Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/gs0XpzxFNQmbs4Px1NH3MVPnW5M.roa
File: gs0XpzxFNQmbs4Px1NH3MVPnW5M.roa (raw, json)
Hash identifier: DwuTLpmUI5LgM0GpYDySurfXPWoPr7lrzuLuY77FykY=
Subject key identifier: 82:CD:17:A7:3C:45:35:09:9B:B3:83:F1:D4:D1:F7:31:53:E7:5B:93
Certificate issuer: /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial: 01942067C38353B64E7FDAA7E2E220073805
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/gs0XpzxFNQmbs4Px1NH3MVPnW5M.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 193.134.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c3:83:53:b6:4e:7f:da:a7:e2:e2:20:07:38:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82cd17a73c4535099bb383f1d4d1f73153e75b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:c5:5b:e6:9b:51:f9:4f:f7:1b:e2:c7:86:
8f:36:7c:1d:b9:71:28:33:36:5f:e9:de:54:d6:d0:
f9:5b:0a:2d:5c:67:78:57:41:13:90:3f:c6:11:43:
03:03:73:f0:f4:c4:0d:f2:8d:ac:ce:32:28:18:78:
56:db:5c:96:54:2f:1b:f6:fe:f0:63:7c:dc:00:59:
7e:37:80:d8:72:41:cc:b3:b1:4a:07:8c:66:e4:90:
e7:e1:99:87:f5:51:f8:ee:a9:75:fb:39:29:3f:3f:
ae:e1:1d:e9:50:9e:f9:ae:a2:8c:36:00:d8:0a:79:
19:50:e8:96:4e:03:7a:a7:6c:8d:b8:5d:18:54:46:
0e:1e:dd:53:bd:91:09:a0:ff:8c:60:e9:25:b1:48:
84:88:e0:0c:6c:4c:bb:8e:61:2f:1f:be:8d:96:6c:
7b:2c:85:ef:0c:a2:b8:ea:a2:a4:63:ed:f2:9d:12:
8e:2f:9e:fd:b1:f3:88:48:24:a9:61:3c:6b:4a:a5:
a6:70:90:b5:81:6d:cc:d1:35:6a:c1:e9:a1:e4:c3:
22:42:46:43:7a:fd:0d:cc:3e:0e:12:90:e6:09:0f:
50:90:9d:e9:ca:fd:84:d2:02:22:af:2f:09:28:a5:
e5:21:c8:c3:fa:92:df:69:6b:a5:8c:cd:26:6a:a8:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CD:17:A7:3C:45:35:09:9B:B3:83:F1:D4:D1:F7:31:53:E7:5B:93
X509v3 Authority Key Identifier:
keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/gs0XpzxFNQmbs4Px1NH3MVPnW5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.159.0/24
Signature Algorithm: sha256WithRSAEncryption
54:39:c2:92:99:bf:a0:b5:b3:75:19:0b:0f:3a:d8:ef:8a:3d:
22:4f:61:72:4c:7b:74:2b:d5:9e:f6:72:df:a0:21:b6:25:d4:
66:ff:06:9e:84:41:fe:a3:61:90:df:07:84:b0:81:27:3f:f0:
10:bd:fe:82:ff:22:fe:a5:b4:a1:29:ed:c2:dd:12:d5:d5:8e:
4c:75:a7:35:dc:f1:28:9c:6c:ba:e9:b2:6c:fe:2f:3e:b7:d4:
ee:4c:07:2e:7e:d3:a7:c8:71:bc:cb:a8:3e:19:c1:9e:6f:c9:
8f:2c:3a:13:81:27:21:04:15:7e:e9:c4:64:89:53:d1:59:f5:
c5:22:6e:b7:56:f7:92:62:c6:c0:cc:76:c5:9a:e8:6c:51:4b:
91:80:60:a7:19:75:d9:aa:e1:3b:bf:97:2d:59:5b:b1:63:d2:
b8:e0:d3:6d:3a:ce:21:4e:59:78:98:7f:95:cc:34:bb:cd:d1:
e6:81:0a:64:70:41:2a:79:cc:ab:14:ec:5c:78:c1:52:b8:fc:
f7:13:35:c8:16:e3:7a:b4:72:6c:9e:d2:75:a4:a6:a3:48:e3:
db:09:58:ce:98:d7:e8:7c:e6:6f:5c:2a:74:69:f2:b8:48:60:
4d:33:33:67:e3:bd:b0:a6:33:a7:92:b1:e2:39:47:fc:20:1f:
a2:8d:00:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:57 2025 by rpki-client