Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/gBTX6rtk3VmnZ3B2jpAIDYetIds.roa
File: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (raw, json)
Hash identifier: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=
Subject key identifier: 80:14:D7:EA:BB:64:DD:59:A7:67:70:76:8E:90:08:0D:87:AD:21:DB
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 019421B1ED4E273EB35D7220C8852E4C711C
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/gBTX6rtk3VmnZ3B2jpAIDYetIds.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 109.71.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ed:4e:27:3e:b3:5d:72:20:c8:85:2e:4c:71:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8014d7eabb64dd59a76770768e90080d87ad21db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:87:49:b5:1b:b6:04:68:9d:f8:51:5c:72:
89:d9:4d:58:42:a3:e7:78:18:9d:22:a6:6e:f4:ae:
b0:9d:bf:3e:d3:8e:51:58:aa:2d:50:a3:e2:2f:21:
12:83:d9:9e:78:ab:d7:d5:11:d8:6d:e8:9a:f7:ff:
a6:9c:60:5f:5e:c6:ca:d3:7c:66:58:e1:d2:b8:4d:
14:d7:de:07:f9:76:b6:ac:32:c9:96:de:0c:94:f1:
69:a9:3f:99:00:07:9b:d8:d3:c3:d3:80:37:a5:ef:
aa:58:ba:de:30:f5:2c:fd:67:f5:4d:40:a1:68:75:
54:75:33:d0:9a:42:24:d3:78:88:c7:da:1f:61:da:
19:8a:36:26:99:5b:56:95:91:e2:22:d7:91:3b:a1:
1a:8a:4c:d9:4c:8a:41:12:d9:4a:fa:d4:00:a5:ce:
89:58:34:22:e8:43:45:29:d2:8e:3e:96:8d:17:f8:
8d:31:cd:49:ac:0b:01:37:96:66:97:ea:62:d5:cf:
98:90:d9:02:ce:bd:e5:36:17:f2:f0:db:1b:2f:47:
53:f9:b5:30:2d:5c:0d:9b:cb:1e:7b:ce:7c:64:73:
dd:b1:a9:d3:68:aa:c3:9c:0f:84:ee:08:cd:bb:9d:
cb:f6:ce:0f:ae:3c:96:bc:7d:0b:43:62:a2:18:dc:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:14:D7:EA:BB:64:DD:59:A7:67:70:76:8E:90:08:0D:87:AD:21:DB
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/gBTX6rtk3VmnZ3B2jpAIDYetIds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.24.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1a:0f:bf:e1:8c:d7:cb:b3:14:5c:39:b7:c9:04:d5:c0:24:
1d:e8:d2:ef:16:97:d1:79:02:86:66:a4:55:bf:54:8f:6f:f5:
f6:39:fe:9d:a4:7a:ed:61:4c:56:f7:8c:3b:cc:7e:ce:3d:40:
6b:77:2f:e6:6b:0c:64:70:0f:d5:7e:2a:77:5b:e7:1f:e2:6c:
78:bc:66:94:99:5f:f7:0e:82:10:eb:a0:3f:a6:24:f9:2f:07:
0e:8b:0f:d6:db:9d:6a:5d:27:e5:6d:73:cb:82:b5:04:58:52:
e7:30:7d:a6:82:75:0d:c0:90:04:02:91:a1:c0:ee:77:f9:47:
43:23:bc:d4:ec:27:21:df:aa:2f:e2:f1:a5:e4:a4:d7:14:69:
ec:fe:1f:82:1c:38:0c:e6:e8:bd:7e:83:31:19:9d:61:17:60:
52:7c:c0:9f:88:f4:a3:7f:3f:0a:28:b6:a8:d5:eb:67:f7:a6:
27:2f:b2:c2:2c:d7:d0:36:4b:de:8a:8c:fa:cf:22:aa:70:86:
4e:1f:44:b3:4a:bf:8c:15:67:6b:1e:b2:d8:c1:55:fe:49:70:
be:cf:99:7d:e1:86:ef:5a:5b:67:dd:87:4e:33:9b:57:4b:08:
a8:e6:96:57:cf:e7:2c:bc:35:5f:ca:b9:df:e8:55:61:58:17:
61:11:42:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:03:20 2025 by rpki-client