Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/gU4Wjq3r_lqNJDluPW5hQWNBddg.roa
File: gU4Wjq3r_lqNJDluPW5hQWNBddg.roa (raw, json)
Hash identifier: UDmHSPktg8sQ/iOzicfVT6k8BPA87bEFOQcANiIltxY=
Subject key identifier: 81:4E:16:8E:AD:EB:FE:5A:8D:24:39:6E:3D:6E:61:41:63:41:75:D8
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EDCCA069599CDEA6D198BBD2B6349
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/gU4Wjq3r_lqNJDluPW5hQWNBddg.roa
Signing time: Thu 02 Jan 2025 05:48:27 +0000
ROA not before: Thu 02 Jan 2025 05:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208993
IP address blocks: 2a0e:aa07:f040::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:dc:ca:06:95:99:cd:ea:6d:19:8b:bd:2b:63:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=814e168eadebfe5a8d24396e3d6e6141634175d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:b7:fb:a3:25:17:a5:23:27:c6:0c:7d:53:
1e:e4:9e:35:df:71:4b:52:8e:e0:df:50:0f:aa:c2:
fb:3f:f7:ce:a8:7c:9f:09:07:4e:b6:33:56:20:7c:
d2:9a:47:8e:06:5e:42:4f:74:b3:fd:3d:76:83:fd:
08:3d:90:6a:ea:10:17:45:c9:90:db:90:f5:7c:93:
e7:20:32:4b:83:0c:7d:f5:a0:de:11:fc:10:84:fd:
63:38:76:b2:78:01:b3:26:80:48:e2:42:03:02:87:
28:42:c2:e8:84:58:68:62:af:c2:60:40:3d:2d:46:
30:46:4b:f8:34:20:2e:67:dd:d6:fa:81:11:a7:16:
a6:e0:a8:9f:31:b9:af:99:96:e4:57:02:35:ad:66:
b8:53:a1:a9:9a:fc:74:a5:17:54:f7:ac:cc:6a:84:
6b:6f:1a:4e:62:3d:9f:b6:4d:91:32:e4:50:76:63:
4f:78:8f:23:70:15:30:79:b0:88:73:de:9c:66:81:
83:c8:6d:58:c8:2e:55:75:4e:11:90:0d:07:f8:62:
3e:49:66:d6:f0:0c:5f:ea:ce:64:bb:42:6f:64:a1:
df:1f:ce:6b:b0:d8:74:d8:5b:3b:ee:4b:2b:7f:8f:
48:ae:b9:75:3e:85:14:f4:fe:b7:5c:ba:52:68:a3:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4E:16:8E:AD:EB:FE:5A:8D:24:39:6E:3D:6E:61:41:63:41:75:D8
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/gU4Wjq3r_lqNJDluPW5hQWNBddg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f040::/44
Signature Algorithm: sha256WithRSAEncryption
20:4b:b1:80:1b:4a:e3:1a:49:fc:a2:9a:ad:18:b3:c5:1c:6b:
ab:ca:d5:eb:06:f0:27:b0:00:95:b6:e2:0f:7e:58:ae:32:de:
2e:d8:8f:4d:cd:e2:b0:af:4b:6c:bf:a9:6b:99:b1:65:6d:29:
1e:85:d5:07:22:7b:d3:ef:01:67:10:dd:d6:c5:da:a2:c7:e8:
1f:12:91:06:49:b2:c2:04:d8:3b:16:01:8b:b5:09:e7:de:42:
45:be:75:e0:56:44:71:af:6e:b5:a2:0d:cd:8c:ff:d0:3b:40:
95:c3:4d:83:bf:23:2f:a9:d4:5c:f9:df:d1:c0:5b:d6:3b:3a:
fc:e7:ef:08:a4:0b:62:41:9f:f0:99:1f:cd:d5:3b:0b:72:1a:
db:c4:99:d6:cf:eb:62:b5:88:a9:3f:78:6f:f8:95:db:3f:e7:
4f:d9:1f:19:a5:6d:9e:90:f3:46:7b:30:76:82:01:dc:a6:ba:
92:e5:a2:f6:6c:c6:82:07:ed:c1:00:17:30:79:cc:f2:40:5c:
4f:66:1b:b7:a7:92:a0:37:4f:88:c0:3f:32:45:51:11:b2:58:
ba:7c:8c:c4:5e:7d:20:58:47:00:a6:7c:80:51:b4:bf:0e:fa:
79:4e:a2:6b:b7:3e:f0:0d:d6:50:df:ca:b3:6c:a4:62:d0:70:
b5:86:46:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:50 2025 by rpki-client