Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/GYZ5KO1sBhaw-z7L7DX4N0vMn28.roa
File: GYZ5KO1sBhaw-z7L7DX4N0vMn28.roa (raw, json)
Hash identifier: hMPbKb1NXJhU4uvH0If2mxxGXgVJxSXaj+jSWiiTlE8=
Subject key identifier: 19:86:79:28:ED:6C:06:16:B0:FB:3E:CB:EC:35:F8:37:4B:CC:9F:6F
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C5BC907D897335CACFE2D731C8CCE
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/GYZ5KO1sBhaw-z7L7DX4N0vMn28.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41661
IP address blocks: 2a02:2698:9000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5b:c9:07:d8:97:33:5c:ac:fe:2d:73:1c:8c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19867928ed6c0616b0fb3ecbec35f8374bcc9f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:36:05:02:a2:d9:c2:78:62:c9:41:4e:2b:
ff:1d:20:fd:f8:95:ff:5d:29:54:b5:83:a7:b5:8b:
72:bb:5a:52:a9:e6:a4:28:fe:4d:a8:2d:1d:78:d9:
7b:e2:9d:ee:92:bf:d4:d9:a6:7d:80:5b:0c:c0:6e:
0f:90:4f:4e:86:61:a2:40:f3:0d:2c:15:5b:dc:ae:
bf:4f:ee:1b:94:fc:03:a1:8a:58:c9:10:7b:49:ef:
01:3b:fc:30:02:82:f4:b4:32:8b:db:e1:91:16:20:
40:e3:71:72:09:d1:5b:fe:68:bc:3c:aa:c8:f0:75:
64:d5:86:c6:52:aa:74:52:77:04:1a:22:15:a8:fc:
67:a5:6b:41:b4:cf:e5:c4:e2:d0:7b:7d:4c:27:13:
68:c3:1c:22:fd:7b:5a:e8:12:c7:c6:50:4d:81:79:
a9:f0:56:6c:9b:3f:46:dc:d2:12:69:ef:af:cf:34:
b2:8c:54:c2:30:56:12:e2:c6:34:12:f1:dd:09:c3:
92:d2:64:01:ae:31:82:0c:27:49:a6:c3:00:59:5b:
d3:d8:5f:4e:48:f5:72:b8:60:50:db:81:33:b0:00:
1c:14:96:9d:e9:d2:9f:58:a9:51:b4:b3:97:51:bf:
ad:76:2b:6a:72:0c:ae:f0:46:f3:db:39:59:3a:ce:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:79:28:ED:6C:06:16:B0:FB:3E:CB:EC:35:F8:37:4B:CC:9F:6F
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/GYZ5KO1sBhaw-z7L7DX4N0vMn28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:9000::/38
Signature Algorithm: sha256WithRSAEncryption
92:c7:d7:df:77:d9:63:4b:b5:1f:41:f8:a7:80:bb:25:e3:cf:
82:ca:0c:72:c7:d1:e2:d3:b6:65:7c:71:9c:42:48:04:d0:e2:
8e:61:6a:5a:de:31:7a:99:fd:dd:a7:86:13:7f:c5:0d:33:b6:
5c:6d:52:b1:68:e5:45:6f:8f:8f:63:24:17:02:8a:f3:c6:34:
20:f1:9f:e2:ec:ed:55:e4:fc:39:9c:ac:e9:1d:78:78:b7:5a:
d4:07:86:27:49:4a:6f:81:c7:19:f0:2a:9d:37:fe:53:fe:4e:
41:c8:2b:53:a9:c2:3c:68:01:b0:f9:db:17:dd:3c:6c:7e:88:
4d:80:dc:93:0c:65:89:8a:aa:c2:ba:a4:a0:cd:de:75:91:ab:
ce:da:c0:d4:bd:36:cd:d8:28:65:82:eb:87:04:68:c8:fc:61:
6b:1d:59:71:9a:cd:49:42:b4:ea:ce:c2:c0:c1:6c:e7:7a:92:
9d:bd:83:5c:1f:60:93:c3:16:12:9c:4d:78:5f:f9:6b:c4:38:
57:f2:b4:7b:81:f2:e0:f7:59:0c:41:e8:64:57:04:67:f7:d1:
8e:23:21:39:db:eb:e9:09:eb:9e:87:08:aa:fe:ef:80:66:f3:
68:f0:48:f0:cb:69:52:f9:50:e1:d6:02:7e:f5:54:9b:e4:48:
76:cc:fc:ad
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQfjFvJB9iXM1ys/i1zHIzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjUwMTAxMDE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTg2NzkyOGVkNmMwNjE2YjBmYjNlY2JlYzM1ZjgzNzRiY2M5ZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd82BQKi2cJ4YslBTiv/HSD9+JX/
XSlUtYOntYtyu1pSqeakKP5NqC0deNl74p3ukr/U2aZ9gFsMwG4PkE9OhmGiQPMN
LBVb3K6/T+4blPwDoYpYyRB7Se8BO/wwAoL0tDKL2+GRFiBA43FyCdFb/mi8PKrI
8HVk1YbGUqp0UncEGiIVqPxnpWtBtM/lxOLQe31MJxNowxwi/Xta6BLHxlBNgXmp
8FZsmz9G3NISae+vzzSyjFTCMFYS4sY0EvHdCcOS0mQBrjGCDCdJpsMAWVvT2F9O
SPVyuGBQ24EzsAAcFJad6dKfWKlRtLOXUb+tditqcgyu8Ebz2zlZOs6ORwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBmGeSjtbAYWsPs+y+w1+DdLzJ9vMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEvR1laNUtPMXNCaGF3LXo3TDdEWDROMHZNbjI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmJAw
DQYJKoZIhvcNAQELBQADggEBAJLH19932WNLtR9B+KeAuyXjz4LKDHLH0eLTtmV8
cZxCSATQ4o5halreMXqZ/d2nhhN/xQ0ztlxtUrFo5UVvj49jJBcCivPGNCDxn+Ls
7VXk/DmcrOkdeHi3WtQHhidJSm+BxxnwKp03/lP+TkHIK1OpwjxoAbD52xfdPGx+
iE2A3JMMZYmKqsK6pKDN3nWRq87awNS9Ns3YKGWC64cEaMj8YWsdWXGazUlCtOrO
wsDBbOd6kp29g1wfYJPDFhKcTXhf+WvEOFfytHuB8uD3WQxB6GRXBGf30Y4jITnb
6+kJ656HCKr+74Bm82jwSPDLaVL5UOHWAn71VJvkSHbM/K0=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:08 2025 by rpki-client