Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/GvH_ld4kbG2WgWcG2cx_5y70SCI.roa
File: GvH_ld4kbG2WgWcG2cx_5y70SCI.roa (raw, json)
Hash identifier: aThEESBkBgawQBBj+8NWP1oT0rEWoC0jxTnO1rDLqhk=
Subject key identifier: 1A:F1:FF:95:DE:24:6C:6D:96:81:67:06:D9:CC:7F:E7:2E:F4:48:22
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 019426D9A10255C379B283B0D672E2B5A124
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/GvH_ld4kbG2WgWcG2cx_5y70SCI.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35133
IP address blocks: 2.58.57.0/24 maxlen: 24
2.58.59.0/24 maxlen: 24
2a09:e240:2::/48 maxlen: 48
2a09:e240:22::/48 maxlen: 48
2a09:e240:1337::/48 maxlen: 48
2a09:e244::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a1:02:55:c3:79:b2:83:b0:d6:72:e2:b5:a1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1af1ff95de246c6d96816706d9cc7fe72ef44822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:69:34:26:51:0f:b5:f5:92:0f:b5:60:b7:67:
a8:2c:50:15:44:ec:5d:17:fb:e7:b2:ac:d1:e7:a4:
0e:05:2a:4d:0c:db:18:df:12:a8:62:31:a9:d0:ee:
6e:e0:3a:a8:ad:d3:af:4f:83:e2:0d:25:63:7c:48:
ba:7e:59:03:3f:2a:4b:b1:f0:5d:c8:e2:74:17:28:
59:cf:54:0b:2e:e0:18:4d:0f:52:5c:63:52:bc:45:
6b:23:ec:8d:95:63:84:4e:c1:f9:27:6e:49:0f:23:
9c:54:27:cc:63:04:0f:e0:55:f1:50:6f:76:65:96:
20:67:5c:13:df:f4:67:f7:ab:ff:c6:c0:78:43:54:
d6:e3:48:ff:10:97:58:b4:ce:d3:e4:4f:a4:50:3c:
43:d7:19:58:f6:c5:2c:99:42:88:10:fc:8c:57:38:
e3:5d:44:bf:09:d9:69:44:8c:07:9d:c5:8f:0d:e3:
a4:05:5a:52:71:e2:5a:98:4d:d8:e4:d1:aa:28:55:
91:b5:4d:20:77:1a:14:23:f4:55:5f:5d:64:73:a1:
7e:5a:3a:72:6f:be:8e:a3:60:eb:18:c4:1f:9f:a0:
c2:a5:44:b5:9c:3d:a2:2a:27:79:8b:10:b6:18:40:
cc:86:b5:ea:7f:fc:2a:44:79:a9:1c:09:04:64:64:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F1:FF:95:DE:24:6C:6D:96:81:67:06:D9:CC:7F:E7:2E:F4:48:22
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/GvH_ld4kbG2WgWcG2cx_5y70SCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.57.0/24
2.58.59.0/24
IPv6:
2a09:e240:2::/48
2a09:e240:22::/48
2a09:e240:1337::/48
2a09:e244::/33
Signature Algorithm: sha256WithRSAEncryption
10:2e:e3:d3:c2:2c:01:bd:41:c2:30:af:82:45:11:1f:c5:b4:
7e:25:9b:b2:6e:4a:5c:63:bf:c4:65:82:7d:84:59:58:92:74:
1c:3a:9d:c7:32:7d:13:2c:ef:f4:37:9a:57:2b:54:eb:5b:53:
1b:72:d6:c8:f8:5b:e0:d2:9f:af:1a:e7:0e:72:0e:37:33:7c:
1d:bc:9a:ee:1f:07:a5:78:6b:cd:e5:ee:9a:2b:f2:a9:ae:a4:
ad:5d:1c:74:a9:46:0e:60:f4:c4:38:20:de:0e:54:ab:9a:26:
54:23:be:4a:85:e3:72:aa:3d:5d:8c:d4:8a:7b:b4:93:46:06:
50:12:69:8b:2d:36:bf:b0:ba:22:48:25:25:99:de:21:b5:9f:
69:86:c8:95:1b:8f:6f:08:8c:17:9e:ce:8e:06:66:83:d1:62:
f3:80:eb:9d:dd:e4:82:95:01:e9:7c:e0:4a:9b:43:63:13:55:
cf:2f:07:60:b1:f6:1b:ed:d1:6a:de:94:7b:b2:e7:ee:61:e4:
52:8d:03:94:70:91:f0:35:5f:66:f1:20:53:0e:73:47:3c:78:
62:4d:d9:2c:9a:85:11:e1:3b:7e:00:b4:4b:47:39:f1:7b:b8:
85:3b:7e:bb:0d:6f:85:f6:1f:f8:55:34:77:90:27:1c:09:7b:
12:24:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:17 2025 by rpki-client