Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/g-B5ZnHLRqZwnUDKx8sxkqLeq8E.roa
File: g-B5ZnHLRqZwnUDKx8sxkqLeq8E.roa (raw, json)
Hash identifier: 8/pCEAAfgXJlCEBGR3f8pKtVLnpOv7/3Vi60Zm9zN6Y=
Subject key identifier: 83:E0:79:66:71:CB:46:A6:70:9D:40:CA:C7:CB:31:92:A2:DE:AB:C1
Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial: 019426D8D1C75DEA51237BD81E54C1B02B81
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/g-B5ZnHLRqZwnUDKx8sxkqLeq8E.roa
Signing time: Thu 02 Jan 2025 11:48:51 +0000
ROA not before: Thu 02 Jan 2025 11:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 192.146.242.0/24 maxlen: 24
192.160.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:d1:c7:5d:ea:51:23:7b:d8:1e:54:c1:b0:2b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Validity
Not Before: Jan 2 11:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83e0796671cb46a6709d40cac7cb3192a2deabc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:71:05:e1:42:1c:23:90:fb:78:aa:a2:76:55:
33:98:a6:44:21:90:a1:7b:99:d5:e1:60:c4:a9:74:
8c:c4:5e:f0:fb:48:27:86:be:5d:5c:53:b8:27:2d:
22:bf:be:e7:fa:6b:83:14:bb:53:15:e2:b7:04:25:
94:4c:81:70:8d:7a:6b:e9:1d:c8:bd:ff:da:80:d4:
99:f6:cd:c5:b4:5a:d7:e1:c7:89:60:ef:e8:de:d6:
eb:0c:a5:e8:6c:f2:57:f1:f5:b1:6f:80:3a:29:fd:
0b:dd:a6:86:a6:ab:59:ee:fe:d0:79:69:55:ee:cd:
50:1b:32:f0:ba:5c:92:e0:1c:3b:e9:5a:59:b6:08:
26:82:2c:74:ca:7f:7c:51:fe:20:ae:83:0a:ac:cc:
59:7e:20:69:fa:a9:b1:ee:2f:0c:b8:90:54:05:a2:
ed:07:80:4d:81:e6:1b:47:ed:25:02:d6:e0:5e:c2:
14:ee:34:44:08:cf:04:2b:e0:98:b4:4d:b2:54:b7:
6c:28:08:85:cc:99:72:65:1e:65:86:af:b1:6d:9b:
b2:04:0b:b5:8b:f6:88:1d:e7:d9:1c:42:4d:5a:a6:
53:93:88:51:b6:53:43:c7:7b:34:ef:e5:2c:80:2b:
3f:51:11:62:d0:87:59:3c:2c:fe:16:93:78:de:8a:
e2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E0:79:66:71:CB:46:A6:70:9D:40:CA:C7:CB:31:92:A2:DE:AB:C1
X509v3 Authority Key Identifier:
keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/g-B5ZnHLRqZwnUDKx8sxkqLeq8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.146.242.0/24
192.160.156.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4c:a9:c0:e8:b1:ab:6a:89:52:83:6e:bd:c6:fd:28:4b:fe:
3b:76:b3:80:ac:d9:0a:5a:71:19:72:bc:3c:f2:36:18:73:3c:
1f:d3:5a:6a:ec:28:c6:cb:cb:97:b5:69:72:c2:27:46:16:f7:
fa:b0:f5:77:98:78:b2:f8:59:65:13:52:5f:dd:9a:ae:a3:ca:
bb:bd:fb:2e:b7:ff:92:82:1c:11:25:75:b5:50:c2:d2:93:83:
03:39:47:b5:81:8d:fb:2b:ed:2f:11:7a:ba:34:aa:ed:14:c2:
c9:11:86:78:17:f2:26:8b:35:3c:51:53:0f:e5:33:05:d1:5a:
88:f8:01:0c:2e:b8:96:5f:c7:b4:a8:4f:d0:70:2b:33:ed:13:
4e:c8:52:d1:77:64:fe:94:d8:f7:a4:95:c0:56:b1:13:a0:b3:
52:01:92:c8:c8:ea:d2:46:60:83:69:d1:4e:b9:d3:d4:8c:92:
a8:e6:dc:53:e9:6c:c0:22:1b:4d:42:35:33:61:4e:54:d4:d2:
53:dc:a5:01:be:eb:47:69:e2:64:b9:3a:1e:0e:83:b5:09:89:
e6:65:14:f0:e9:bf:3e:ff:4a:1b:32:53:9e:7b:9f:16:8f:2d:
e8:3f:5f:46:07:d9:39:27:c4:ea:e5:39:c0:3e:c7:a0:a4:f3:
5c:09:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:20 2025 by rpki-client