Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa
File: GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa (raw, json)
Hash identifier: Twu1XyErZ1bzBOtE8/HK3XbggJvMpOYaRXT376BODWE=
Subject key identifier: 1A:B5:5F:81:86:1A:D2:CE:60:2E:C4:50:A7:93:F9:BC:04:1E:1E:51
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 019422FB1193DE4BFE4506E248A6C2A910E2
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa
Signing time: Wed 01 Jan 2025 17:47:46 +0000
ROA not before: Wed 01 Jan 2025 17:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29505
IP address blocks: 85.233.0.0/19 maxlen: 19
85.233.8.0/24 maxlen: 24
149.249.64.0/18 maxlen: 18
149.249.127.0/24 maxlen: 24
2a07:6c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:11:93:de:4b:fe:45:06:e2:48:a6:c2:a9:10:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Jan 1 17:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ab55f81861ad2ce602ec450a793f9bc041e1e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:9e:0e:71:06:57:da:45:5b:74:bd:f8:9b:
fe:77:8e:e9:85:41:86:f6:12:9b:f8:fc:8a:28:41:
ae:1e:d8:c4:50:9c:50:bc:49:d3:e7:bc:7f:bd:db:
8e:29:7b:a5:2f:82:f1:fe:61:45:dc:21:ce:31:bd:
c2:b4:6e:70:77:e0:26:25:0e:b2:e8:81:cb:05:fe:
6a:fe:7c:23:11:1d:e3:7d:01:da:96:2a:c4:ea:6d:
ef:86:03:1a:c0:e0:5e:4d:e3:86:bf:0a:b0:67:19:
a8:38:f1:df:dd:8e:0c:b1:8d:41:ff:d1:b0:ba:6e:
8a:0a:e8:3f:34:02:85:dd:b7:08:05:ef:bb:84:74:
ef:de:36:84:67:b3:a7:24:80:a5:fc:02:a5:7e:ff:
5f:ff:b5:9a:11:1b:80:49:eb:f8:10:5d:02:4f:08:
94:4e:e1:ec:4b:f8:3f:21:e3:ca:27:68:af:7c:26:
26:17:88:53:38:08:04:ce:74:4e:14:a5:bc:9c:3d:
75:ca:f4:01:48:b5:0f:2a:7a:71:25:98:92:4f:97:
0b:ec:85:66:67:56:73:2d:1e:4f:c6:4f:7f:4e:f4:
3d:ad:db:bf:1b:1d:e4:ad:6d:13:32:a9:d8:10:53:
b7:2c:11:21:0c:57:39:47:0c:a3:48:c3:ea:c9:64:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B5:5F:81:86:1A:D2:CE:60:2E:C4:50:A7:93:F9:BC:04:1E:1E:51
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.233.0.0/19
149.249.64.0/18
IPv6:
2a07:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
7f:1a:cf:db:18:f8:49:0e:84:b7:c0:70:88:c4:c8:b4:ee:3e:
71:19:d3:b0:cb:8e:9e:52:52:c2:a7:c3:00:59:bf:80:fa:f8:
cd:74:ab:36:6f:23:47:aa:98:0f:22:7c:d6:c5:3d:2a:a5:00:
0c:53:9b:ba:87:80:4d:fd:7b:25:b8:49:bd:66:e5:c8:87:6b:
a9:6a:ee:a7:a4:b5:84:44:72:90:d8:3d:fb:73:58:21:e2:60:
7c:be:c0:9d:fe:ac:da:3b:8b:eb:b8:13:17:50:95:c3:ab:cd:
a2:05:21:2a:c8:f4:91:86:57:16:fc:95:b1:af:4f:18:e2:45:
34:f5:10:dd:ca:1c:55:45:83:8b:e3:cb:82:c5:ec:70:18:33:
44:f2:4d:9d:ee:b3:a0:df:df:b7:e9:a6:56:ca:9a:4b:eb:7b:
ad:ff:8c:8f:76:fa:0e:fe:ca:65:26:e8:2d:a1:26:03:53:7c:
25:f3:c2:4c:ff:2b:69:0d:23:c4:db:bd:31:08:94:30:a8:42:
77:f8:c9:9c:79:c6:17:ff:1e:e1:5b:7f:e1:41:17:c0:6d:5f:
04:98:f7:39:4d:ba:47:5f:65:1d:4d:a4:fb:65:48:22:c9:3e:
5b:73:2c:a6:5a:f9:3a:c9:91:ca:06:54:ca:bb:99:f6:33:84:
9d:1c:99:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:08 2025 by rpki-client