Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/g5fk8wweb2K2LN5x1BH4qQmKXhY.roa
File: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (raw, json)
Hash identifier: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=
Subject key identifier: 83:97:E4:F3:0C:1E:6F:62:B6:2C:DE:71:D4:11:F8:A9:09:8A:5E:16
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 0194282143B1A33CAFE9F73AA861C36A38FA
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/g5fk8wweb2K2LN5x1BH4qQmKXhY.roa
Signing time: Thu 02 Jan 2025 17:47:36 +0000
ROA not before: Thu 02 Jan 2025 17:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204146
IP address blocks: 194.31.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:21:43:b1:a3:3c:af:e9:f7:3a:a8:61:c3:6a:38:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Jan 2 17:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8397e4f30c1e6f62b62cde71d411f8a9098a5e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:4d:49:87:80:6a:72:b5:99:b8:06:dc:fd:
0c:7b:06:69:7a:f1:af:7a:02:34:e1:cc:f1:f8:55:
18:bb:fb:52:d7:b3:0f:3c:93:c8:04:6e:5f:f7:bb:
a2:7e:33:aa:b5:ad:a5:7d:97:4b:c9:64:b3:15:b8:
47:18:8a:b4:6f:1e:f2:7c:da:43:3d:9a:46:ba:08:
85:24:b3:fa:31:1e:cf:e3:26:9f:8d:02:56:45:ba:
53:a2:ca:c7:14:ff:13:d5:64:88:06:14:c4:b6:ac:
67:cd:08:85:82:3e:57:50:e1:66:f1:f9:71:a7:a5:
c3:5b:03:f1:26:3c:61:53:fb:70:c8:04:04:56:da:
5a:5c:3f:14:33:9c:0f:39:3a:cd:8d:f9:8e:34:cd:
af:ff:f8:69:e8:fa:85:c9:ef:05:9b:1a:aa:ab:1e:
0b:64:66:cf:35:e0:89:fe:4b:9c:dc:17:e0:c0:60:
8c:3f:06:eb:50:15:96:e6:d4:4f:40:99:65:09:56:
e6:01:e4:0b:5f:01:61:02:5d:e2:34:18:af:45:69:
b5:6e:87:90:8c:02:09:bc:27:0e:48:4d:15:5a:94:
1c:dc:d2:49:d5:19:bd:2a:b4:e8:e3:24:33:08:fb:
71:65:ca:81:b4:d8:da:ec:6c:04:00:1a:9d:68:ee:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:97:E4:F3:0C:1E:6F:62:B6:2C:DE:71:D4:11:F8:A9:09:8A:5E:16
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/g5fk8wweb2K2LN5x1BH4qQmKXhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.112.0/21
Signature Algorithm: sha256WithRSAEncryption
41:2e:20:c9:04:bf:42:64:f4:e8:57:dc:0d:6d:a6:7c:53:9a:
89:60:63:66:87:f8:b4:6d:3c:22:84:6c:d6:54:d9:e8:63:03:
02:b1:d5:6e:f4:b7:d8:2f:f0:7f:e3:38:9e:db:57:f3:27:6a:
41:f7:90:1a:79:f0:aa:f2:81:2f:83:88:4e:17:d2:76:81:3e:
5a:49:ca:a8:63:09:f1:e4:5b:17:21:b2:8d:a1:32:81:a6:65:
e5:2c:57:54:c9:03:b4:3b:8a:01:2e:7d:d2:9d:ec:a2:2c:06:
98:40:dc:ab:a7:ee:f4:98:75:73:e2:66:15:0b:d9:05:73:b2:
ae:c8:b0:31:6a:3f:cb:1a:a5:0b:5f:dc:95:c8:76:71:9d:59:
59:23:8b:35:a0:22:ca:20:aa:3c:c5:0f:4e:db:5c:1c:97:e7:
48:a6:fe:6e:96:de:c9:41:70:9e:c2:a3:e1:4a:b3:20:d2:ad:
c7:73:76:d4:3e:54:8d:23:58:93:01:9c:fa:8d:bd:89:8d:ac:
8e:c1:ab:ad:d2:9c:5b:e4:91:31:bc:be:5e:16:7d:c2:25:f2:
6e:36:de:31:3e:42:dc:7c:04:40:9b:aa:9f:eb:68:c8:76:4e:
12:54:e0:d8:4a:51:45:42:c9:80:e3:f2:73:9b:41:8e:8f:3c:
db:41:fb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:37 2025 by rpki-client