Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/cGaM1pqwI_iREeyFYU4bDaF6huI.roa
File: cGaM1pqwI_iREeyFYU4bDaF6huI.roa (raw, json)
Hash identifier: ZX5FkbfvKLABufYmP9T9sbDn4rTGZcGZ9RNRwuV4C4s=
Subject key identifier: 70:66:8C:D6:9A:B0:23:F8:91:11:EC:85:61:4E:1B:0D:A1:7A:86:E2
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 0194252158858C23D3305312CC8298308C85
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/cGaM1pqwI_iREeyFYU4bDaF6huI.roa
Signing time: Thu 02 Jan 2025 03:48:49 +0000
ROA not before: Thu 02 Jan 2025 03:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41872
IP address blocks: 193.178.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:58:85:8c:23:d3:30:53:12:cc:82:98:30:8c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: Jan 2 03:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70668cd69ab023f89111ec85614e1b0da17a86e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:3a:04:3e:ad:5e:88:db:7b:a4:87:eb:4f:
cc:71:c0:1c:c3:f9:9c:56:3f:a9:65:b6:fb:06:12:
f0:3e:06:e6:e6:88:ac:2d:06:d7:55:61:1c:b5:1b:
09:31:d1:b0:5d:37:ac:27:a5:2d:6f:98:ea:ea:fb:
d3:8a:36:2d:46:34:9c:85:d1:cd:f3:a1:7d:d6:f3:
71:ed:5b:76:a2:62:fe:2b:bf:f3:b3:04:cf:a0:57:
a4:8f:d2:78:d5:cd:8e:5f:0d:b7:00:47:66:68:4a:
47:9a:14:34:21:c8:77:f8:17:de:28:05:2c:ef:3d:
ff:9d:7a:cd:bf:0c:3a:fe:c4:06:f3:95:72:93:94:
94:4c:d7:ba:42:38:ea:db:78:87:0b:86:3d:69:92:
d0:18:fd:99:4f:1a:a5:d3:01:0b:a4:a3:63:99:d3:
d7:9a:32:ea:51:cd:f9:ac:86:da:75:a6:95:c0:b0:
b3:ee:29:3e:42:4c:1f:ae:11:db:be:3b:8b:c1:ab:
a1:3a:f4:56:ed:3a:45:1b:44:e1:da:60:58:2a:ac:
fd:c3:b5:30:47:7c:c4:dc:ed:c7:5a:57:a9:3b:25:
7d:9c:9d:38:fe:9e:79:ea:33:35:07:a3:86:ff:6f:
a2:59:42:21:ab:37:b1:0d:a0:67:fe:59:45:70:3c:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:8C:D6:9A:B0:23:F8:91:11:EC:85:61:4E:1B:0D:A1:7A:86:E2
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/cGaM1pqwI_iREeyFYU4bDaF6huI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.156.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:fd:3b:d6:5f:dc:a8:c0:ed:eb:37:ed:09:9f:ea:73:46:ba:
67:57:eb:d0:9d:ee:ed:ff:7c:8b:03:ff:d8:ea:92:72:da:ee:
6e:0d:b8:d2:3e:a9:91:0b:f6:17:3a:f1:45:85:5c:9a:cf:c5:
2b:46:38:63:de:dd:fb:ab:91:1c:a3:0a:ff:a8:2e:ca:c4:ca:
ae:52:f8:04:f6:a5:c1:7d:3c:72:03:88:ac:eb:5c:4c:0d:7e:
54:80:c4:71:2b:0f:0e:d9:0f:14:e4:e7:35:59:16:38:4a:33:
09:cd:7e:9e:a6:76:2a:fa:5a:97:c4:e3:a8:70:b5:8b:5f:11:
f7:77:7a:f0:00:12:43:73:d1:47:95:a9:c5:bb:92:d1:c1:bd:
2c:d5:e9:6d:56:e4:dc:2f:d4:7f:95:b5:c2:47:32:1d:e8:ff:
7f:06:b1:c3:d0:53:e4:3a:9c:4f:d5:11:aa:0f:95:52:11:d2:
f0:47:1b:0f:ab:92:be:81:e1:e2:30:82:08:eb:8c:56:ae:4a:
3b:9b:a7:fb:f0:c5:e5:48:64:c0:0a:e3:ce:f8:4b:fd:b0:aa:
6e:68:fe:e4:1f:8a:b9:80:c7:86:dd:c1:3e:85:d7:e6:14:11:
d3:5c:74:dc:e3:c6:4d:82:3f:95:5a:1f:20:73:27:fb:52:97:
ff:94:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:38 2025 by rpki-client