Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/gVangjOt-W6Q-QV_s66mXYPcc_o.roa
File: gVangjOt-W6Q-QV_s66mXYPcc_o.roa (raw, json)
Hash identifier: DiTRQhaMQ99SN8kWmrVuQekBFcD8SdmyYMIP7Glc7p0=
Subject key identifier: 81:56:A7:82:33:AD:F9:6E:90:F9:05:7F:B3:AE:A6:5D:83:DC:73:FA
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019423D7DAFCE572645AD32AEF6ED965B07E
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/gVangjOt-W6Q-QV_s66mXYPcc_o.roa
Signing time: Wed 01 Jan 2025 21:48:56 +0000
ROA not before: Wed 01 Jan 2025 21:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44459
IP address blocks: 185.182.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:da:fc:e5:72:64:5a:d3:2a:ef:6e:d9:65:b0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Jan 1 21:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8156a78233adf96e90f9057fb3aea65d83dc73fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:1e:b4:a9:43:3e:3d:fd:67:00:95:88:37:
35:80:2c:1a:a8:16:24:d6:e3:af:d5:e8:93:10:6f:
c7:e7:d9:16:15:d6:d1:dc:15:c1:81:bc:95:42:be:
94:48:56:02:cb:a3:63:a0:73:c9:f9:6d:02:f1:8d:
7f:96:1c:f7:6d:fa:35:ba:90:93:7f:ed:af:3d:e8:
ca:42:f1:64:8d:12:e2:b8:88:d8:99:b9:2c:2c:b7:
31:a4:cc:28:2b:d1:32:fc:93:02:8b:3a:83:79:45:
44:7a:f4:28:7c:da:2d:93:d6:28:8d:53:7a:7f:ae:
1c:74:63:df:f0:3f:f9:18:12:cd:d8:ce:a1:de:3f:
88:65:46:e0:d4:36:c0:8e:30:8a:6f:0a:08:85:d6:
93:13:44:43:e7:96:db:97:2c:4c:74:bd:00:ce:42:
fd:e1:b1:ae:9f:6f:e9:1c:96:27:29:e9:83:a3:48:
6e:39:4e:65:a9:59:8f:53:cb:d8:08:8a:4e:f1:c8:
d8:5d:9f:c6:ee:46:0d:6c:9d:87:f5:d3:ab:64:ff:
a9:ab:a5:70:30:2b:3d:80:76:7e:4a:4a:11:d7:f4:
5c:ef:64:a2:db:ab:d4:f5:06:e2:c9:47:82:b3:b8:
f9:44:40:8f:c1:bd:f4:80:32:d2:58:b9:f9:12:55:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:56:A7:82:33:AD:F9:6E:90:F9:05:7F:B3:AE:A6:5D:83:DC:73:FA
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/gVangjOt-W6Q-QV_s66mXYPcc_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.240.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:0e:42:4e:d8:4d:8e:0e:c1:79:94:ae:18:f7:3e:c2:58:40:
d3:72:ab:ae:1d:4b:17:c9:08:ec:01:47:ff:bb:1c:52:de:37:
78:cb:38:e2:1b:3e:98:1a:53:7d:d9:91:fc:d2:9a:c6:6f:58:
3f:7b:5e:34:e6:9b:70:5b:cf:0e:3a:3d:06:b3:89:c1:c7:62:
7a:46:0f:db:f3:c8:10:d7:0c:4e:83:1d:86:b0:98:f5:5f:99:
01:4d:21:e4:2f:d2:e3:f8:28:e7:74:32:90:ba:6e:82:17:0e:
85:b8:36:e4:05:43:6c:14:e6:7d:d5:d6:8c:06:4a:69:52:5c:
77:c8:b6:4c:99:03:90:6c:26:ea:2c:83:fb:bd:50:92:f1:86:
36:4a:22:4d:d3:55:f1:04:cf:b0:f9:64:71:61:4b:eb:39:bf:
73:7d:2e:e3:f0:34:70:27:5f:8c:3f:92:62:fd:4a:6a:89:17:
d1:29:5e:d1:1b:8b:9c:8b:00:1a:a9:e6:b1:64:92:8c:cd:b6:
59:7e:8a:3d:aa:20:0d:c4:40:6c:32:b9:f1:8c:b5:63:aa:d6:
20:02:d9:e1:6a:e4:9e:92:9c:c7:59:3b:cb:a2:69:37:b6:53:
6d:ce:08:ad:3a:ac:3d:75:2a:f8:3b:35:0a:e5:cc:df:2a:0d:
5a:98:83:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:46 2025 by rpki-client