Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa
File: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (raw, json)
Hash identifier: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=
Subject key identifier: B7:E1:82:E2:41:9F:EE:5B:D2:9C:E6:00:89:3A:60:9A:59:0A:10:BE
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0194221FD6DD869E322FCD308E7F31DE47EF
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa
Signing time: Wed 01 Jan 2025 13:48:19 +0000
ROA not before: Wed 01 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 213.137.89.0/24 maxlen: 24
213.137.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d6:dd:86:9e:32:2f:cd:30:8e:7f:31:de:47:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7e182e2419fee5bd29ce600893a609a590a10be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:3d:8d:93:0a:a8:26:27:da:bd:3d:8d:8a:
e2:84:80:d9:22:64:e0:bc:b2:18:58:4f:a5:bc:9e:
be:76:a6:8d:b8:07:b7:23:6b:4e:e3:e6:06:a5:ed:
d8:ab:ac:11:68:8a:38:0f:b7:46:fe:11:c6:c9:e8:
fa:41:72:fe:b3:a3:d5:1f:17:e0:89:85:84:a3:34:
90:aa:ed:ee:10:d8:2f:da:3b:ad:b6:db:f7:96:68:
a7:11:cf:43:b4:01:f3:b3:20:28:f9:65:6f:2d:b2:
5c:03:27:e2:42:31:70:f8:1f:91:0a:f8:3c:56:17:
4d:e7:ca:4a:b7:f9:6d:0b:3a:22:c7:f4:4c:98:3c:
f1:80:96:a7:ca:67:70:ef:b8:89:07:f1:19:14:9c:
12:1f:b1:ab:2c:b4:cf:88:5c:43:d9:eb:22:85:59:
0e:07:3a:ca:34:f4:d3:50:57:77:e8:b9:83:85:a6:
00:87:43:22:8a:08:d7:15:bc:57:3c:ab:c1:af:61:
6e:3f:84:5d:7f:5b:78:9d:9d:62:c9:e9:ce:9e:b8:
28:3a:96:e7:70:b3:b2:8c:9e:55:a7:47:e4:99:96:
0a:d7:16:ba:4e:01:70:01:04:45:1e:0b:22:58:82:
e7:af:a1:20:ac:27:46:f2:c9:7c:7c:d0:bb:db:04:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E1:82:E2:41:9F:EE:5B:D2:9C:E6:00:89:3A:60:9A:59:0A:10:BE
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.89.0/24
213.137.91.0/24
Signature Algorithm: sha256WithRSAEncryption
37:09:d8:46:cf:09:2d:b0:13:e1:86:89:e2:ce:58:ad:51:52:
1d:98:b1:c1:82:53:d2:95:66:fd:07:df:5f:83:a2:12:2a:9b:
01:37:e6:fc:8d:62:b3:81:b0:9d:d1:e8:99:90:c6:97:df:e4:
7e:db:ed:87:fc:0f:f0:48:f5:79:d5:c0:7b:59:d0:41:10:a6:
08:b0:fd:46:5f:96:e1:f5:06:4b:1b:65:2b:aa:43:01:b9:f7:
32:2e:7c:4a:cb:4f:bd:fe:82:b3:8e:ef:2f:6e:aa:77:42:a5:
02:53:9c:b1:45:4b:8c:d3:75:72:99:a5:ac:7d:24:f6:f6:f1:
fd:d9:49:26:d0:b7:5b:ba:7c:5f:11:f6:f1:f8:9e:75:95:c3:
56:7d:76:64:6b:7c:cd:31:18:6a:4d:7a:90:c9:a6:12:29:7b:
b4:58:6d:2e:77:19:81:04:01:3e:d2:30:df:ab:1d:5c:d8:db:
c3:d7:84:82:2e:08:3c:14:c3:95:79:d7:fb:86:62:42:23:a9:
76:b3:b2:92:67:ab:02:82:86:a8:a9:46:ab:1c:15:5e:bb:5b:
75:0d:61:2f:06:d9:72:6c:c6:00:d0:76:83:74:b6:9a:77:a6:
d2:40:ff:8c:b6:42:31:02:31:9e:a5:7c:5b:07:2d:79:05:14:
f8:b3:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:23 2025 by rpki-client