Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/GTxuBJTZE8RhiPu02DbvRC5p3z4.roa
File: GTxuBJTZE8RhiPu02DbvRC5p3z4.roa (raw, json)
Hash identifier: ODgzdGKPm6A4A6ykvf0SWXMpsN711v9+LdTfhHSvPgM=
Subject key identifier: 19:3C:6E:04:94:D9:13:C4:61:88:FB:B4:D8:36:EF:44:2E:69:DF:3E
Certificate issuer: /CN=673b3a71cf772755a3df8ced5d73516f871c0a11
Certificate serial: 01941FFA6A9E7566DBB40D078A0042AF65E2
Authority key identifier: 67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/GTxuBJTZE8RhiPu02DbvRC5p3z4.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3301
IP address blocks: 170.102.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Apr 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6a:9e:75:66:db:b4:0d:07:8a:00:42:af:65:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673b3a71cf772755a3df8ced5d73516f871c0a11
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=193c6e0494d913c46188fbb4d836ef442e69df3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:6c:39:8f:10:ac:87:b9:20:04:f0:b0:7d:
cc:1d:25:c0:11:ee:a3:a3:19:84:2e:c0:7f:16:51:
1a:21:58:24:41:12:44:86:5c:44:f0:fa:cb:87:ef:
b8:4d:00:6b:25:a3:57:f5:bc:29:7f:66:a3:6f:c9:
40:06:e2:10:5d:74:a1:73:b1:76:66:a2:a6:32:6b:
3f:f4:a2:e3:e7:84:c2:bf:66:6d:11:96:dd:3c:19:
08:0d:cb:f2:be:bc:88:00:69:65:bc:b1:0d:fc:f6:
55:36:98:72:27:f8:c5:89:5d:24:00:7d:bd:48:a2:
47:fd:0c:73:00:91:1b:85:58:10:f9:e8:2d:5e:ca:
5d:fa:57:b1:60:1c:74:06:5c:99:80:a4:e6:2a:4a:
e0:a9:ab:72:2f:c6:61:bc:e9:40:33:3b:e5:70:4f:
19:ad:ce:26:17:68:67:43:ee:28:e0:a4:ac:c9:0e:
ee:f2:8d:32:f0:14:81:a0:ea:a7:75:a9:cf:42:bb:
1e:8b:0c:64:db:d1:ce:1c:53:b7:47:81:d3:14:c2:
cf:56:a0:33:5b:cf:53:2a:b8:4f:50:48:b4:c5:4c:
37:25:de:c5:18:56:37:2f:81:b4:b4:a6:ce:09:e4:
47:10:f3:2b:25:bc:90:86:aa:88:43:79:93:c5:3a:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3C:6E:04:94:D9:13:C4:61:88:FB:B4:D8:36:EF:44:2E:69:DF:3E
X509v3 Authority Key Identifier:
keyid:67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/GTxuBJTZE8RhiPu02DbvRC5p3z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.102.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c8:e2:e3:58:4c:5d:12:ec:28:dd:76:f2:47:d9:d7:73:64:
98:19:00:96:7b:cb:f0:9e:0f:4e:b4:25:cc:ab:cb:ef:ba:5d:
60:66:0e:9f:7d:d3:b8:ee:79:ea:ac:42:57:6c:aa:67:4e:b6:
cc:29:48:70:d3:f6:13:59:2c:52:10:33:62:63:44:6a:49:4f:
bd:f9:c6:98:d1:c6:97:34:be:07:e7:86:1d:da:b1:bd:d4:db:
21:f2:ad:f7:fe:f1:21:8a:91:88:0c:49:67:b9:3c:b6:72:77:
67:fa:58:09:2d:ca:fc:21:40:8c:e6:f6:9b:aa:5a:57:d4:b4:
6e:93:52:8c:7a:ff:81:01:57:94:41:68:64:24:f8:6a:35:16:
7f:3b:d3:76:56:7b:ff:dc:8a:54:46:90:ae:5b:0e:50:74:2f:
5c:53:fa:a1:7f:d3:70:0f:55:36:ea:5f:d6:eb:84:49:44:f4:
0b:f5:d8:55:2e:5a:74:e1:d4:ef:80:5f:fd:88:df:17:9f:70:
d7:d8:3d:0a:fa:4f:1d:9c:ff:ca:16:4b:e2:ef:8f:31:bf:5e:
bd:5e:bd:a4:b5:36:3e:66:e8:f3:49:e9:91:5a:b1:4b:80:4a:
1f:37:84:6e:30:42:81:d5:53:67:36:71:af:b3:7f:f4:0c:60:
ca:c4:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:41 2025 by rpki-client