Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/GOvB6QZnz6YW3hChXA1oOkJyRf0.roa
File: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (raw, json)
Hash identifier: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=
Subject key identifier: 18:EB:C1:E9:06:67:CF:A6:16:DE:10:A1:5C:0D:68:3A:42:72:45:FD
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 019426D916E1B3B3B7772E4A514A67603D63
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/GOvB6QZnz6YW3hChXA1oOkJyRf0.roa
Signing time: Thu 02 Jan 2025 11:49:08 +0000
ROA not before: Thu 02 Jan 2025 11:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205816
IP address blocks: 185.245.20.0/24 maxlen: 24
2a0c:9b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:16:e1:b3:b3:b7:77:2e:4a:51:4a:67:60:3d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Jan 2 11:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18ebc1e90667cfa616de10a15c0d683a427245fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:f3:04:4c:0a:3e:87:ad:86:86:ae:38:e2:
eb:7a:8b:a0:f8:a4:59:60:9b:4c:04:71:18:37:56:
f2:4c:17:06:42:48:5e:c2:d4:97:21:85:c5:fb:43:
a4:84:64:3e:c9:42:67:c6:5d:1e:99:49:38:60:f8:
98:d9:e2:8e:b2:ba:27:9d:01:1f:77:a5:29:72:ee:
07:1c:11:5b:8f:da:89:9f:4d:dc:4a:31:48:c4:27:
6c:41:c4:cf:17:d5:36:f5:87:8e:1a:75:67:1b:b9:
70:24:fa:fe:66:a2:cc:aa:96:0b:fc:bc:9d:10:f6:
09:40:a4:90:5c:62:50:fa:73:86:af:24:c7:a0:c8:
fd:a1:a2:88:e4:5b:ed:78:f8:d9:63:f6:ea:53:ae:
48:ce:ea:9c:7b:7b:e4:7b:b0:48:e1:ec:94:ba:09:
12:d2:6b:67:ea:be:15:71:92:fd:52:da:48:eb:dc:
4d:46:bb:1d:0e:47:0f:e3:b3:a8:91:69:d4:59:26:
25:9b:38:29:5f:5e:d1:06:dd:f2:07:81:e6:7f:17:
50:26:15:97:bb:b3:7a:83:ed:bc:2d:65:7f:0a:d2:
3b:96:4a:07:aa:d3:80:24:2d:a0:77:8d:95:88:d1:
49:d3:f8:a2:88:8a:f9:e4:62:d2:77:b2:81:b4:69:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EB:C1:E9:06:67:CF:A6:16:DE:10:A1:5C:0D:68:3A:42:72:45:FD
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/GOvB6QZnz6YW3hChXA1oOkJyRf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.20.0/24
IPv6:
2a0c:9b80::/29
Signature Algorithm: sha256WithRSAEncryption
70:6d:93:ca:f6:c4:88:c6:ac:3a:1a:8d:ef:98:9a:6e:c5:ee:
b4:de:c7:70:23:ad:5b:7a:e2:13:45:cb:94:ab:04:dc:96:15:
23:84:30:ab:9b:bc:d3:62:cb:17:47:87:44:6c:4b:68:63:b0:
0d:4c:f9:81:f2:47:00:c4:c3:d5:6f:c2:dd:6d:b6:63:1f:1a:
e0:f2:c0:90:3c:90:ed:6c:0c:c8:f4:bd:c2:f6:d3:c8:ac:cb:
fc:d3:01:4c:3e:43:6d:fb:e9:47:60:1e:02:86:04:84:13:f0:
8a:1a:1e:dd:b4:de:4d:fc:cc:99:e7:f4:5c:95:36:a8:1e:92:
e1:f1:f0:5e:af:cc:e9:a6:d5:e5:19:17:02:48:ee:33:f5:c9:
4e:e9:f8:bb:17:e4:ab:6d:76:73:b8:83:c3:f2:78:72:c4:f0:
32:03:2a:a1:de:82:90:90:0c:c6:a0:0e:bd:59:a8:6b:55:fd:
a9:e6:26:5a:b0:92:fb:e1:6f:c5:4c:c3:bb:60:ba:07:c1:da:
af:1d:fb:6e:69:7e:ff:70:17:a0:b6:55:47:c0:47:86:9b:f0:
2f:95:67:9a:1e:77:d5:32:ef:fd:f0:ed:56:f8:c9:a4:9a:8b:
30:58:f6:de:f0:ed:4c:26:ed:2e:10:76:5c:3e:9f:f7:36:c2:
3a:a4:2e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:37:04 2025 by rpki-client