Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/Gu9ez5zlQGgsXPCgSAa011q3NCY.roa
File: Gu9ez5zlQGgsXPCgSAa011q3NCY.roa (raw, json)
Hash identifier: XMVaMgOJ4WWG4Lp4VxV89GlWKPKFR9zZG9BiqqxMKyA=
Subject key identifier: 1A:EF:5E:CF:9C:E5:40:68:2C:5C:F0:A0:48:06:B4:D7:5A:B7:34:26
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 01941F8C233921CEFFBDFCAA9191DBD55A4B
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/Gu9ez5zlQGgsXPCgSAa011q3NCY.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207131
IP address blocks: 93.95.28.0/24 maxlen: 24
2a12:af40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:23:39:21:ce:ff:bd:fc:aa:91:91:db:d5:5a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aef5ecf9ce540682c5cf0a04806b4d75ab73426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:75:08:de:5f:db:8a:05:b7:ad:07:b9:cd:
59:43:1e:99:80:f6:28:ca:bd:3a:22:70:d3:c6:be:
3c:91:30:a0:2a:38:f9:7b:44:98:ba:37:a9:89:3f:
3b:1f:de:c0:79:8b:e6:55:23:6f:c4:6a:83:c1:31:
fd:66:3a:81:c0:17:53:78:84:1a:2f:1c:f9:04:81:
4e:85:46:71:13:f8:41:f9:7d:de:2c:98:db:42:41:
18:cb:5f:7d:0c:a3:f9:dd:58:e5:6f:4f:c9:f8:0c:
17:9f:09:26:b9:85:ee:ba:df:49:94:29:aa:2c:0c:
10:da:46:4e:b4:b2:d4:8a:ec:a5:b4:52:2f:d4:4f:
ae:4b:6a:42:fe:18:4d:21:90:0c:a1:32:d1:52:06:
e9:86:b7:09:ae:fe:a2:9c:62:73:b4:38:7f:e8:86:
4a:c9:30:12:8a:82:f1:69:48:13:4d:63:94:bb:ac:
3f:5f:d5:c4:fd:c3:1a:be:0a:93:58:5d:f3:95:3f:
18:e6:cb:9b:4b:28:2a:42:29:0e:0c:07:f6:27:f9:
e2:44:bb:8b:9b:dc:da:34:3a:2c:10:b4:1d:a6:61:
ba:88:e3:93:2d:2c:5c:ee:a4:30:3e:5b:37:f9:96:
d9:a2:07:d3:e1:a7:25:9e:ee:4f:42:c7:37:a4:60:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EF:5E:CF:9C:E5:40:68:2C:5C:F0:A0:48:06:B4:D7:5A:B7:34:26
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/Gu9ez5zlQGgsXPCgSAa011q3NCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.28.0/24
IPv6:
2a12:af40::/29
Signature Algorithm: sha256WithRSAEncryption
16:6a:e3:24:de:5d:61:2c:e5:c3:ca:5f:6d:4d:8f:d0:c2:e8:
a1:b8:82:b4:e4:70:9c:14:d4:bc:e7:55:97:23:38:28:ff:96:
88:db:80:a0:e9:56:cf:72:7e:c4:77:ae:8e:f8:58:da:fa:8f:
ef:32:b0:ba:b6:21:e7:ef:a3:2f:ee:8d:2b:ff:09:54:9b:8e:
36:3a:fa:09:73:4c:92:42:e5:a8:2f:2c:40:60:53:c6:7f:77:
b6:db:0e:2f:79:39:79:9e:5e:13:1e:35:d9:6d:5a:68:c9:4b:
ea:d7:83:de:0f:f5:21:34:ff:aa:05:1d:9d:fd:b8:eb:62:0e:
b2:eb:5f:d2:fb:e7:9e:52:2f:83:39:6c:c2:b9:81:d3:97:a0:
c4:b7:e3:25:92:38:a2:86:37:20:31:00:6a:32:5e:cd:6a:e7:
fb:61:7c:bc:37:71:fd:d3:04:91:62:0f:e3:8d:f2:db:1f:e0:
7d:8f:fb:81:57:3d:0f:cd:99:e7:8c:f5:be:be:9a:c7:53:2a:
f1:c3:4a:8f:6d:91:f8:40:54:51:36:0f:86:dc:50:15:98:97:
62:4f:19:8c:4f:b6:90:5c:9d:19:da:be:30:57:6d:6e:4b:22:
48:03:bc:50:ad:fd:e5:2f:60:0f:d3:24:ef:53:3c:98:9c:7e:
97:24:65:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:10 2025 by rpki-client