Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/gW_G76RFMLSzYYOGI4d6BczgByI.roa
File: gW_G76RFMLSzYYOGI4d6BczgByI.roa (raw, json)
Hash identifier: utvnJl86/qSWbfQRU6cXaUD+ebiVMAdDeUjzMCHPL8I=
Subject key identifier: 81:6F:C6:EF:A4:45:30:B4:B3:61:83:86:23:87:7A:05:CC:E0:07:22
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5A8A70951D047400E1290A0B350E5
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/gW_G76RFMLSzYYOGI4d6BczgByI.roa
Signing time: Thu 02 Jan 2025 15:50:04 +0000
ROA not before: Thu 02 Jan 2025 15:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 31.184.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a8:a7:09:51:d0:47:40:0e:12:90:a0:b3:50:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=816fc6efa44530b4b361838623877a05cce00722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:53:0e:11:b0:a9:bc:81:3a:04:7e:e8:74:
22:5e:8d:8e:cd:76:ef:8b:9a:14:73:09:3e:a7:5f:
be:4c:ee:d8:33:4e:24:76:85:71:d4:66:c8:d0:e2:
d5:2a:ca:38:25:fa:3a:da:51:5a:14:9f:48:cc:dd:
90:cc:53:19:a9:d7:40:37:d0:9b:86:b5:cd:95:28:
bc:de:3a:bc:b9:16:01:d6:1c:58:de:c9:f8:90:01:
4d:ff:21:85:94:bd:b2:d8:1a:5f:fb:57:7f:32:0f:
8a:62:bd:1b:b2:7e:4f:46:60:c1:c9:fa:d7:5d:b3:
90:0b:5e:a6:cc:62:40:ce:72:12:a1:52:45:5b:98:
e5:ea:4f:42:5e:84:65:1a:ea:2f:36:5a:a7:f1:6e:
c9:c8:dd:e6:84:7f:75:ac:ef:75:56:ea:37:fe:42:
c8:cd:4f:25:0c:3f:1b:01:23:52:09:b5:ef:18:4c:
75:bf:60:c8:13:24:7b:fe:9b:7a:01:4d:1b:70:22:
71:29:73:64:04:a8:47:30:32:07:e3:6b:40:b5:a4:
52:03:5d:67:63:22:14:0f:36:9a:12:fe:c8:0b:c1:
80:56:1e:87:3a:1e:de:16:ae:73:94:8d:7c:73:cc:
7c:13:65:c3:c7:06:0a:0a:13:f5:db:4d:dd:08:34:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6F:C6:EF:A4:45:30:B4:B3:61:83:86:23:87:7A:05:CC:E0:07:22
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/gW_G76RFMLSzYYOGI4d6BczgByI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.242.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:be:ae:c8:58:a8:06:b3:fc:68:ca:90:fa:d9:fe:d2:9c:03:
01:7d:39:6b:4c:6b:d5:c2:9d:ef:20:a8:31:61:47:a8:f7:c3:
39:c8:02:e3:ad:d0:06:c0:bd:16:4d:0f:ac:29:aa:8b:d0:d0:
5b:68:0d:e6:fe:07:4b:6d:2c:a9:2b:77:4d:a6:81:ac:77:c9:
d0:cd:c9:47:0e:56:e0:dc:65:00:74:ae:e4:88:01:62:0c:dc:
54:fd:9c:41:ab:df:56:bd:2c:9b:9d:dd:56:5b:af:69:a6:c9:
aa:f4:a0:c0:f2:ed:a5:70:07:07:61:7b:aa:23:1d:f0:1c:bc:
7e:f8:4f:9f:26:ca:97:75:f7:ed:3d:8f:95:41:c0:5c:8a:b5:
e6:fe:f4:35:01:d8:3f:4f:97:3f:25:7f:7f:a4:53:27:57:b6:
e2:14:48:19:79:1c:64:27:0d:18:33:3b:04:cf:c5:b9:71:69:
c3:60:a8:20:f5:22:45:41:d1:e7:10:64:ab:0d:7b:b9:91:92:
e3:79:7a:af:15:08:b0:77:a6:8f:31:fa:ae:4c:12:be:e3:dc:
c6:4f:cf:8e:a2:5a:91:bb:b7:76:15:9f:58:61:23:c4:62:3f:
85:99:78:a2:6a:be:57:4d:db:84:d6:d3:5b:02:61:77:0a:86:
05:10:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:21:16 2025 by rpki-client