Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa
File: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (raw, json)
Hash identifier: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=
Subject key identifier: 18:68:AE:D4:BE:65:86:F6:7C:33:36:C7:73:A8:53:73:EA:F7:EE:EE
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 01941FFA1F387E195AD140FBB3A58CA038DF
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50597
IP address blocks: 185.144.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1f:38:7e:19:5a:d1:40:fb:b3:a5:8c:a0:38:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1868aed4be6586f67c3336c773a85373eaf7eeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:34:7e:94:16:2f:dc:a3:65:48:28:8d:7e:
02:a4:a9:a2:d5:f8:77:12:8c:f2:6e:a9:a5:c3:cb:
e4:33:51:8c:de:60:cc:9d:1a:49:c0:78:5d:ef:57:
e7:05:46:3e:52:2a:58:7e:84:02:64:32:db:55:84:
f9:5b:0f:53:61:22:2f:7f:1d:81:9a:6b:70:71:7b:
4a:bd:d7:69:57:06:cf:8b:2f:b3:08:1d:0a:94:c6:
14:84:0a:6a:1c:31:fb:07:a4:1c:53:6a:03:aa:d1:
e7:e4:9b:49:c3:dc:4a:7d:c7:fa:99:5d:2c:d6:ed:
ec:15:73:d8:f2:23:64:b0:48:12:43:12:25:73:7e:
d6:6e:0e:0b:6f:3f:46:96:05:54:b0:18:c3:c9:f3:
98:f4:47:63:86:4d:81:25:c2:44:4c:66:47:b8:ba:
28:30:cc:8c:4b:a1:aa:b2:0d:2e:80:16:7e:be:a9:
b7:88:50:ab:78:f1:5f:00:7a:ab:88:f2:e2:a9:73:
e6:28:41:59:82:ef:4e:7b:57:ea:5f:84:92:1e:fe:
29:d8:17:d2:e4:96:8e:cd:b1:79:2f:b5:11:80:fb:
52:5e:2b:89:b0:5a:1c:17:2e:18:ab:54:41:62:a0:
14:7d:62:f9:3b:ba:14:89:46:67:14:98:cd:93:87:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:68:AE:D4:BE:65:86:F6:7C:33:36:C7:73:A8:53:73:EA:F7:EE:EE
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d6:7f:da:d6:85:a5:60:b0:ab:5a:cf:1d:c8:06:ce:89:9e:
5d:21:8f:6b:83:ff:9b:c7:47:b5:a1:b9:0d:87:e0:2e:a7:0f:
02:62:65:69:ee:1b:14:ed:5a:d3:e1:92:1d:b0:32:a9:26:55:
5c:cb:ba:f0:6d:04:6e:50:29:02:7e:e3:97:7e:65:82:01:5f:
4f:6c:2b:3c:47:1c:56:d7:25:db:8e:df:f5:fd:67:fa:9c:bc:
e6:5a:ba:65:c1:fb:1e:9a:6d:5d:6e:80:25:eb:bd:cc:52:39:
2e:c4:34:d7:1c:23:74:09:d4:d6:ec:35:f4:ea:f3:60:52:d0:
0f:cd:7e:c5:bf:04:f7:70:90:64:a1:51:67:10:57:17:fd:cb:
ee:b4:0c:71:2a:81:85:2a:23:ae:ad:14:a4:c7:24:09:f6:e8:
17:e7:da:02:70:92:ab:35:74:f6:6b:2e:03:cc:9a:a3:5e:79:
c5:f4:3a:67:41:ec:2e:fd:25:f3:2c:5e:81:93:10:3a:43:63:
61:ec:5f:cb:8d:35:f8:29:45:d2:9f:28:67:b2:c4:f4:96:0b:
83:47:3c:0c:53:75:c5:7e:a5:30:c2:0d:03:c7:4c:da:dc:ad:
e4:6c:28:6a:34:37:28:f9:23:d3:62:04:69:25:8d:40:db:da:
a9:f3:be:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:16:18 2025 by rpki-client