Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/GXiZBDPtbId-2slrhC7_LvLPYNs.roa
File: GXiZBDPtbId-2slrhC7_LvLPYNs.roa (raw, json)
Hash identifier: Uh4Pa6eBHtWSD0wrQ7oAiUbxQyh9fItYbC5yNJtxtQE=
Subject key identifier: 19:78:99:04:33:ED:6C:87:7E:DA:C9:6B:84:2E:FF:2E:F2:CF:60:DB
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428282CD561667A16B5CBBB4FDC4ABDA9
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/GXiZBDPtbId-2slrhC7_LvLPYNs.roa
Signing time: Thu 02 Jan 2025 17:55:09 +0000
ROA not before: Thu 02 Jan 2025 17:55:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203578
IP address blocks: 212.36.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:2c:d5:61:66:7a:16:b5:cb:bb:4f:dc:4a:bd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1978990433ed6c877edac96b842eff2ef2cf60db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:a9:3d:d8:a8:a2:7a:df:96:a1:2f:f3:58:
66:01:63:09:5a:93:14:9c:9c:0c:e8:6f:af:41:46:
4d:57:42:2e:01:bf:45:91:bc:d8:bd:81:23:0b:62:
1e:9e:c7:5c:35:e8:6d:18:34:49:11:85:b1:ec:34:
d6:be:e6:8c:3a:01:57:98:b6:f4:ac:d5:e7:20:e9:
11:24:da:d0:e0:90:b1:30:7b:39:f9:3c:b7:36:f8:
c2:8a:8a:18:97:3c:3c:72:48:2b:90:17:a4:c0:6e:
19:32:fd:2b:91:5b:1a:cc:91:33:d9:2a:83:7c:94:
ce:cd:92:22:7e:18:da:36:5a:ec:92:f1:f4:cc:1d:
fd:f1:bf:cc:98:68:06:c5:af:a5:61:6f:db:60:a4:
5f:82:75:df:33:c9:ff:8b:52:23:85:1a:e5:26:b1:
6e:64:66:b3:88:6f:33:83:78:0f:58:8e:98:b7:0a:
3d:62:e3:e3:13:28:a3:80:f8:2c:c7:e2:11:e4:9f:
b9:40:d0:e4:29:31:0e:9d:b0:90:42:74:7f:f0:d9:
73:8c:da:dc:7d:ca:8c:2a:47:9f:6a:11:d2:b1:e7:
2e:3b:32:9d:db:79:c4:78:28:15:bc:d7:ac:9e:cb:
03:c5:1c:e0:76:1c:7d:3b:31:be:3a:db:c2:a2:74:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:78:99:04:33:ED:6C:87:7E:DA:C9:6B:84:2E:FF:2E:F2:CF:60:DB
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/GXiZBDPtbId-2slrhC7_LvLPYNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.36.26.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f2:44:d7:e6:f8:bc:b1:a9:8e:53:48:1e:5b:e5:a7:b1:c7:
40:70:dc:d5:92:61:5c:34:90:b3:37:2e:60:f7:5c:69:bc:cd:
9d:2b:59:88:a8:45:c3:3e:56:fc:60:2a:85:6f:76:e0:02:bc:
05:32:f3:26:9e:7f:80:84:36:f4:8a:48:6f:c2:16:f1:80:2c:
c2:c1:59:96:3b:8e:65:c5:8f:c9:1b:4b:a2:e1:b8:60:4b:5b:
48:d9:8f:81:6c:1b:33:14:13:6e:b0:31:d9:ee:22:ad:5b:de:
9d:3d:d9:fa:ee:d6:e1:a2:0a:c0:f7:08:05:f0:33:0d:1f:32:
86:09:5b:e1:3e:33:f9:9a:1c:53:9d:f9:12:de:c3:90:6b:81:
db:3b:91:9a:f6:bb:63:49:d3:ea:7f:d6:21:87:52:f4:a4:67:
2b:1b:e5:8d:96:75:16:67:d7:4d:96:b7:17:0e:ad:b9:84:7d:
ce:32:1f:05:9c:e7:ca:34:7c:2e:25:4a:4b:e4:07:68:e4:88:
06:b2:ae:2c:a1:45:c8:02:38:2c:da:eb:c7:e5:ba:36:01:f7:
d8:61:db:63:19:c0:44:48:9c:e6:b7:c3:5a:28:da:ac:5b:d8:
87:e0:a0:8a:e1:97:cf:48:9d:0b:78:e6:a8:a2:e2:1a:f8:af:
26:66:ae:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:44:51 2025 by rpki-client