIF+l6rOwcXnkJCoQ2rPkQGsl/0=
Subject key identifier: 18:E1:67:A2:EF:16:2B:CF:53:1E:C6:E7:1B:CE:DD:32:03:DA:BB:BF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0196394CB5E490FF98977D9D22E761176C00
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GOFnou8WK89THsbnG87dMgPau78.roa
Signing time: Tue 15 Apr 2025 11:54:10 +0000
ROA not before: Tue 15 Apr 2025 11:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35004
IP address blocks: 93.170.116.0/22 maxlen: 24
95.46.212.0/22 maxlen: 24
95.47.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:4c:b5:e4:90:ff:98:97:7d:9d:22:e7:61:17:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Apr 15 11:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18e167a2ef162bcf531ec6e71bcedd3203dabbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:c8:f4:ff:4b:f3:23:e7:0f:73:fc:54:8e:
c0:6b:48:db:5d:2f:71:1c:f4:8e:78:e7:a8:be:7e:
c2:71:15:9e:b2:dc:5a:be:d8:54:ac:4e:b7:f2:3d:
ef:0c:7c:27:75:ad:1d:08:28:46:3d:c4:38:ce:a9:
7d:0e:87:fa:33:27:4a:98:f4:55:ec:8a:4e:9b:5b:
e3:56:a0:22:a4:a7:3d:09:d7:af:26:75:24:f8:4d:
f2:89:80:48:95:72:92:bf:60:90:d7:29:7d:9e:2f:
d6:fe:38:54:ae:61:87:e7:84:f1:56:9b:07:0e:c3:
eb:84:98:62:f5:f8:38:c9:0b:20:ee:c4:ba:5b:7d:
17:47:01:13:16:1e:d5:e1:d5:fe:47:ae:cc:77:d4:
54:b7:1a:91:7a:20:0f:d7:70:85:19:c5:32:39:a9:
c1:31:eb:93:24:49:50:47:38:cb:1d:29:ad:f0:c4:
5a:32:5a:2f:05:2b:67:71:d8:9b:34:78:d3:41:68:
e5:55:16:f2:87:9e:e1:be:92:74:75:1d:dd:2a:79:
2a:23:19:4c:de:c2:a8:dd:b7:ec:9d:d7:70:27:19:
06:b7:60:3f:91:f3:52:e6:05:71:bf:cc:3d:9a:57:
02:bb:cc:d1:d3:ae:c0:79:04:8e:f7:bc:05:3f:9e:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E1:67:A2:EF:16:2B:CF:53:1E:C6:E7:1B:CE:DD:32:03:DA:BB:BF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GOFnou8WK89THsbnG87dMgPau78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.116.0/22
95.46.212.0/22
95.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e6:1b:07:2b:73:e8:dc:11:77:2a:90:b4:7b:91:ba:3c:29:
cb:13:70:f5:62:76:d5:58:ab:de:d4:c1:3d:20:12:f7:83:b4:
ce:65:78:d8:78:9c:62:e1:51:9a:ad:6c:ed:98:ed:17:58:73:
92:ca:04:f1:bc:b7:b5:32:a7:c1:93:30:49:99:47:ba:f9:ee:
27:87:e6:e9:df:4c:9b:05:3e:c1:9a:4c:05:61:62:7e:07:d9:
4b:42:60:2e:64:07:6c:d3:d3:17:e6:8c:eb:e0:58:4c:13:f2:
cc:03:7d:af:c7:3f:aa:bd:36:2e:0c:22:bb:e1:b2:97:71:fb:
7d:29:73:75:87:e1:40:e6:24:74:06:ca:2b:22:b6:41:34:3b:
21:a1:cb:50:30:c6:06:e4:ba:9e:5f:91:91:25:53:b7:b9:61:
42:ce:b4:d4:e9:c9:63:3c:3c:1c:c6:51:28:75:64:03:fb:27:
5b:45:74:13:b0:c8:d1:86:50:77:e4:73:7a:c2:47:0c:c9:cb:
44:ca:64:21:d8:6c:4f:6c:27:ca:f3:05:ab:68:96:8e:33:8b:
14:c7:05:2a:71:a9:3f:d6:ce:96:80:0d:8f:9f:0b:1f:fd:39:
8f:e9:58:9b:8b:98:ac:33:a4:e6:7d:c5:0b:f7:0b:87:bc:b7:
33:c2:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:27:42 2025 by rpki-client