Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa
File: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (raw, json)
Hash identifier: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=
Subject key identifier: 18:E6:DC:47:D8:60:C5:8B:4A:C5:A5:17:69:9D:27:C0:9B:C2:4A:52
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0196C2A58A1317A746D1B99ABF3B37FAB819
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa
Signing time: Mon 12 May 2025 03:59:10 +0000
ROA not before: Mon 12 May 2025 03:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 45.129.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a5:8a:13:17:a7:46:d1:b9:9a:bf:3b:37:fa:b8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: May 12 03:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18e6dc47d860c58b4ac5a517699d27c09bc24a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:4a:a6:c6:a1:f8:38:37:76:08:7a:f3:b1:
ac:ae:33:a5:48:d6:e8:6d:35:c6:ab:df:2e:39:af:
c9:f6:27:f7:60:03:34:93:73:97:96:e7:b6:01:b4:
ce:0a:64:05:d6:6c:ea:9a:81:6e:cb:f0:c5:41:8c:
a5:84:06:e9:4e:e5:83:3e:eb:29:63:07:3d:5b:88:
76:1a:39:d1:d3:7e:35:96:48:7a:df:96:c6:5d:7d:
fa:58:e7:b4:1e:77:03:55:8b:bc:38:bb:92:38:7a:
c2:24:f9:cf:a0:85:e1:d6:f8:63:1c:76:e5:6b:4a:
93:67:c0:d5:ba:12:10:68:e2:14:57:91:a0:ed:ef:
cb:cc:03:6c:83:3c:2b:c5:12:82:1e:74:75:3a:25:
28:6c:91:ca:28:91:47:01:c7:1c:85:58:49:61:aa:
1b:7d:1d:3f:3f:7c:6d:c6:db:6b:53:72:a0:5e:3a:
7b:86:d2:72:35:b2:d1:58:e2:05:20:07:04:13:b8:
46:e7:11:e0:48:73:ed:79:45:d1:f8:9c:d4:d7:2f:
fe:b1:7a:74:3a:f7:26:36:e8:a5:fc:0c:fa:26:39:
35:d6:16:01:68:b3:96:84:8a:3d:4d:f0:0c:a4:d5:
8c:76:b5:a2:6b:82:c6:92:e7:97:ff:c1:34:00:c2:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E6:DC:47:D8:60:C5:8B:4A:C5:A5:17:69:9D:27:C0:9B:C2:4A:52
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d2:47:fe:6a:06:09:1f:fd:5b:2d:ea:67:40:b0:80:4e:d7:
28:3f:af:2e:76:ff:ed:fb:e5:a8:d0:46:9f:94:46:a3:8a:28:
91:82:d8:5b:ef:84:27:5d:d1:55:74:2f:93:34:fb:e9:4d:16:
33:0d:a6:2b:e3:56:38:d1:df:38:a5:14:55:e5:06:85:45:6f:
6a:e2:37:52:49:23:e5:83:2b:88:4c:d7:43:61:fb:39:34:e4:
4f:de:a0:7c:0a:e2:b1:2d:09:c8:33:4c:d5:7b:57:06:9a:f9:
1b:67:f5:b5:58:be:4d:93:ef:c1:62:27:2d:3f:86:05:11:0f:
6b:17:8f:54:2c:2a:f2:18:c2:7f:c9:e2:3f:77:31:39:1b:66:
4f:95:06:c7:9b:13:4e:db:fc:96:2d:0e:6d:97:70:27:cb:43:
e6:44:25:09:b9:40:49:b4:e8:cc:d1:55:e1:f9:01:2f:b1:81:
fd:07:8b:97:5d:77:4c:d5:89:98:0d:83:7d:e6:04:a3:53:47:
0d:85:38:fa:26:cd:1c:59:76:56:f3:c5:88:bd:9b:3b:34:be:
a8:3e:e8:d8:c8:52:fe:a1:6e:dc:a2:62:d9:df:b6:43:d5:ad:
e4:cd:14:06:e0:96:9e:dc:fe:d8:21:ef:46:7e:2a:36:03:26:
2a:28:c1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:56:43 2025 by rpki-client