Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/GNR3Xbsm0dYb1U2Z9nw19vfXm-E.roa
File: GNR3Xbsm0dYb1U2Z9nw19vfXm-E.roa (raw, json)
Hash identifier: eG4EFU3ARjgeiXZCOqWx6H616sJeslsRaSfwJS4JJAo=
Subject key identifier: 18:D4:77:5D:BB:26:D1:D6:1B:D5:4D:99:F6:7C:35:F6:F7:D7:9B:E1
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 019484D0899DB87B682BE32959C480A2FC2F
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/GNR3Xbsm0dYb1U2Z9nw19vfXm-E.roa
Signing time: Mon 20 Jan 2025 17:44:06 +0000
ROA not before: Mon 20 Jan 2025 17:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49453
IP address blocks: 78.41.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:d0:89:9d:b8:7b:68:2b:e3:29:59:c4:80:a2:fc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Jan 20 17:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18d4775dbb26d1d61bd54d99f67c35f6f7d79be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:22:2b:53:32:0d:d2:cd:a1:bf:17:95:d8:93:
bb:69:24:c5:53:6b:c9:bd:b2:ef:a6:9b:56:84:f9:
ed:a6:e3:c9:a0:cf:ee:a7:3c:9d:6a:63:e6:cc:77:
95:40:b9:34:4c:c1:25:62:1c:e6:1a:19:8e:fc:11:
7c:58:3c:4a:f9:ce:00:8f:3f:48:60:16:e9:0b:25:
9c:c7:bf:e1:8e:b5:dd:38:36:db:d5:b7:67:c5:9e:
6a:2d:59:b7:bf:01:0c:d4:8c:17:a0:64:c0:ce:bb:
0a:66:e8:5a:37:84:24:b6:6c:5f:bc:19:f9:dd:c9:
7f:3d:c3:5b:b7:48:86:a4:21:4a:af:73:5b:b7:bb:
c2:6c:c3:13:c7:81:54:a6:68:39:69:bb:a8:65:07:
93:a6:98:08:45:fe:b7:81:23:7d:c8:0d:ce:61:95:
c2:1f:4a:41:c7:d3:1c:a3:83:4e:4d:85:bc:5e:f2:
d7:99:ba:ad:4f:26:ee:9c:d5:88:ad:31:1b:bb:a3:
0b:cf:a6:e7:01:2a:ff:01:6a:01:8c:4d:7e:16:12:
bb:04:75:d1:b2:f4:70:f2:d0:be:44:08:25:3d:d8:
d7:3a:43:83:0a:f7:ff:aa:81:95:4a:f0:61:3b:76:
2b:c9:71:ac:65:8b:e7:47:bb:cc:36:3b:4b:a1:e4:
78:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D4:77:5D:BB:26:D1:D6:1B:D5:4D:99:F6:7C:35:F6:F7:D7:9B:E1
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/GNR3Xbsm0dYb1U2Z9nw19vfXm-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:13:90:e0:3c:f6:04:43:2c:ec:7c:3e:a7:68:4d:50:20:35:
c3:a3:f4:fa:f2:16:b3:cc:e7:db:a6:7b:02:55:82:ef:35:50:
55:27:d7:24:da:71:17:ed:eb:a6:81:6f:e6:ae:f0:c5:fb:77:
60:ea:bf:cd:a8:d3:6d:c7:d7:49:4e:9e:94:ef:86:11:64:c8:
af:55:65:ea:3f:90:28:5d:a1:de:9d:42:f5:f8:28:1b:13:45:
f4:af:ea:21:da:3b:f0:44:10:df:07:6a:47:28:81:cd:98:96:
c4:38:3f:a1:ec:7d:59:19:b1:56:08:5b:58:a0:3b:b8:f4:02:
aa:b9:c7:68:0b:2f:a0:2d:69:39:5d:0c:46:cb:44:e4:06:93:
32:ba:2c:e8:dd:0e:65:4f:9c:9b:e8:d3:8e:4e:68:3a:3b:84:
28:e4:f0:51:4b:d0:3f:eb:f7:0f:53:cd:f8:20:17:42:9f:ca:
25:30:c3:d6:75:e0:fe:4b:22:0c:73:7c:4c:a6:a4:22:06:14:
c0:5c:a0:cf:6b:35:67:6f:94:d4:77:28:46:45:fc:66:34:00:
a9:bd:21:fc:b9:2f:b9:81:21:75:ab:9c:82:5a:9b:41:d3:9b:
d1:f9:31:0c:fe:6d:8a:e4:18:dd:7a:d3:1d:a3:1c:37:9a:2a:
fe:78:3a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:56:25 2025 by rpki-client