Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/GYQEfAUHW7dZgctfSOEiK9IcuBg.roa
File: GYQEfAUHW7dZgctfSOEiK9IcuBg.roa (raw, json)
Hash identifier: Km85w7FHDGWwEv7yzqhkKLXi+TpyoQCcyxITiEoHCDY=
Subject key identifier: 19:84:04:7C:05:07:5B:B7:59:81:CB:5F:48:E1:22:2B:D2:1C:B8:18
Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial: 01941FFA38BECD381FC8B3B3549C0173F69F
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/GYQEfAUHW7dZgctfSOEiK9IcuBg.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133160
IP address blocks: 2a00:8422:ae5::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:38:be:cd:38:1f:c8:b3:b3:54:9c:01:73:f6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1984047c05075bb75981cb5f48e1222bd21cb818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:1a:dc:d9:d4:4f:e0:f5:e8:da:3a:ae:75:
49:8a:fe:8f:9f:1a:6a:9d:cd:0b:a1:3b:d5:f8:81:
4e:40:2c:26:93:67:f3:b4:57:ac:c8:41:c6:8e:61:
33:c3:d2:a0:17:e1:1b:6d:6e:14:0e:31:f8:8d:5a:
f4:4d:92:b6:30:2a:f5:55:70:03:5f:39:6f:17:82:
1e:d4:e4:70:08:a3:30:3a:36:1d:1c:44:59:a8:b7:
a6:c5:11:f7:49:58:3c:76:b3:79:a4:82:79:3e:47:
c0:a2:ab:45:a4:37:fd:ae:74:cf:f2:5f:7a:ce:19:
49:4b:60:95:17:4a:8c:28:d4:ed:bd:ad:6d:38:d2:
a0:04:b5:b3:b6:60:7d:58:17:56:f5:ee:39:af:1e:
fe:f4:7e:46:b1:c6:62:3f:66:97:d6:69:b9:d9:e5:
58:60:43:02:e9:12:1b:ec:9f:b8:04:a0:b8:37:3e:
eb:2f:e9:86:53:e9:ae:1c:c3:c4:02:57:0a:b6:54:
53:31:fc:8a:47:84:67:c8:bc:59:ea:e9:ec:82:69:
02:66:43:df:07:5e:30:c8:ed:f1:94:95:f7:72:36:
e6:e7:1f:3a:bc:5f:bc:a3:3f:70:d0:80:ac:01:76:
d9:21:6d:d0:c0:bb:aa:97:8b:cd:82:4d:66:06:39:
26:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:84:04:7C:05:07:5B:B7:59:81:CB:5F:48:E1:22:2B:D2:1C:B8:18
X509v3 Authority Key Identifier:
keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/GYQEfAUHW7dZgctfSOEiK9IcuBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8422:ae5::/64
Signature Algorithm: sha256WithRSAEncryption
96:8c:54:a9:17:0b:7f:3b:2c:68:ca:47:3a:8d:8c:db:4b:55:
d6:a1:31:37:0d:ad:4b:7f:dd:40:c0:2f:86:c8:cc:c7:e6:bf:
82:af:16:92:6e:00:b4:54:2b:98:01:19:97:64:f8:e7:70:a6:
89:48:d2:07:be:f5:73:61:a1:bf:33:91:08:26:27:59:4c:5e:
02:32:88:98:86:b1:36:90:0b:2c:6d:69:16:b1:21:39:b0:a8:
22:e7:25:73:3b:0b:1b:9e:64:72:2f:1f:ae:73:d5:82:b6:e9:
be:f8:8f:a4:a8:a8:96:e3:ce:7f:19:c2:12:52:f7:bb:be:9a:
a6:a6:6f:85:f0:3d:9f:46:27:2c:8e:d5:0c:b4:e6:13:82:7c:
35:1a:26:5d:3f:d9:95:7f:26:ff:f1:f4:b5:e6:a4:3b:ba:a7:
35:ac:39:b8:d8:d2:35:dc:f8:a2:59:ee:75:24:da:d2:2d:8e:
75:6a:51:86:a6:55:5d:fb:70:9e:36:8b:20:b4:ac:e3:6b:c9:
31:9f:3c:8a:7b:7c:5d:fe:06:fe:83:92:bf:6d:05:f8:91:57:
5f:73:5b:21:4d:ab:9c:a9:e5:dd:11:ec:5a:b4:4c:47:08:cd:
f5:19:64:5f:42:3a:13:91:51:fd:6c:ff:c4:64:4c:74:bb:ec:
c4:4d:0b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:59:59 2025 by rpki-client