Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/GJCWcatdPgXKoeROae-Qf22FK_w.roa
File: GJCWcatdPgXKoeROae-Qf22FK_w.roa (raw, json)
Hash identifier: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=
Subject key identifier: 18:90:96:71:AB:5D:3E:05:CA:A1:E4:4E:69:EF:90:7F:6D:85:2B:FC
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 0194282333640B2D06394F46168B5A9BD1D1
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/GJCWcatdPgXKoeROae-Qf22FK_w.roa
Signing time: Thu 02 Jan 2025 17:49:43 +0000
ROA not before: Thu 02 Jan 2025 17:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 212.113.100.0/24 maxlen: 24
212.113.101.0/24 maxlen: 24
212.113.102.0/24 maxlen: 24
212.113.103.0/24 maxlen: 24
212.113.106.0/24 maxlen: 24
212.113.116.0/24 maxlen: 24
212.113.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:33:64:0b:2d:06:39:4f:46:16:8b:5a:9b:d1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 2 17:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18909671ab5d3e05caa1e44e69ef907f6d852bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:74:7c:3d:02:99:38:d0:69:04:16:b3:27:
bf:70:be:e5:87:39:67:c6:6b:de:06:4b:10:6c:f5:
61:26:da:c2:d3:35:52:0f:f7:03:e1:8a:2c:14:69:
fb:75:d3:03:ca:5b:e4:ec:f2:04:8e:74:db:97:9e:
f4:d5:8f:e1:bc:26:0c:45:6a:13:6d:8d:75:f8:cb:
35:2e:96:76:4a:99:78:e9:f6:35:80:e0:e8:9d:a7:
d6:ae:1a:58:98:b0:01:a6:b7:48:20:7b:0f:b8:4c:
21:03:aa:d9:95:85:fe:75:5d:bd:61:e9:e4:af:64:
3d:4b:ab:e8:ca:d5:31:9d:8c:bc:8a:4e:eb:21:fe:
88:30:33:84:10:77:b1:08:6a:18:71:19:98:96:73:
93:4a:98:f0:dd:3f:94:0e:59:aa:d6:d1:db:3d:99:
a3:90:0e:63:05:af:15:9d:1d:d3:f2:38:aa:b4:2c:
88:37:81:69:cc:ca:62:43:f9:3d:17:a3:a9:6a:06:
19:8e:df:71:2b:ef:02:ff:a7:ac:60:18:84:f5:fe:
19:26:da:55:04:6d:48:c6:a9:5e:b6:22:3c:c5:1f:
88:53:01:61:37:d0:be:43:ad:a6:37:d6:89:d1:d5:
7b:32:41:b8:0f:7d:20:19:d0:af:a3:21:b6:38:83:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:90:96:71:AB:5D:3E:05:CA:A1:E4:4E:69:EF:90:7F:6D:85:2B:FC
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/GJCWcatdPgXKoeROae-Qf22FK_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.100.0/22
212.113.106.0/24
212.113.116.0/24
212.113.119.0/24
Signature Algorithm: sha256WithRSAEncryption
72:95:29:38:b5:db:d3:8d:8c:d9:03:0d:5a:34:a6:7a:2a:53:
b3:6f:3f:a5:c1:42:dd:61:56:6c:5c:3c:51:47:29:65:4b:0f:
6f:8c:ab:7a:42:5b:44:68:54:af:4c:03:42:3d:36:e5:11:bc:
9e:9e:44:d0:54:f1:01:1e:19:00:c3:02:d6:19:63:b0:f0:29:
a4:6a:94:af:b6:4e:e7:0b:1e:7e:00:7d:57:1d:d3:a5:5a:32:
17:a4:da:eb:b8:ce:b1:f6:d5:84:91:4a:ca:73:79:0d:09:9a:
54:74:e5:db:40:bc:9c:a6:01:10:75:d5:5d:9d:e3:ac:14:78:
60:51:68:fd:b3:a3:ea:46:f0:60:c7:c5:99:a8:a6:fb:b6:43:
4c:de:b8:5e:b7:1b:4c:e3:e5:1c:1b:fd:4a:3a:b7:18:fb:94:
9c:ae:73:45:85:22:31:4e:c6:64:74:ba:ae:72:71:20:9f:dd:
77:bb:aa:69:4f:3a:ba:ab:f9:42:c8:55:90:0e:fd:78:f1:c8:
55:e8:2b:b5:ca:e4:95:0e:1e:5b:b4:74:8e:00:1d:ef:96:24:
8e:56:ed:85:fd:f7:71:3f:bc:4c:9b:e1:b7:f1:ef:18:79:2a:
3f:33:90:3c:4b:f6:99:46:03:d8:86:35:1e:cb:04:35:b3:85:
89:77:7c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:00 2025 by rpki-client