Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/guUMbooQi5ZpAprm4yIgi3tvMl4.roa
File: guUMbooQi5ZpAprm4yIgi3tvMl4.roa (raw, json)
Hash identifier: OxNrCAgusiWfD5+h8Ld+mevYy63mMywB9a3/Hq0ZikY=
Subject key identifier: 82:E5:0C:6E:8A:10:8B:96:69:02:9A:E6:E3:22:20:8B:7B:6F:32:5E
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748A3FE26E0E874506F174386CD9B5D
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/guUMbooQi5ZpAprm4yIgi3tvMl4.roa
Signing time: Thu 02 Jan 2025 13:50:59 +0000
ROA not before: Thu 02 Jan 2025 13:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397525
IP address blocks: 45.145.224.0/24 maxlen: 24
45.145.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:a3:fe:26:e0:e8:74:50:6f:17:43:86:cd:9b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82e50c6e8a108b9669029ae6e322208b7b6f325e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:e4:1e:e5:28:1c:15:a2:c6:5f:c1:7a:db:
3a:04:ae:5d:ba:bd:22:2a:29:33:f5:21:d5:48:5a:
24:b9:8e:f3:83:a3:ad:c9:b2:dd:08:cd:26:56:27:
a3:58:da:41:a8:85:aa:4f:80:2f:fb:a8:fd:72:72:
ae:cb:f3:58:66:fc:8b:9a:b8:b8:b0:80:75:70:3a:
2a:3b:89:f5:ba:94:a9:60:4b:4f:06:37:de:cc:da:
c5:57:64:57:3b:8b:7b:7b:61:8d:f0:98:20:a3:da:
f4:e2:c7:8c:e3:47:98:7a:c9:ba:09:da:8c:8c:31:
a4:d1:85:f4:cb:ce:e9:8d:65:e0:33:a5:59:06:3d:
74:44:ca:5d:90:e6:42:de:84:2c:f0:2e:91:44:ec:
da:ba:70:7f:74:a4:27:0b:ea:37:af:14:04:15:3e:
66:88:f7:b1:4f:4a:a1:9e:ca:b5:74:8f:8b:d2:00:
38:06:32:28:18:dd:20:1d:f0:b5:dc:0f:c2:9d:4f:
74:ec:f1:46:23:82:12:1f:ed:94:69:bd:35:16:50:
cc:ab:96:25:3a:54:cd:9b:c4:e7:75:27:26:c4:94:
b7:24:95:fd:fb:be:dd:00:ec:d2:d0:0c:0c:4a:44:
2c:0f:18:cd:b1:ce:17:ff:50:62:6c:1a:23:ef:df:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E5:0C:6E:8A:10:8B:96:69:02:9A:E6:E3:22:20:8B:7B:6F:32:5E
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/guUMbooQi5ZpAprm4yIgi3tvMl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.224.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:f8:19:e8:98:e4:b0:23:b9:3f:bb:49:41:e2:24:12:a5:04:
25:57:a7:ca:71:cf:dd:d5:a2:58:72:04:b0:94:49:85:9f:cd:
4a:1c:97:dc:73:5c:9e:fe:a2:98:c5:c9:41:c6:be:d1:80:ae:
8f:74:50:b1:ce:88:96:76:c7:3c:71:ea:48:ca:28:e0:74:d6:
15:17:5d:0a:68:e7:92:32:ed:ba:27:e9:03:a0:cb:58:d1:60:
0b:79:88:e8:5b:c3:46:15:9e:8a:4d:c3:fd:74:fe:c9:1e:10:
8b:4c:d8:53:cd:06:6a:b0:fb:a8:fd:3f:6e:6f:dd:77:c4:55:
d6:e4:b4:bb:f2:f3:9e:f6:6d:30:27:07:59:32:4e:12:d0:aa:
78:77:e5:22:eb:cf:b9:a7:31:87:8a:2c:c5:46:99:e2:aa:cf:
97:5d:82:c2:11:ca:5a:e0:dd:06:6c:5a:77:8e:9d:ae:ce:26:
ca:e8:3a:c3:85:51:11:2a:10:a2:e4:ac:d2:e0:07:96:80:00:
de:25:2f:40:5a:7e:cd:fd:ce:52:66:d7:b6:61:64:8c:a0:42:
9b:f9:24:cf:9a:f5:dd:d4:54:b7:be:be:0e:5e:b6:ee:89:0e:
8f:9d:c1:f8:0e:91:e8:73:a2:92:3c:69:3a:07:a3:90:79:4e:
00:93:b7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:14 2025 by rpki-client