Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/ghM-kJXHfCuQIsTW7IVqHK_p1rw.roa
File: ghM-kJXHfCuQIsTW7IVqHK_p1rw.roa (raw, json)
Hash identifier: 1pz7wcnZQbvTJAfQwp2kKsocNFa8g8mY6nXziu1AfXw=
Subject key identifier: 82:13:3E:90:95:C7:7C:2B:90:22:C4:D6:EC:85:6A:1C:AF:E9:D6:BC
Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial: 01955BEDB637031F13ED9D30C8FA95B019AE
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/ghM-kJXHfCuQIsTW7IVqHK_p1rw.roa
Signing time: Mon 03 Mar 2025 12:14:20 +0000
ROA not before: Mon 03 Mar 2025 12:14:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 45.94.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:ed:b6:37:03:1f:13:ed:9d:30:c8:fa:95:b0:19:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Validity
Not Before: Mar 3 12:14:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82133e9095c77c2b9022c4d6ec856a1cafe9d6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:8f:72:97:83:69:1f:de:e1:ae:9b:b3:03:
64:76:79:22:af:74:ad:1d:2b:4e:6a:e7:fb:c5:bf:
20:cc:e4:05:13:a9:9b:de:f3:d9:fa:c4:c0:7e:e1:
73:1e:29:a9:50:f1:19:5f:b3:d2:ef:f9:04:76:69:
34:21:05:f4:17:c2:96:5a:9d:05:8a:05:39:d4:c4:
1b:f4:d0:80:3c:0f:5e:ea:17:27:07:50:cc:a0:4d:
b8:ee:34:31:de:16:e7:9b:c8:ce:80:ba:c2:51:dd:
fe:3c:5d:d3:3d:65:9d:5f:23:62:54:95:c6:d9:62:
c2:bd:13:1e:bf:23:2c:c0:5e:8b:dd:33:eb:19:dc:
a4:e0:8f:ef:d0:0b:dc:0c:86:f8:f2:7f:fc:ca:55:
24:24:6d:16:5f:6b:c3:68:39:58:f5:34:0f:ed:45:
7c:b1:22:d6:6e:63:2e:63:c9:49:7d:41:7f:8f:e8:
ce:c6:b9:f7:2e:e7:e9:74:6d:91:a3:d5:e8:e6:bb:
ad:13:37:be:e4:1b:c4:70:81:a9:cc:d9:30:ee:70:
88:51:99:52:c2:8e:8f:9b:bf:fd:0c:89:f3:75:2d:
99:35:e0:d0:e4:b1:a8:65:3d:b3:04:80:e3:eb:e7:
52:30:e2:63:9a:ec:13:f8:67:c0:92:e1:c6:39:79:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:13:3E:90:95:C7:7C:2B:90:22:C4:D6:EC:85:6A:1C:AF:E9:D6:BC
X509v3 Authority Key Identifier:
keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/ghM-kJXHfCuQIsTW7IVqHK_p1rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.238.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:33:65:1b:41:c8:3c:57:34:44:6c:b0:2f:a9:25:26:92:2e:
3c:9e:a7:f0:4c:cf:d4:f7:a4:95:1b:ca:3e:fa:86:49:88:0e:
04:52:79:d0:7b:70:93:5a:cc:94:36:cc:bf:4d:4b:aa:87:dd:
1d:df:0e:0c:85:0b:12:a9:6b:39:5f:94:9d:3c:f7:c5:d0:37:
e2:69:36:30:58:0b:fa:97:11:35:7d:45:53:a9:20:5f:8b:af:
3b:e4:be:46:d4:22:01:33:d0:c6:a2:d9:12:53:d7:e2:1e:f2:
ea:ed:08:51:57:52:4d:44:4a:45:c2:2c:87:c6:ba:27:42:89:
13:7b:84:dd:c4:31:a2:3f:14:e2:25:91:65:72:23:37:01:6e:
50:78:07:16:d6:85:2a:80:9d:e6:0f:cb:53:b4:72:dd:ad:f3:
f0:35:c1:2c:e6:12:e4:ef:ef:c2:b0:18:c3:69:29:d2:ae:6f:
de:ef:ef:57:7c:68:d1:19:c1:2b:43:34:f4:96:b1:2d:9f:da:
81:6f:10:ab:96:a5:7c:64:14:5b:97:d3:fb:fa:df:59:10:da:
10:c7:bc:2d:8e:bb:7a:f8:8a:b6:6e:bd:e0:22:36:f9:bd:d6:
a1:b4:6e:e5:1c:77:e0:49:05:ba:15:17:9a:35:0c:cf:67:7a:
eb:32:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:12 2025 by rpki-client