Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/gR6HPRWa_I93ATF_6lEGpZdtVD0.roa
File: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (raw, json)
Hash identifier: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=
Subject key identifier: 81:1E:87:3D:15:9A:FC:8F:77:01:31:7F:EA:51:06:A5:97:6D:54:3D
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0194228E0DD70D9A36041E137D092239AE50
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/gR6HPRWa_I93ATF_6lEGpZdtVD0.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199515
IP address blocks: 213.153.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0d:d7:0d:9a:36:04:1e:13:7d:09:22:39:ae:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=811e873d159afc8f7701317fea5106a5976d543d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:cc:56:62:f6:c0:80:fe:8f:72:7d:02:a2:
c4:e8:07:7d:43:3b:18:7a:23:4e:f3:d4:e3:33:a0:
d4:2c:8a:b3:43:86:3b:be:cc:1c:19:0f:05:1c:9e:
2c:76:fb:c3:6a:99:e8:37:fc:9c:36:c9:3f:dd:20:
c8:1f:d9:91:b9:02:a3:3d:99:81:02:98:46:20:6a:
44:bb:94:8b:cc:98:e5:eb:1d:9b:3f:1b:97:bb:f1:
fa:42:0f:32:4e:6c:2e:b3:ff:01:63:68:4b:d6:75:
61:6f:d2:6e:09:b0:d4:f8:70:d8:47:7c:71:0a:8d:
5c:9a:cf:58:af:9b:96:16:f3:7f:b3:f0:13:b1:74:
a2:e9:56:3b:95:2f:eb:2e:19:3f:30:c1:97:33:41:
83:09:19:f8:1c:1c:69:41:13:c6:0f:f8:6e:0d:14:
32:06:d6:bd:b1:15:b0:60:bf:ca:32:c3:50:d3:7d:
80:b0:54:19:e5:61:75:ac:b5:5c:3a:d7:71:d6:22:
c3:ac:94:e9:31:aa:38:fe:3d:ac:a9:8a:93:ec:99:
b2:31:05:32:ef:a4:b6:57:38:11:50:83:a9:c7:bd:
b5:49:0f:d4:6f:ba:b2:f9:f2:c3:42:df:7c:d2:6f:
59:48:50:53:31:af:ce:66:83:43:b4:f4:52:25:86:
aa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1E:87:3D:15:9A:FC:8F:77:01:31:7F:EA:51:06:A5:97:6D:54:3D
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/gR6HPRWa_I93ATF_6lEGpZdtVD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.153.232.0/24
Signature Algorithm: sha256WithRSAEncryption
96:4c:4a:00:7a:5b:74:07:b9:92:d1:93:f4:83:54:63:e2:a8:
6a:75:ab:c9:98:85:e2:5d:59:62:31:93:13:6d:ed:19:4d:fe:
65:80:e2:09:21:59:68:50:30:0c:d3:46:aa:85:11:ca:83:23:
4c:ef:a7:0e:a3:ed:16:2f:d1:8d:95:c7:98:87:93:79:6b:2b:
d0:43:69:5f:83:c2:9b:08:15:d2:b1:29:95:8e:43:3c:d3:7f:
d0:44:79:8b:e6:32:c6:d7:28:96:e2:09:fe:cd:b4:c7:68:8d:
c9:7f:a6:b4:9c:1a:15:1c:66:6a:04:69:a7:a2:bc:6f:08:bb:
a5:4a:31:17:c0:a4:20:22:5e:be:b8:a8:b1:c2:db:68:b5:89:
d1:6d:3f:8b:a4:91:a8:19:f1:9e:12:9c:e6:9e:75:c2:33:d7:
2a:f2:7a:64:eb:f2:34:74:50:13:2d:eb:84:dc:9e:67:5f:06:
52:cb:d7:91:36:10:a7:c0:48:59:0b:9a:46:03:47:73:fa:0e:
2e:cd:68:e6:a3:f5:1c:83:ed:c0:e9:39:21:b2:41:83:76:d6:
65:25:c9:8f:28:c6:b9:2d:c0:3e:14:66:e9:ac:dc:f0:8a:61:
3d:7d:99:a4:3d:1d:72:b7:0a:bf:12:b4:bc:da:6f:ec:9e:e8:
77:9d:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:41:21 2025 by rpki-client