Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/Gxhnb8KOTrVvxDF8yuKOv2GjqtU.roa
File: Gxhnb8KOTrVvxDF8yuKOv2GjqtU.roa (raw, json)
Hash identifier: QO/QE2IRS/pPOvcN+3PpcsYmJwErYvPF742Zst4rEP8=
Subject key identifier: 1B:18:67:6F:C2:8E:4E:B5:6F:C4:31:7C:CA:E2:8E:BF:61:A3:AA:D5
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 019428283E9B252996E0954A1E2E8D76BB46
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/Gxhnb8KOTrVvxDF8yuKOv2GjqtU.roa
Signing time: Thu 02 Jan 2025 17:55:13 +0000
ROA not before: Thu 02 Jan 2025 17:55:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47796
IP address blocks: 185.110.236.0/24 maxlen: 24
185.110.237.0/24 maxlen: 24
185.110.238.0/24 maxlen: 24
185.110.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:3e:9b:25:29:96:e0:95:4a:1e:2e:8d:76:bb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Jan 2 17:55:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b18676fc28e4eb56fc4317ccae28ebf61a3aad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:80:44:31:08:55:c2:e9:c0:67:d0:de:3e:
bf:3e:f4:a0:32:70:f3:e9:fc:fa:ce:d3:56:43:7f:
30:76:c6:30:67:d1:8c:b8:8a:f1:7b:59:5c:1e:13:
cc:a1:cf:c2:74:72:60:3d:c5:4c:49:9f:de:df:ad:
21:35:b8:fa:53:44:9d:1b:8e:0e:22:6b:80:2d:3e:
97:04:cd:c8:8d:d3:5c:ca:79:54:12:03:c0:a3:5b:
37:67:05:c4:62:15:98:a8:f5:91:ce:9b:e2:99:a1:
8e:fa:cc:85:ef:92:bd:c9:20:38:b3:77:36:65:ca:
f1:38:7f:37:75:61:4b:dc:fd:c5:17:9b:6c:09:52:
0b:28:1f:30:70:fb:41:c7:4b:8b:d1:39:11:e1:38:
af:c2:f2:11:23:dd:3c:95:06:c9:63:18:be:75:7e:
96:5c:9f:ff:14:29:43:da:53:d8:ed:b9:cd:48:ce:
b2:91:b6:f5:37:f7:47:89:65:4d:21:04:e5:b7:3c:
4f:08:bd:fd:94:75:83:be:d4:24:37:32:20:44:06:
79:68:01:f2:fa:6e:8e:d6:cf:47:ce:9a:ee:67:a5:
19:84:b5:16:c7:3a:73:70:0a:a6:a1:36:86:06:ae:
cb:ea:10:72:c4:95:7b:1b:f3:15:bf:8a:9a:70:31:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:18:67:6F:C2:8E:4E:B5:6F:C4:31:7C:CA:E2:8E:BF:61:A3:AA:D5
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/Gxhnb8KOTrVvxDF8yuKOv2GjqtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.236.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:2b:74:3f:11:9b:f0:d1:ab:ff:76:32:ea:aa:4f:e4:67:aa:
ef:83:8e:fb:d4:e0:41:91:33:3b:ad:ff:cb:c1:08:62:f2:b3:
3d:fe:87:74:1a:00:5d:db:0b:a6:59:1c:cc:75:69:63:b6:8c:
5d:44:34:44:28:c5:72:72:77:dc:82:35:7d:d0:31:31:46:29:
86:b3:f4:1f:9b:0c:d4:8b:c4:44:43:3c:ec:00:1e:7c:9a:d7:
a7:76:5c:60:45:0e:06:ba:55:39:68:1d:a0:58:72:a2:94:be:
0d:58:54:47:14:c6:c6:3b:5e:ba:18:13:ac:22:b0:64:8a:3a:
ec:2b:59:d5:cc:5c:68:0a:9e:d2:c0:e8:fe:92:ce:fd:df:6d:
51:31:0f:84:5a:1a:49:2b:19:0f:cf:fb:5d:17:4b:31:0d:a5:
70:66:d1:c6:a3:51:c7:5f:99:14:1e:7a:77:44:41:a2:95:f7:
4d:2d:cc:aa:12:ca:27:2e:56:cc:63:50:d9:62:c5:4a:8a:c4:
18:ea:58:7d:0d:c3:29:3a:99:1c:b2:5d:b4:e4:ea:a7:19:2d:
ac:16:f4:ee:36:44:99:6d:7c:f3:dc:94:8f:26:40:0e:84:84:
f4:1a:6a:7b:af:fa:89:14:55:16:ca:a9:9f:08:1b:d8:e2:31:
1d:9c:4d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:02:14 2025 by rpki-client