Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/gzmNz0PYWdcLgL6_SHiIcrAToJE.roa
File: gzmNz0PYWdcLgL6_SHiIcrAToJE.roa (raw, json)
Hash identifier: Guzyh0bDeJqFnbpc68wrDXyHWPH3X5psfEh7CAeI44k=
Subject key identifier: 83:39:8D:CF:43:D8:59:D7:0B:80:BE:BF:48:78:88:72:B0:13:A0:91
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 019427B616F2146F1540A28F083AADE4DFCC
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/gzmNz0PYWdcLgL6_SHiIcrAToJE.roa
Signing time: Thu 02 Jan 2025 15:50:32 +0000
ROA not before: Thu 02 Jan 2025 15:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213376
IP address blocks: 2001:678:d08::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:16:f2:14:6f:15:40:a2:8f:08:3a:ad:e4:df:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Jan 2 15:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83398dcf43d859d70b80bebf48788872b013a091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c7:2b:f1:0f:2e:25:3f:a1:09:f7:dd:02:84:
65:b4:6f:da:17:dc:0d:75:1d:4f:a2:f7:13:d5:cc:
ae:d1:c2:bf:8a:e9:79:5a:6b:7c:8e:65:c7:b1:70:
a8:83:b3:03:d3:a5:88:69:a2:b8:c8:66:66:c4:3b:
47:5a:8f:22:b8:76:23:68:cb:2a:6e:6b:2e:26:10:
b2:ff:9c:6d:c9:d1:55:6e:fb:e1:4b:83:8e:13:78:
cc:aa:f7:41:28:40:1a:0b:c4:5e:40:15:10:a6:d5:
6b:5c:45:de:ec:00:48:3b:89:87:2e:55:c0:8d:c9:
03:f9:5d:5b:a4:9a:99:45:3a:26:29:c9:74:32:95:
70:11:7a:34:86:ce:5e:71:4e:7f:76:9b:ce:85:66:
da:66:ea:46:b5:5e:13:b3:06:91:16:02:e1:42:f7:
61:63:d7:fb:54:43:6d:46:d4:5e:86:25:5a:3c:7c:
ee:e3:61:45:5a:2d:c9:a0:bd:e8:2e:cf:55:3e:b9:
52:35:2b:5e:6a:47:b7:f1:60:d2:b3:4c:66:f7:12:
b6:93:0c:21:06:82:20:13:d8:bd:b9:5b:f4:1c:a9:
49:7b:24:45:37:9d:10:b1:3a:af:44:11:2e:ee:af:
41:38:f0:f0:0a:de:3f:22:5c:52:54:36:7b:1f:af:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:39:8D:CF:43:D8:59:D7:0B:80:BE:BF:48:78:88:72:B0:13:A0:91
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/gzmNz0PYWdcLgL6_SHiIcrAToJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d08::/48
Signature Algorithm: sha256WithRSAEncryption
a3:ef:a2:cc:59:d6:48:80:80:9e:fa:ce:2b:82:55:8a:c5:da:
6c:91:ab:ff:be:72:8b:4d:e1:ed:79:4a:d2:89:f0:2b:55:de:
a0:a4:99:c5:9f:1b:52:f5:44:62:23:11:a5:a3:29:a0:c5:1f:
d8:71:7d:db:9e:73:ed:f4:0d:fd:d6:a0:ee:c7:d8:e8:82:70:
3c:ec:1f:a2:f9:10:ca:a6:93:12:18:bf:85:2b:4c:42:cd:92:
20:a4:93:1d:59:1a:a4:cc:91:ea:21:69:f8:c2:bd:af:e5:f2:
63:98:ca:55:ef:59:58:7d:b3:95:b4:2b:b9:47:e2:a9:5f:38:
c3:df:0c:d9:56:a2:79:8f:60:f6:2e:9e:6e:9d:89:7d:a7:e4:
98:a4:89:5e:25:e5:57:e2:d2:9f:1a:3b:b4:76:1e:f6:95:e2:
3b:9b:9c:49:7c:ad:a3:d3:41:cc:54:fc:f3:e5:f6:02:81:03:
3e:3d:d5:e8:2a:19:b0:bf:9d:84:fe:08:13:b3:b3:e8:03:70:
10:bc:63:a0:eb:0c:7a:75:ff:b4:c4:52:9f:cb:51:49:12:c1:
44:a4:5c:69:36:29:e4:be:68:99:e2:5e:dc:a5:f5:bb:06:1d:
47:38:c3:8c:86:91:ab:d4:8e:16:55:4b:af:7b:0a:f8:e6:36:
8b:c0:f8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:43 2025 by rpki-client