Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/gIx-NvwmPwDjbwzrImEaevKFMi8.roa
File: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (raw, json)
Hash identifier: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=
Subject key identifier: 80:8C:7E:36:FC:26:3F:00:E3:6F:0C:EB:22:61:1A:7A:F2:85:32:2F
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 019539A09F76A6D1D7A672151D3B3154B7AB
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/gIx-NvwmPwDjbwzrImEaevKFMi8.roa
Signing time: Mon 24 Feb 2025 20:23:02 +0000
ROA not before: Mon 24 Feb 2025 20:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46261
IP address blocks: 45.143.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:39:a0:9f:76:a6:d1:d7:a6:72:15:1d:3b:31:54:b7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Feb 24 20:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=808c7e36fc263f00e36f0ceb22611a7af285322f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:9b:1a:74:9e:94:28:99:12:48:49:00:70:
c0:6f:eb:e6:00:20:ec:eb:fc:2b:47:bb:f7:fc:7c:
57:d3:dc:f0:ef:8b:26:a8:06:ea:7c:e7:47:6b:c2:
68:00:2e:12:8c:a2:48:4c:ac:b2:d2:2b:1b:b5:ce:
f5:4b:1d:50:f4:d3:37:b4:2e:f7:ca:11:00:69:e5:
99:16:94:13:e7:92:56:79:26:d5:af:e0:ab:09:48:
9f:c8:00:bf:0c:d4:77:88:83:f7:32:1b:08:33:80:
d8:44:a5:14:a8:fa:b7:0f:f1:10:c0:36:b8:b2:b5:
88:32:0f:99:6e:43:70:d7:ba:75:8b:93:af:87:7a:
ba:ff:76:76:d4:78:16:55:c0:6d:3f:a8:d5:86:e5:
f9:e0:79:bf:07:b5:db:7f:6c:1a:3c:55:7a:f0:94:
c6:a2:e2:ea:77:f3:ca:b1:be:f0:c1:61:b7:56:ea:
c8:9d:02:ee:74:a7:29:3c:0c:a8:3f:18:b7:18:93:
ad:19:24:c5:15:71:f0:0c:74:eb:1d:1a:01:bd:33:
b6:72:bc:67:a6:c8:93:37:cd:83:22:b6:b3:24:65:
06:94:6a:f8:62:16:bb:56:a3:06:5d:04:db:2a:a7:
13:4a:9a:30:f5:93:48:1c:0c:20:3b:d9:00:29:d2:
33:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8C:7E:36:FC:26:3F:00:E3:6F:0C:EB:22:61:1A:7A:F2:85:32:2F
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/gIx-NvwmPwDjbwzrImEaevKFMi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.11.0/24
Signature Algorithm: sha256WithRSAEncryption
84:0a:61:c2:47:3c:75:72:6b:9d:30:58:bc:11:0c:e5:d0:16:
cf:f5:e2:b3:e1:33:ce:13:58:fa:db:2e:3c:d8:31:77:3a:06:
fd:2b:bb:b9:8d:4a:15:bf:56:a9:d9:a2:ce:3e:0d:90:71:de:
52:42:57:f7:44:dd:ae:20:0d:e4:cb:55:73:08:9e:90:c6:81:
31:cf:5a:e6:70:f9:21:58:07:f2:92:29:37:9a:36:51:60:4c:
58:54:a0:2c:90:34:bd:f2:15:d0:ce:b4:2c:77:e8:7e:bd:f1:
a7:58:13:eb:44:8a:df:59:dc:39:03:2a:b4:20:dc:9d:1b:eb:
2d:54:43:19:aa:40:31:53:6b:d9:f2:8b:1f:0d:08:56:b1:b7:
49:1a:7f:f8:4e:2d:68:a1:d3:6e:b9:03:44:b2:1c:e9:50:9b:
46:5a:96:c8:9b:53:dc:0f:43:c8:f1:2c:29:2e:99:ee:8a:3a:
85:da:86:5a:ed:ce:a6:8a:d3:2e:4b:19:3d:43:d6:f1:1e:ca:
67:bf:5d:68:1d:36:a1:00:93:49:dc:55:b2:46:03:71:d8:41:
b7:50:76:b2:62:fb:04:46:c6:77:93:44:c5:84:47:7e:aa:2d:
61:54:80:fc:16:e5:20:49:21:3c:e4:5d:ad:18:3c:b2:25:4d:
92:c8:02:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:51:08 2025 by rpki-client