Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/gu1qAVxYV1JNHUi7sma3zTVhxOY.roa
File: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (raw, json)
Hash identifier: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=
Subject key identifier: 82:ED:6A:01:5C:58:57:52:4D:1D:48:BB:B2:66:B7:CD:35:61:C4:E6
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 019426D9DF7F5B07A00B9760245226420A1F
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/gu1qAVxYV1JNHUi7sma3zTVhxOY.roa
Signing time: Thu 02 Jan 2025 11:50:00 +0000
ROA not before: Thu 02 Jan 2025 11:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208324
IP address blocks: 45.143.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:df:7f:5b:07:a0:0b:97:60:24:52:26:42:0a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82ed6a015c5857524d1d48bbb266b7cd3561c4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:1d:5d:ea:b5:c4:a1:24:26:6c:5f:8a:d7:
35:73:f5:cf:d4:1d:07:b2:fd:be:49:fe:d3:71:3d:
c2:80:d3:15:fd:37:46:8c:19:ff:1c:f4:e9:24:e2:
97:59:01:bb:f5:4e:ae:3b:81:ba:14:3d:15:1a:00:
4c:25:49:ef:3c:0e:70:14:fb:a2:34:5f:5c:bc:e5:
c1:dd:4c:5e:66:c5:04:c1:e1:31:3f:71:3d:76:84:
12:db:65:f8:e4:e5:1a:1e:ad:45:0d:79:bb:fb:25:
e7:f4:a9:14:97:9e:95:8e:97:72:16:a9:a4:c4:85:
b9:6a:ae:3a:1d:2a:b9:d6:29:0c:15:84:e0:c3:4a:
09:75:bc:c6:57:60:97:00:a4:51:a2:20:9f:81:33:
ae:70:75:31:84:19:28:08:8b:f4:60:1e:e0:3e:bc:
ce:76:ad:ac:86:44:e9:01:de:fc:71:69:6f:28:30:
3e:ce:58:54:66:50:70:00:4f:55:95:5d:17:37:e9:
c1:de:5b:57:c6:82:44:30:91:24:20:79:25:de:e4:
5d:42:99:67:c4:33:98:7d:4b:24:0d:18:2c:16:59:
97:e1:e1:5d:e7:a0:e4:d8:fc:3d:57:7b:ce:b0:d4:
2e:c5:3a:66:f1:d8:66:54:64:c1:52:83:c2:0c:e2:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:ED:6A:01:5C:58:57:52:4D:1D:48:BB:B2:66:B7:CD:35:61:C4:E6
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/gu1qAVxYV1JNHUi7sma3zTVhxOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.31.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:4b:c2:6c:97:49:05:f8:c1:d3:21:0c:3f:a5:53:b7:29:a7:
bc:22:7b:92:3a:cb:3f:73:fd:00:38:ef:f1:cc:bf:b4:6f:38:
6f:5f:20:0d:3b:16:55:81:e7:5f:83:c6:49:b8:99:15:14:4e:
ce:a3:ae:43:6d:76:a5:78:29:38:82:66:6e:1d:ab:08:0c:ba:
3e:73:63:b5:0d:44:33:e5:c5:d0:f2:20:72:d0:e0:6c:13:e6:
33:a4:77:6d:dc:38:ad:8d:4e:7b:c5:a8:e1:50:61:6b:04:fb:
cb:d2:c0:04:42:a3:c9:49:2c:89:9f:86:2b:6c:66:e8:b0:35:
a6:dc:a3:c9:e1:e7:5c:ea:6b:87:be:7c:a6:8e:b7:f4:f5:00:
4d:bf:f2:df:3f:d3:0d:4e:d0:5e:09:47:1f:4e:dc:f6:4d:ea:
fc:a3:40:1d:ef:1a:aa:a1:ec:9d:ae:e8:1c:cb:af:0f:ff:c8:
31:9f:28:fc:41:e5:f1:a7:a9:54:aa:02:11:ce:05:8c:a3:e1:
d3:06:2e:44:0e:95:74:73:ff:d1:67:3a:6c:ee:d3:ef:9f:fd:
fa:4b:fc:ce:11:7a:e7:e7:03:6e:63:74:ae:ce:7e:bb:15:4c:
af:c5:3c:a1:8b:dc:d9:19:e0:bf:c6:15:bf:6e:8f:ca:ea:db:
57:64:66:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:45:34 2025 by rpki-client