Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/GSKX6t5lJ0i4qvCaHVaNJW2pF_U.roa
File: GSKX6t5lJ0i4qvCaHVaNJW2pF_U.roa (raw, json)
Hash identifier: p6a7klkfw04BCewW69YXx9rhT4r3ImOgOYr/lCdS37U=
Subject key identifier: 19:22:97:EA:DE:65:27:48:B8:AA:F0:9A:1D:56:8D:25:6D:A9:17:F5
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DBF353F0556EC11F73C1C471F82F8
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/GSKX6t5lJ0i4qvCaHVaNJW2pF_U.roa
Signing time: Wed 01 Jan 2025 15:48:22 +0000
ROA not before: Wed 01 Jan 2025 15:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215472
IP address blocks: 2a01:e281:a774::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:bf:35:3f:05:56:ec:11:f7:3c:1c:47:1f:82:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=192297eade652748b8aaf09a1d568d256da917f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:47:93:a4:df:e7:8c:3f:76:08:1c:cc:9f:
e4:d8:b6:ae:9b:28:a0:d3:21:3e:b5:be:ac:ec:d7:
3e:5e:c3:b4:5d:2e:1b:2a:ac:e8:45:61:b8:bb:88:
eb:ac:eb:9a:15:cf:22:7b:e2:75:de:56:71:31:ab:
20:3e:5a:b5:b1:57:ab:ba:b0:77:ed:c7:ce:96:a1:
21:ca:1b:24:7e:d5:ec:fe:f3:9b:c3:66:91:f3:58:
51:87:20:4a:09:fb:51:a1:e0:40:66:c8:50:27:91:
4b:20:de:58:46:62:62:0c:8c:fc:85:5f:67:29:66:
f7:26:e2:14:76:c4:5b:e4:0a:62:54:6e:84:f6:75:
03:b3:95:91:04:60:5c:c6:74:bd:11:3e:55:4d:b8:
57:21:c5:ca:2d:6a:57:8b:ae:83:e6:cb:ae:56:90:
76:34:b7:39:69:95:69:4d:54:3e:b9:3d:43:2f:01:
90:63:24:19:55:9d:f9:b6:86:be:5f:d7:d8:2b:f7:
9d:4a:c5:3f:39:c2:56:58:25:00:6d:0a:50:62:3e:
16:c3:92:10:5c:5c:51:90:84:b6:38:b4:fe:53:c5:
b1:d3:24:ca:cf:74:d2:af:f5:d1:7a:91:f1:e1:c0:
ba:5c:e8:7c:d4:e9:46:6f:63:d3:f4:01:78:65:9e:
d4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:22:97:EA:DE:65:27:48:B8:AA:F0:9A:1D:56:8D:25:6D:A9:17:F5
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/GSKX6t5lJ0i4qvCaHVaNJW2pF_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:a774::/48
Signature Algorithm: sha256WithRSAEncryption
22:e6:31:17:56:94:02:6f:52:74:32:a9:44:3e:86:c7:50:4f:
ff:21:8a:2b:82:4a:fd:28:b6:e5:80:46:ff:2d:a1:ff:85:d1:
6c:45:d9:d2:1e:40:37:48:2a:bb:b8:e0:0a:a8:bb:6d:ad:31:
2e:a9:e5:fb:21:c7:4d:7f:31:72:7d:d0:95:c5:3f:87:57:9d:
62:b8:22:0d:2c:4e:1d:c0:ba:b8:c1:c6:d8:f2:ff:0e:75:b4:
58:8d:73:77:16:0c:ff:e5:5b:db:f8:4d:ab:9b:5a:9f:3e:47:
db:84:d3:3f:fd:ab:11:45:c3:dc:32:ba:71:22:97:71:7d:53:
45:a9:5d:11:7c:13:3b:ba:9a:e4:15:96:fc:50:ea:d9:87:fa:
5d:63:59:be:4e:99:de:69:76:5b:38:49:aa:da:f5:e8:e2:fd:
24:6d:38:87:10:37:a2:0e:0a:6e:d9:ed:ad:e2:ad:62:10:17:
78:b9:9f:f1:ed:44:e8:46:94:4c:00:cd:42:b7:89:a6:f6:7c:
95:0b:8c:c3:0a:60:73:f5:23:15:11:65:77:16:34:0d:71:81:
7d:1f:f7:27:4e:4c:f4:9c:de:80:e2:17:b5:70:d3:aa:cc:26:
a3:87:2f:8f:db:0d:7f:7e:84:a0:96:8c:e7:bf:b5:f0:d2:40:
7e:45:03:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:07 2025 by rpki-client