Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/GqF55OK8p88k_RA7XjSbJsgeScE.roa
File: GqF55OK8p88k_RA7XjSbJsgeScE.roa (raw, json)
Hash identifier: UqarmNk43/6OgpiiKkH7WYGaCUS8csQFBD1FbaFpkx8=
Subject key identifier: 1A:A1:79:E4:E2:BC:A7:CF:24:FD:10:3B:5E:34:9B:26:C8:1E:49:C1
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 019423D6B1C128A3FF324254C289AC3EE715
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/GqF55OK8p88k_RA7XjSbJsgeScE.roa
Signing time: Wed 01 Jan 2025 21:47:40 +0000
ROA not before: Wed 01 Jan 2025 21:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50187
IP address blocks: 31.44.244.0/23 maxlen: 23
31.44.244.0/24 maxlen: 24
31.44.245.0/24 maxlen: 24
31.44.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b1:c1:28:a3:ff:32:42:54:c2:89:ac:3e:e7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aa179e4e2bca7cf24fd103b5e349b26c81e49c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e9:03:90:b1:ba:f9:76:52:5d:33:ac:0c:e4:
cc:26:99:b6:b1:61:24:0a:d7:af:57:08:a7:c4:da:
2d:a0:5e:6d:53:46:db:a8:b9:b5:46:fb:cd:a7:58:
dd:a6:5e:9a:5f:c6:39:5f:ab:1c:5a:fa:85:58:3a:
60:89:e9:3b:9e:29:7d:09:62:c3:90:40:a3:57:bb:
0f:5d:bc:6d:68:02:bc:73:88:f7:7d:31:30:58:6b:
b1:fb:01:b8:a3:1d:f3:72:73:30:9a:5e:bd:5f:15:
05:a9:fc:ee:0c:5a:7b:b9:c9:3d:29:1e:79:d4:75:
96:bd:9b:43:e1:f2:89:57:5c:0a:95:10:db:c9:d3:
74:18:83:c4:d9:84:14:3b:0c:51:83:ab:2d:ef:99:
81:f2:35:30:a7:51:9a:d6:69:19:4d:03:a9:d0:07:
27:c2:5d:8a:63:7e:3b:0d:d0:33:08:b4:b9:31:cb:
57:3e:06:9b:34:c3:32:51:fb:24:6d:da:c9:b0:2e:
40:2a:df:3e:58:4c:e5:27:c9:c4:12:4b:c8:70:7d:
31:97:23:ee:32:63:d1:5c:21:da:9a:26:a0:6d:6d:
68:31:8d:27:7c:76:c7:27:85:be:46:4f:9c:f2:31:
a0:a1:93:76:60:fa:fb:82:fb:4f:e2:f8:96:d5:94:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A1:79:E4:E2:BC:A7:CF:24:FD:10:3B:5E:34:9B:26:C8:1E:49:C1
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/GqF55OK8p88k_RA7XjSbJsgeScE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.244.0/23
31.44.247.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b0:96:f7:19:48:b0:4c:40:18:78:be:02:90:25:d4:e0:28:
7f:5b:6c:16:73:de:de:d2:dd:a6:5a:b0:84:d9:53:be:4c:a6:
26:40:8c:6d:7e:fe:16:28:f4:82:1d:ff:0d:89:15:43:fb:af:
c4:e1:21:68:18:e4:08:73:e0:74:2f:49:e2:e8:6e:d9:1a:a3:
37:5a:91:8c:a3:db:a4:9e:32:1a:df:2a:42:ee:a7:c0:c6:5d:
87:11:29:b9:a8:49:9e:f1:81:da:6a:60:e9:e9:ae:b2:7a:5d:
3f:c8:65:0a:bf:b0:ce:04:15:75:0d:de:c2:c2:7a:99:81:58:
88:3f:cc:2d:dd:f5:04:5c:07:63:c9:fe:22:26:5f:97:43:ae:
ef:b1:82:fb:62:36:d1:a4:68:76:f2:84:b3:04:fb:4e:41:c2:
a1:41:bb:3d:54:1e:0e:2c:1e:02:49:44:1f:a1:e8:fd:b4:c5:
04:01:f5:10:b9:e6:48:5b:be:ba:0e:c3:9b:cb:9f:5d:6a:e6:
2c:59:cf:85:03:fb:cd:36:11:e9:11:d9:80:a2:50:a1:ad:10:
06:be:68:e8:34:14:17:8e:e1:9e:b3:1d:a9:2e:7b:f6:6c:51:
83:9e:c0:47:ff:f5:91:ed:89:af:cf:b1:93:c5:4f:8c:c4:4c:
64:2c:f1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:46 2025 by rpki-client