Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/fgKPPdW8bX1X6qK_GJWLhKliu3w.roa
File: fgKPPdW8bX1X6qK_GJWLhKliu3w.roa (raw, json)
Hash identifier: KwDL7D8DQXv/HgQm93E74+FZwYXZspxr0ZPQdGjc5BA=
Subject key identifier: 7E:02:8F:3D:D5:BC:6D:7D:57:EA:A2:BF:18:95:8B:84:A9:62:BB:7C
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019427B57A1B64A2094902F1E1A0FFD2C306
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/fgKPPdW8bX1X6qK_GJWLhKliu3w.roa
Signing time: Thu 02 Jan 2025 15:49:52 +0000
ROA not before: Thu 02 Jan 2025 15:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 45.157.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:7a:1b:64:a2:09:49:02:f1:e1:a0:ff:d2:c3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 2 15:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e028f3dd5bc6d7d57eaa2bf18958b84a962bb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:21:7c:08:65:50:82:7c:5f:95:99:31:e1:
92:e5:e7:b1:34:21:de:26:f0:b8:be:37:19:6b:9e:
e7:2d:d5:61:90:e5:c5:71:3e:68:6b:b5:68:15:34:
6c:f5:51:a9:59:2b:95:e6:45:df:a4:60:ac:fc:01:
14:a4:e7:13:0b:e1:45:e3:1b:c4:3d:59:1e:8f:b8:
79:62:95:40:6a:12:66:03:d6:42:fe:77:5b:54:b2:
30:e1:55:1f:fb:8b:40:11:ba:b7:02:a8:c1:86:16:
28:f5:36:d0:34:3b:44:a1:db:68:d3:c6:a3:69:ab:
00:13:e1:55:8f:6a:f4:11:97:e8:aa:e3:c6:f7:27:
6d:81:b5:64:ce:46:97:c1:a6:89:f3:12:c9:85:6d:
85:f0:57:55:c5:3b:88:18:8c:21:90:18:bc:2e:fd:
82:8c:c9:9f:44:dd:29:0a:43:47:d9:8a:e1:67:9f:
0f:a6:1b:9e:56:ba:4e:33:44:99:15:ec:7f:8c:a1:
86:49:28:c6:7f:c4:f2:8d:53:8b:54:69:8b:a9:81:
90:ad:fe:ca:a1:4d:43:37:6d:80:af:9c:0c:0b:3a:
bd:47:ce:aa:10:fd:a7:c3:94:91:57:4c:1c:9d:db:
3f:08:e0:db:c3:43:84:a6:fb:7c:6c:37:f8:4f:56:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:02:8F:3D:D5:BC:6D:7D:57:EA:A2:BF:18:95:8B:84:A9:62:BB:7C
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/fgKPPdW8bX1X6qK_GJWLhKliu3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.72.0/23
Signature Algorithm: sha256WithRSAEncryption
61:17:c9:d6:e8:af:9d:46:3c:72:90:fa:a4:10:63:60:49:d4:
d2:f5:0c:b9:af:57:6d:a1:79:c8:e7:a2:41:21:43:e3:03:b3:
89:40:84:fd:28:ca:16:f4:e6:e3:1f:4f:ea:79:78:17:23:02:
6f:b2:6f:e5:7b:73:44:58:3d:bd:22:b3:69:ca:a9:0e:fe:6a:
ea:5e:bc:5f:a7:22:71:c4:94:45:54:a3:a9:9f:f1:1e:19:a7:
fb:f9:2f:60:40:d2:fe:c3:f1:56:aa:0d:fc:43:02:a5:4b:34:
45:5e:24:e7:37:7b:ae:e3:ae:31:d7:ee:e8:db:b5:49:3b:72:
f2:b7:ad:26:8d:db:82:61:1c:28:da:b1:44:ea:a8:fe:47:7d:
b2:57:9a:6d:88:63:64:5c:3f:12:af:44:9b:b3:dc:ae:af:4b:
94:d2:8a:51:46:1e:68:71:66:ab:dd:c0:15:3e:bb:f4:c5:e9:
4e:71:10:0d:9c:64:56:df:9f:a5:50:8e:e0:87:41:8f:35:55:
72:13:cd:03:a0:12:b8:6c:dc:7f:82:21:e1:e0:2f:92:70:25:
7d:54:0d:4f:74:87:2e:31:a0:79:f4:4a:6c:b2:dc:a5:7e:93:
7e:68:77:01:08:7e:77:2c:f5:b6:42:86:8c:9c:19:71:1f:82:
4c:84:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:42 2025 by rpki-client