Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Gw8m4F71Ro8bNrJZTCfniFi9UXg.roa
File: Gw8m4F71Ro8bNrJZTCfniFi9UXg.roa (raw, json)
Hash identifier: Kpelzl11O9E/pATLbGmCA+Qw1l2yU3K1pSi3l/TT1n8=
Subject key identifier: 1B:0F:26:E0:5E:F5:46:8F:1B:36:B2:59:4C:27:E7:88:58:BD:51:78
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0195D9C6A88447E3D3DD73898CF5D51D000D
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Gw8m4F71Ro8bNrJZTCfniFi9UXg.roa
Signing time: Thu 27 Mar 2025 22:43:49 +0000
ROA not before: Thu 27 Mar 2025 22:43:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151106
IP address blocks: 45.157.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d9:c6:a8:84:47:e3:d3:dd:73:89:8c:f5:d5:1d:00:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 27 22:43:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b0f26e05ef5468f1b36b2594c27e78858bd5178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:e1:bd:9a:00:ba:a6:c2:c1:a1:4b:60:26:
79:3f:96:f0:86:5b:4a:84:ce:8b:ff:25:53:14:01:
bb:d6:f8:9b:84:76:eb:ce:44:57:70:1e:72:b4:54:
f0:04:18:92:82:64:6f:19:ab:3c:4c:55:bd:e1:7c:
ce:8c:b8:36:f5:b6:31:a9:09:ce:a4:5b:12:fe:6b:
f4:80:f4:f6:d0:e8:e8:73:d7:4d:ff:e9:df:cd:f0:
03:9f:d6:dd:67:7c:96:ba:7f:aa:aa:6f:b2:fd:e8:
90:9e:c0:0b:d3:47:83:6a:0f:94:a6:3f:ec:d6:b6:
cf:ea:10:a6:2a:d9:64:f7:6a:55:d9:89:cb:90:71:
03:d7:75:b8:71:6f:03:cf:20:58:79:dd:6c:21:17:
80:07:e5:49:15:b4:9d:8a:d8:34:5d:8e:f2:5c:11:
aa:b9:c4:25:12:36:c2:65:5b:18:37:82:5e:f2:9f:
e7:8a:c2:f6:15:e8:28:88:ce:ec:a4:78:ad:f2:06:
d6:f9:8b:ad:26:65:b2:3b:1e:e5:9e:67:eb:a2:1a:
2b:a1:bb:86:f6:40:66:6c:72:89:5a:0d:0c:78:70:
b2:d1:77:72:33:a1:22:f8:6d:9f:28:6d:6e:bd:b1:
b4:bb:f6:fa:26:62:a1:54:8d:b0:a2:13:c0:1e:e0:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0F:26:E0:5E:F5:46:8F:1B:36:B2:59:4C:27:E7:88:58:BD:51:78
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Gw8m4F71Ro8bNrJZTCfniFi9UXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.211.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e2:c9:a0:54:b3:ab:53:34:fe:1b:f9:ff:06:ef:07:c8:0c:
7b:5f:78:5a:ed:a5:c0:34:bf:f9:3f:53:1b:4b:8b:4d:0b:52:
f7:9c:55:aa:99:02:fd:59:91:28:94:45:0e:83:04:ba:7c:80:
f5:43:ed:68:f2:46:a0:e2:f4:21:39:85:6b:9a:5b:78:66:d8:
72:9a:12:31:28:b5:b8:12:b5:18:93:80:da:3f:6f:2e:71:6a:
01:69:d1:51:ee:91:fe:a4:1f:ef:2c:af:76:6d:0a:4b:d4:05:
f6:f0:44:67:b4:47:72:28:ed:f9:c1:91:f7:dc:02:43:14:27:
a5:99:8b:7a:4d:a4:0f:26:91:53:eb:e0:db:df:ff:d6:aa:c5:
e6:d6:2e:40:d3:3c:67:50:6d:e5:39:42:eb:18:76:67:b7:17:
c5:cd:57:bc:c4:31:9a:8b:f5:84:43:05:2d:7b:15:ae:7a:a8:
95:51:94:31:cd:c1:a9:96:30:13:7a:5e:78:db:4e:ff:0f:fa:
b8:ed:70:96:f1:09:44:dd:18:e0:e0:f6:28:db:b9:98:e7:94:
36:e6:e9:b8:85:af:02:f3:a9:68:fa:26:07:91:6f:e2:18:8d:
d7:4c:9c:78:19:4f:41:c7:a3:5d:d4:a2:fc:5c:4e:2a:f9:62:
a6:38:58:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:31 2025 by rpki-client