Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Gi5kKP1K-wLDLIxrlsWd69NVRN8.roa
File: Gi5kKP1K-wLDLIxrlsWd69NVRN8.roa (raw, json)
Hash identifier: BbaY4isrAvDT+ExQc2HmYToJrUbvvSQSjIgYhP5VGKQ=
Subject key identifier: 1A:2E:64:28:FD:4A:FB:02:C3:2C:8C:6B:96:C5:9D:EB:D3:55:44:DF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195FC10BD4F37B53A61E5428FFF98B7348A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Gi5kKP1K-wLDLIxrlsWd69NVRN8.roa
Signing time: Thu 03 Apr 2025 14:31:50 +0000
ROA not before: Thu 03 Apr 2025 14:31:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 89.144.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fc:10:bd:4f:37:b5:3a:61:e5:42:8f:ff:98:b7:34:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 3 14:31:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a2e6428fd4afb02c32c8c6b96c59debd35544df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:6b:b1:9a:1b:45:d2:fa:2e:eb:d9:ef:a3:
ee:c9:ad:a0:b8:0e:17:19:e0:df:d5:65:a0:23:10:
6e:7f:8a:0d:81:e0:6b:38:6e:34:d3:ea:3b:58:e5:
c9:28:a4:7b:a1:24:db:56:d0:23:1e:e6:81:90:52:
1f:7c:cf:08:62:69:b7:b4:06:2d:b0:ff:27:98:d1:
b7:dc:41:da:15:a6:75:10:bd:e6:1b:d1:2a:18:e1:
be:87:dd:5c:3b:95:a5:da:8f:1d:d0:5d:43:b8:08:
af:97:bd:71:25:18:f1:4b:05:cb:dc:54:a5:d5:8f:
fe:3e:ba:56:c3:d4:c3:7d:f2:40:0c:e6:ca:ec:90:
9b:e5:66:31:cb:a0:3c:42:c7:3d:3f:d5:53:f1:d0:
cf:f2:6a:98:e6:a7:25:41:a1:c6:8a:29:56:fb:06:
0c:05:62:62:43:88:32:0f:09:96:53:a2:73:87:c9:
ce:50:38:71:3f:c5:41:8a:61:6c:24:98:dd:8d:e3:
30:87:54:75:23:7b:3b:2b:3b:75:d6:12:db:44:26:
92:7c:8f:82:6e:2c:dc:f7:b8:3c:6a:ca:9a:d6:79:
54:d2:de:4d:8b:7f:28:53:b0:4e:81:ac:82:bd:d2:
fb:9d:39:40:67:b9:77:13:f8:74:b3:93:3b:21:32:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2E:64:28:FD:4A:FB:02:C3:2C:8C:6B:96:C5:9D:EB:D3:55:44:DF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Gi5kKP1K-wLDLIxrlsWd69NVRN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.39.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c7:cc:5b:d3:88:d1:f0:4f:2c:7f:e9:58:7f:29:af:f0:52:
8b:97:a8:db:15:a1:fd:00:ac:99:60:f5:6b:f6:2d:5a:7f:71:
94:3d:04:67:5a:a4:e8:91:3b:20:b3:69:b9:77:6b:38:25:17:
09:c0:e9:ba:a5:83:7d:f1:dc:10:7e:a3:63:93:dd:e1:1f:be:
ba:93:0a:1c:59:1e:8d:cd:92:4a:a1:d1:93:fe:9e:cd:61:f5:
7a:64:c5:32:02:1f:30:73:2f:61:db:c8:74:3c:84:7a:5f:4f:
27:c4:61:95:b5:2b:4e:e8:8d:d6:bc:d6:91:14:d6:4a:68:af:
03:af:8d:ab:a8:92:83:96:5a:a0:85:4b:f2:f8:2f:e3:1d:58:
08:91:15:03:eb:e0:97:1a:34:f9:26:52:8a:78:71:6a:90:f2:
83:21:9c:bf:db:80:76:42:9a:0a:2c:24:95:e9:75:38:c2:6f:
02:52:45:c1:39:e9:42:a6:01:a0:fb:26:fe:0d:2b:61:53:80:
49:cc:86:ab:d6:20:b2:2a:9f:be:71:e1:b7:71:1d:5a:93:cf:
97:e0:97:12:5b:be:87:b4:c7:ec:2b:44:d9:95:49:39:a1:14:
9c:08:db:65:82:56:13:27:8e:57:38:ee:c8:f3:45:44:2a:ba:
ec:13:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:13:00 2025 by rpki-client