Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/GqlBEeTH2BeoRvE11HJ8GrZqFDE.roa
File: GqlBEeTH2BeoRvE11HJ8GrZqFDE.roa (raw, json)
Hash identifier: naav5Y+vpoLFfuKrSX9+iKGyQaheX7homqtPr9pYrkM=
Subject key identifier: 1A:A9:41:11:E4:C7:D8:17:A8:46:F1:35:D4:72:7C:1A:B6:6A:14:31
Certificate issuer: /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Certificate serial: 0194244550B9BA92528D9FADECC0EFE3E793
Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/GqlBEeTH2BeoRvE11HJ8GrZqFDE.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 89.107.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:50:b9:ba:92:52:8d:9f:ad:ec:c0:ef:e3:e7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aa94111e4c7d817a846f135d4727c1ab66a1431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:6c:8c:d2:69:00:d8:ad:8f:5f:ec:e9:40:
7d:2e:0c:82:6b:3b:fe:bd:50:7f:1d:e7:64:70:3e:
51:f4:52:bd:f7:ba:17:9e:19:eb:7a:83:be:7e:86:
97:df:12:18:20:d9:0b:4a:05:3b:3d:6d:b3:e5:78:
18:00:49:e1:2e:05:bc:fa:eb:23:c4:3d:ed:65:fa:
1f:c4:c0:85:a5:35:fa:72:13:6b:c3:b9:67:88:ca:
be:c0:e7:b5:11:22:14:4b:09:79:ff:aa:d7:32:90:
53:02:83:c0:4d:33:6f:24:97:c3:17:eb:39:8a:ee:
2d:c0:20:03:37:eb:e2:f5:c2:4f:46:89:40:10:47:
67:91:d1:bf:f8:b6:4c:c0:ca:21:e9:53:db:1f:7a:
1d:88:88:09:1d:b1:e0:47:a3:96:7c:44:ef:a8:a9:
b9:1b:e4:a1:9c:0e:7a:ab:8c:37:42:31:9f:48:4d:
1a:f4:1d:90:ca:87:5c:88:93:3c:7a:82:b2:fb:ff:
38:ea:ef:dd:ca:3b:97:77:d7:f3:c2:d3:bc:f3:03:
a7:f7:db:ac:c4:58:fe:86:ec:71:8a:10:3b:95:b4:
3a:18:ee:ab:1f:66:63:ad:a3:fd:c2:11:47:a0:30:
13:99:7a:67:39:42:94:f3:9b:63:2a:c4:53:bc:3b:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A9:41:11:E4:C7:D8:17:A8:46:F1:35:D4:72:7C:1A:B6:6A:14:31
X509v3 Authority Key Identifier:
keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/GqlBEeTH2BeoRvE11HJ8GrZqFDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.253.0/24
Signature Algorithm: sha256WithRSAEncryption
62:df:02:8d:9e:9b:0a:4d:5e:1e:49:10:9d:e8:d3:35:ae:a8:
e0:29:21:44:2a:87:df:61:b7:cd:3e:a9:f7:17:40:f4:1f:75:
c1:c6:91:be:be:82:79:e3:ed:9a:4c:9e:18:cd:d2:fd:c0:ed:
86:0e:de:56:18:98:37:34:ec:ad:b4:59:02:35:95:6c:e1:18:
cb:40:5c:3d:dd:f5:ee:cd:37:1d:47:f7:0d:d9:70:4d:5e:1b:
1a:d5:dd:ca:c4:43:4b:7c:98:55:2e:5d:c7:d0:28:93:86:4a:
a3:3f:6e:3e:4f:fa:31:49:c0:36:e8:c0:c7:e0:1c:65:ed:05:
d2:78:38:5e:b8:5f:ab:2e:d3:f1:93:a5:c2:9e:34:94:ba:12:
37:82:8c:99:22:fb:76:36:b9:23:8d:84:b8:3d:1d:c3:48:a2:
66:51:2f:e7:ba:89:80:bb:c4:6f:aa:1d:59:84:54:64:7e:4c:
3e:4a:f3:1d:33:ae:da:ba:03:2f:73:b6:db:44:f8:38:f9:bb:
c1:55:24:a4:b1:31:7d:5e:a6:17:ce:72:fe:92:52:87:a6:ae:
b2:4d:09:0b:cd:1a:a1:1b:f2:9f:5b:30:27:07:93:a6:96:68:
26:51:17:34:ed:bb:cd:c6:49:8c:27:01:de:72:0c:b8:16:b3:
64:1f:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:32:53 2025 by rpki-client