Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/GeCDPctDMr8_oxBfY1DLpT-20DY.roa
File: GeCDPctDMr8_oxBfY1DLpT-20DY.roa (raw, json)
Hash identifier: j6bnRGc6X+NPwJ7gB1IhU9+ls4qLRAE/TfyaEuu2IDQ=
Subject key identifier: 19:E0:83:3D:CB:43:32:BF:3F:A3:10:5F:63:50:CB:A5:3F:B6:D0:36
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCA4AA836BCC6BC7127AA81D7FB9D2
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/GeCDPctDMr8_oxBfY1DLpT-20DY.roa
Signing time: Thu 02 Jan 2025 07:48:21 +0000
ROA not before: Thu 02 Jan 2025 07:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20555
IP address blocks: 2001:1a68:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:a4:aa:83:6b:cc:6b:c7:12:7a:a8:1d:7f:b9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19e0833dcb4332bf3fa3105f6350cba53fb6d036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:58:e3:7e:58:f2:60:12:a6:51:21:3d:ed:1e:
2e:da:5b:24:26:d6:fe:ff:60:04:15:44:2f:a2:5a:
0a:ef:a4:05:e2:81:af:f3:5b:5c:80:75:a9:0e:0a:
37:6d:21:c7:e7:d3:a0:d6:ca:22:74:89:a0:46:79:
33:d1:97:97:90:61:7d:68:8c:9a:30:69:50:d1:ca:
54:15:63:8e:e6:d2:5d:ce:36:b8:b7:56:62:4c:ed:
ae:41:1b:ca:2f:0b:0d:eb:aa:52:7d:6d:42:14:d8:
fc:94:bc:32:73:2a:51:99:56:1d:9a:19:ef:7e:95:
16:49:f0:08:76:fe:83:e7:18:2e:b3:d1:05:a9:ee:
76:e4:8a:68:54:bf:1e:9e:c9:37:7d:cd:3b:f0:87:
a2:b1:5e:86:0d:ad:28:fb:fb:2a:d7:e9:a7:ab:67:
3c:ff:71:7a:39:b0:db:ba:8e:e2:02:04:1a:94:2f:
2b:42:e3:54:b3:fc:48:83:e2:66:3e:fc:75:36:7a:
3b:20:dc:99:12:bd:8e:15:60:f0:58:54:aa:2a:5c:
7e:22:45:06:af:fe:68:58:3d:df:a4:c6:58:2f:0c:
49:7c:21:ac:11:3d:6e:cb:73:3f:66:18:2f:f4:a0:
b5:0c:98:96:58:bd:27:68:50:a1:28:79:ab:7a:5f:
c5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E0:83:3D:CB:43:32:BF:3F:A3:10:5F:63:50:CB:A5:3F:B6:D0:36
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/GeCDPctDMr8_oxBfY1DLpT-20DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1a68:a::/48
Signature Algorithm: sha256WithRSAEncryption
8e:89:3f:16:bd:18:6f:cd:5d:2b:68:be:ab:64:ad:ca:d1:db:
29:fa:a4:05:76:09:6a:ef:7f:d4:23:23:62:ad:df:37:55:41:
4f:0c:f1:14:d9:ac:d5:7a:77:91:ec:36:75:2f:95:d2:96:5c:
af:77:92:af:83:36:03:22:fa:a8:f7:fa:74:88:53:bc:4e:8f:
53:ee:bb:ff:5b:8d:b2:0a:f0:6c:91:5d:db:da:df:ff:71:b5:
bb:e4:38:45:d0:eb:97:cb:30:e2:7e:70:99:17:a1:d6:a0:3b:
d0:77:18:47:95:3f:0f:b7:4b:3b:31:86:57:26:d7:9b:e0:31:
dc:0f:19:52:2d:7d:5a:74:30:01:c1:a2:28:a0:ba:6f:50:db:
dc:44:c7:95:8a:f4:ef:d0:0f:7a:df:0c:66:a9:1e:ae:e9:10:
06:c4:a9:55:3c:02:82:77:5c:ac:29:ea:10:de:d3:21:5a:e7:
fe:a2:51:e2:4b:36:5d:e9:ac:23:cf:6f:35:9b:9d:64:c2:e8:
0e:75:93:2e:c7:c1:cb:b0:5a:6e:b7:be:7e:54:13:f5:15:4d:
84:46:49:3f:95:f4:cb:32:57:12:b3:b8:d8:aa:79:79:e9:59:
d6:23:2a:a0:8c:5f:90:e0:a5:7c:aa:46:86:45:16:6d:7f:89:
8b:28:0e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:37:20 2025 by rpki-client