Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa
File: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (raw, json)
Hash identifier: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=
Subject key identifier: 82:9E:0B:72:5F:97:B6:1A:62:43:3D:CF:82:38:F6:6A:87:EE:E4:48
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 019427B5C634947E806FC811E49A00C56835
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa
Signing time: Thu 02 Jan 2025 15:50:11 +0000
ROA not before: Thu 02 Jan 2025 15:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31673
IP address blocks: 185.226.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c6:34:94:7e:80:6f:c8:11:e4:9a:00:c5:68:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Jan 2 15:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=829e0b725f97b61a62433dcf8238f66a87eee448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a7:30:26:40:a5:f0:9a:5e:01:87:a3:39:2b:
9c:f8:53:1f:3c:c1:93:97:ee:c8:03:24:77:ac:53:
0e:b7:10:93:ef:ea:df:0b:dd:9a:da:b0:9c:a1:20:
da:21:ef:90:d6:96:00:54:c0:09:7d:f8:f3:fd:4a:
60:47:7c:22:43:8d:af:40:78:20:18:0c:ed:04:73:
96:4f:ec:0f:45:60:eb:40:0e:99:ca:a8:2f:02:98:
18:cb:1a:52:fb:5c:79:ed:76:b0:33:16:19:c7:b7:
00:1d:b1:83:a8:ec:71:18:8f:fc:92:f5:ad:4e:cb:
74:7d:6c:61:8d:8e:85:6c:f6:ce:24:86:ef:66:06:
9b:85:f6:47:0e:9b:82:c5:af:13:4f:20:5d:ed:b5:
d0:4c:00:12:f4:69:71:27:43:ae:07:24:b3:7e:a5:
bf:8f:db:0a:50:3b:b4:77:8b:b7:fd:dc:d7:5b:9a:
c6:51:92:48:5c:d4:f8:b7:6f:5e:d4:2b:10:4e:98:
c3:c6:de:b5:31:b4:b6:ab:c3:73:14:bb:44:62:22:
82:c5:a8:3d:9d:0b:80:7c:eb:83:c0:01:e7:af:55:
be:10:fd:ca:b5:63:de:76:d9:17:cf:ee:8a:d6:f8:
7d:ec:96:63:c6:7f:ba:91:60:9f:be:fd:80:c9:76:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9E:0B:72:5F:97:B6:1A:62:43:3D:CF:82:38:F6:6A:87:EE:E4:48
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.136.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:57:b3:71:30:7c:63:9e:0f:51:5f:6c:90:db:d5:1c:50:e1:
76:fe:d0:8d:78:c3:18:1d:6a:f8:ab:b3:38:c8:ea:41:59:79:
15:80:bd:44:4b:29:10:d7:eb:8b:d9:f4:b6:de:c7:ad:db:b6:
ec:50:f6:86:90:7c:1e:61:0c:67:80:d2:ab:49:2d:d5:f3:0e:
2f:b6:3d:2d:22:23:19:c8:be:80:89:4d:6d:9a:ab:02:b9:12:
50:0b:77:76:64:e1:6b:3d:02:02:17:d3:70:b6:04:32:51:e1:
5a:30:27:b8:92:7d:f5:fc:05:29:a9:1f:6e:13:92:27:fb:96:
03:bf:36:7a:7a:58:65:cb:57:4e:8c:07:3f:0f:6e:b5:d8:8a:
0c:65:55:b2:b0:60:f2:f6:9e:c9:42:e0:14:37:3b:11:28:1e:
42:7a:ba:64:38:24:71:fc:02:3c:92:d7:ab:29:9c:ed:0e:c6:
6a:97:54:18:e6:7c:13:1f:67:ac:94:78:91:3b:7b:d9:c7:90:
f5:2e:2e:94:72:5d:66:f2:53:87:f9:c9:ed:c1:b4:54:c0:ed:
43:81:27:f5:a5:2a:1a:d7:82:4f:fb:70:e5:5b:70:58:a2:02:
9f:44:51:33:68:e6:f0:b4:e9:06:bf:15:38:5b:d1:5b:5a:d6:
0e:e0:dd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:51 2025 by rpki-client