Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/GU1YI3vRymC8okEmp-zZRparjfs.roa
File: GU1YI3vRymC8okEmp-zZRparjfs.roa (raw, json)
Hash identifier: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=
Subject key identifier: 19:4D:58:23:7B:D1:CA:60:BC:A2:41:26:A7:EC:D9:46:96:AB:8D:FB
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 0194973A9587EC6A708EA56DE988CF12E010
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/GU1YI3vRymC8okEmp-zZRparjfs.roa
Signing time: Fri 24 Jan 2025 07:33:06 +0000
ROA not before: Fri 24 Jan 2025 07:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211071
IP address blocks: 143.223.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:97:3a:95:87:ec:6a:70:8e:a5:6d:e9:88:cf:12:e0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Jan 24 07:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=194d58237bd1ca60bca24126a7ecd94696ab8dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:dd:be:73:ca:bb:27:ad:d3:41:ba:4a:76:
d7:e5:6b:26:71:24:73:b7:12:89:86:b3:0f:f9:77:
53:5a:55:0e:35:4e:e8:f6:28:e9:7e:e1:ce:71:ee:
3b:1a:63:24:37:4d:7d:5b:6b:2d:8e:54:bd:3c:0a:
21:ba:78:a3:b0:a4:bc:4d:75:e5:9c:5b:f9:cd:17:
1a:6d:69:81:ea:da:83:bd:df:d4:7b:ce:1c:3d:d4:
bb:70:83:c9:6b:7c:51:98:6a:56:bf:9c:d6:04:11:
97:ae:ad:d1:e5:6d:35:6b:a1:16:ba:07:9f:5a:ab:
5a:ef:c9:a4:dc:73:11:4f:75:16:d3:56:5c:e1:b2:
c0:63:74:0e:d9:2c:28:b0:e7:bb:58:9f:9d:ff:f6:
bc:15:1a:1a:da:83:4e:49:47:0d:07:99:41:34:07:
c5:47:a9:9c:62:1f:77:27:22:93:b0:36:e9:28:2d:
a8:ec:a5:60:d6:ba:3f:6d:05:ab:85:65:1a:3b:fc:
9b:66:49:98:3e:7f:12:5b:0a:ae:d6:5b:97:29:83:
8d:18:51:9a:3c:18:68:b9:d6:31:6c:2f:d0:25:4b:
a6:0f:78:7b:de:09:90:87:cd:dc:74:f0:34:41:96:
61:46:1e:5d:e2:33:67:9c:73:ab:f2:21:0f:25:ba:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4D:58:23:7B:D1:CA:60:BC:A2:41:26:A7:EC:D9:46:96:AB:8D:FB
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/GU1YI3vRymC8okEmp-zZRparjfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.223.100.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:4f:c3:5a:98:e7:af:ee:e4:ff:58:33:89:90:59:94:eb:37:
e0:d8:c3:45:af:2f:fc:2c:2d:e4:7e:f2:2b:40:21:d9:a6:a1:
38:52:fb:bd:ce:93:fb:c0:33:13:b8:3c:ff:f7:a3:4d:75:be:
23:8c:07:2a:a0:29:61:f5:5b:b1:32:2e:3b:5c:24:3d:6f:bb:
88:6b:b7:b5:bb:b7:9a:72:63:66:f2:da:4a:b6:02:be:2a:49:
62:02:fa:01:88:89:40:ee:18:69:b3:38:84:80:b5:65:c4:ad:
4d:cf:4b:e3:3a:74:99:41:44:ad:46:d7:da:38:e2:f0:65:31:
5a:c8:42:aa:30:5a:75:e3:df:bd:ab:bc:f7:9e:be:dc:67:09:
d2:30:e6:a7:f3:11:ce:0c:8b:21:e7:b4:fd:8c:e0:26:06:f4:
95:8e:24:aa:57:cd:38:b4:c8:f3:56:4b:35:f9:f2:e3:f7:1b:
2a:57:92:0b:44:ff:d4:3c:58:be:aa:40:08:99:d8:ba:98:31:
d1:90:ed:c2:d0:18:38:8f:e3:69:36:2d:6b:20:67:7e:e2:47:
7b:42:d1:3d:7e:a8:1a:8f:13:71:2b:7d:99:fd:8e:70:5b:c4:
ef:1d:05:5b:e2:93:c9:1a:33:0e:cf:05:bf:73:80:1c:2f:61:
bf:5f:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:03:30 2025 by rpki-client