Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/gUeaJWZVhJK2kzqKS8HPTZcMU6Y.roa
File: gUeaJWZVhJK2kzqKS8HPTZcMU6Y.roa (raw, json)
Hash identifier: IOPNa6okOh4KE7VsgGqa6WpCfccJssx+kmLIQ+RGorQ=
Subject key identifier: 81:47:9A:25:66:55:84:92:B6:93:3A:8A:4B:C1:CF:4D:97:0C:53:A6
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0194258F4543916B2A8BC41DC0EDDAAD60C5
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/gUeaJWZVhJK2kzqKS8HPTZcMU6Y.roa
Signing time: Thu 02 Jan 2025 05:48:53 +0000
ROA not before: Thu 02 Jan 2025 05:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 194.32.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:45:43:91:6b:2a:8b:c4:1d:c0:ed:da:ad:60:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81479a2566558492b6933a8a4bc1cf4d970c53a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:90:3b:0b:79:b4:bc:5d:c5:54:49:9a:06:12:
68:cb:95:99:b5:e1:ef:6c:ec:7d:db:42:88:4f:b9:
d6:03:df:13:a5:39:2b:db:f0:83:b0:db:7d:9d:f5:
4b:1d:a0:0d:3d:35:87:67:b6:7a:a8:cc:b9:d1:5f:
98:75:a0:e6:3d:8d:bb:96:3f:57:3a:70:a6:a0:6f:
db:39:1a:3a:f9:f3:03:e8:d8:a0:2d:78:5b:48:f0:
f1:c4:c2:b9:fa:70:8e:c6:8b:d1:e6:9f:c5:c5:7e:
fc:95:55:a1:03:33:53:ea:9c:d9:70:0a:af:02:ac:
25:5e:4b:14:54:6c:ce:c1:64:25:c3:82:f8:41:93:
98:6d:64:82:8e:b7:d6:2b:d5:ea:ed:a8:9f:57:f5:
53:d7:76:99:ab:56:71:4c:69:f9:93:ac:47:a2:49:
08:f1:5c:c4:7a:87:67:69:82:48:66:ac:d0:88:fd:
10:52:6a:c3:fd:a7:7b:ef:87:65:f2:ac:14:b0:70:
ef:02:3c:d6:4b:fd:93:20:bf:62:2a:b5:5a:b1:47:
82:bd:50:a6:37:54:a9:a4:00:35:0e:35:43:8c:ae:
a8:25:c9:7f:eb:36:54:cc:c7:05:bd:49:13:31:8c:
6d:84:38:a7:fb:39:80:bc:aa:f5:e4:19:29:2e:d3:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:47:9A:25:66:55:84:92:B6:93:3A:8A:4B:C1:CF:4D:97:0C:53:A6
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/gUeaJWZVhJK2kzqKS8HPTZcMU6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.71.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3f:f5:67:3c:76:83:7b:21:5b:63:bb:b4:b6:c6:cd:1a:23:
a0:ca:e8:6a:3a:f1:f7:2f:f4:8b:4d:8f:84:68:e0:54:e4:5a:
1c:b0:d6:27:0f:61:70:37:fc:5e:fd:b4:92:22:08:5b:17:86:
b9:68:79:2c:e8:17:d0:bd:cd:67:a5:70:6c:b3:67:82:53:30:
73:24:9d:61:f3:93:86:45:ec:3b:93:35:c3:be:1d:1b:b7:eb:
2f:d1:7a:ab:fd:53:8d:b9:32:f7:04:53:8a:6e:94:a3:34:1c:
6d:68:6b:0e:fc:03:1f:db:39:fd:b1:18:c6:0a:fe:64:50:d2:
10:5f:42:ae:cd:85:7e:b6:f8:94:17:50:2f:e7:09:96:13:8b:
52:4f:53:5e:cb:ce:ce:6c:8b:52:23:1e:65:be:c6:70:21:9d:
f5:6d:2c:06:6a:88:3d:93:c7:de:a6:45:d9:1a:69:82:bb:79:
d0:ca:c9:29:13:c8:67:4e:fc:9d:de:3c:9b:36:09:d4:14:ff:
4b:06:1b:33:09:e4:92:37:00:56:15:13:47:bd:f5:00:71:85:
ee:27:3c:54:f6:28:a3:f0:5b:f1:7f:05:02:26:99:c9:5f:7d:
50:23:3b:ef:77:9c:00:f8:77:a2:b6:e6:22:83:34:76:97:4e:
4a:97:c5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:27 2025 by rpki-client