Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa
File: gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa (raw, json)
Hash identifier: ynLfSUBP+/RK0hSDUfdxyie+FGZVBwWsIpKno/W57hk=
Subject key identifier: 82:58:CF:65:11:C3:E2:8F:09:36:33:48:27:11:DB:CA:1E:24:69:14
Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial: 019423D6A49707A05C4A21963A78FB2DE77E
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa
Signing time: Wed 01 Jan 2025 21:47:36 +0000
ROA not before: Wed 01 Jan 2025 21:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16019
IP address blocks: 91.231.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a4:97:07:a0:5c:4a:21:96:3a:78:fb:2d:e7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
Validity
Not Before: Jan 1 21:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8258cf6511c3e28f093633482711dbca1e246914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:fa:a1:d6:0d:72:69:9d:ab:05:6a:59:7d:
bb:cb:b7:95:b3:42:b6:52:72:51:23:a4:d0:5b:75:
1e:bc:88:a8:ab:79:0b:3f:83:5f:d8:35:5f:69:b1:
97:af:64:b9:be:4c:40:b0:0e:bc:0f:85:a9:37:1a:
52:9b:86:a1:03:e0:de:0a:41:f7:10:a0:d0:ac:42:
9e:e6:c4:6d:12:f7:a4:76:cd:bb:97:0b:70:4c:02:
8f:50:9b:1f:da:a4:f6:6a:61:b0:16:d7:e0:a3:ef:
6d:47:9a:09:31:d7:32:1e:42:30:1d:f4:da:c2:c1:
3e:a3:4c:a0:a7:9f:5e:02:da:19:4f:96:e2:47:b4:
85:13:6b:07:33:ca:6b:5d:80:44:4a:b3:48:ad:1e:
20:26:b2:69:35:e5:6f:d7:31:72:d4:11:cd:65:c1:
12:e3:e1:e1:d1:03:d8:df:0f:0e:f3:43:6c:a8:e1:
6d:f2:f5:1f:67:b1:71:15:2a:85:e2:33:fb:2f:6b:
b5:cc:30:c8:83:f1:26:3e:d2:99:1e:9d:66:3c:2f:
51:80:1b:0f:0f:a8:19:23:15:21:59:7b:b6:ef:2d:
78:20:b8:6e:40:e9:3c:ba:27:26:3a:0d:f9:38:12:
4f:e1:94:d6:4b:d9:94:9f:be:60:1a:d0:66:68:e1:
0e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:58:CF:65:11:C3:E2:8F:09:36:33:48:27:11:DB:CA:1E:24:69:14
X509v3 Authority Key Identifier:
keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.28.0/22
Signature Algorithm: sha256WithRSAEncryption
27:f4:6d:6b:fd:6d:ab:92:d8:05:e0:81:84:be:6f:43:51:95:
ac:25:44:e2:4f:6d:8b:82:94:b3:bd:87:71:e4:64:fe:2e:7c:
ba:1c:1a:9e:83:f4:44:82:50:b7:b6:30:b1:37:10:48:3e:e2:
1c:22:43:f8:c7:63:f4:d4:e3:40:ed:dc:f1:a7:b5:90:10:fe:
09:93:37:49:4a:92:9f:f1:ad:b2:b6:92:f6:31:57:42:22:e5:
84:12:3c:95:1d:eb:a8:aa:36:d6:90:1d:0e:dd:73:09:3c:8f:
9a:03:72:c5:8f:86:be:f0:15:67:ae:d8:ce:30:0e:b6:00:e7:
95:cc:f8:c5:c2:c8:f4:93:54:a5:e3:f9:e0:33:db:b4:c7:0b:
05:d7:4e:a3:e1:de:d2:68:e2:17:52:57:fc:51:44:ce:f6:19:
d3:34:db:ff:5e:cc:e8:98:63:e3:78:06:5c:23:16:46:39:40:
73:30:fa:ec:b7:ee:95:2b:76:2a:8a:e4:4b:c1:19:3a:5c:d8:
d0:2a:5a:76:7a:08:ff:62:12:6d:ac:2b:ff:c9:02:a1:5f:a9:
57:5d:bd:c2:44:f3:0c:66:e4:3f:a1:e9:f8:f8:44:06:17:4c:
b8:fc:29:90:cd:ec:f7:17:6e:68:ba:80:b8:35:5c:fb:6e:53:
ed:06:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:28 2025 by rpki-client