Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/pGZsGJVmFoYhAv5VAkXf67JcN-w.roa
File: pGZsGJVmFoYhAv5VAkXf67JcN-w.roa (raw, json)
Hash identifier: /j9DfbiG7O3qG1GtbIDXzJ4rJWqS+jSuNHHJIbaeKpc=
Subject key identifier: A4:66:6C:18:95:66:16:86:21:02:FE:55:02:45:DF:EB:B2:5C:37:EC
Certificate issuer: /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial: 0194258F82CC86723C1D6CD144C81FE75DA4
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/pGZsGJVmFoYhAv5VAkXf67JcN-w.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56855
IP address blocks: 91.226.179.0/24 maxlen: 24
185.51.100.0/24 maxlen: 24
185.51.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:82:cc:86:72:3c:1d:6c:d1:44:c8:1f:e7:5d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4666c18956616862102fe550245dfebb25c37ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:01:9b:fd:bb:64:91:0a:29:77:10:d6:ec:
59:25:95:78:a8:0b:da:87:dc:cd:8a:85:44:a3:cb:
c9:1c:86:dc:4b:b8:b6:84:84:62:3d:f9:26:48:2f:
38:e7:93:15:13:e4:9e:c2:b4:76:d4:05:ba:19:43:
e1:78:7c:3c:15:92:e8:89:b5:3a:0a:af:38:79:a8:
7f:42:03:7a:e4:e8:07:d2:fb:39:84:f1:2c:5d:ba:
40:db:95:91:7e:4b:96:32:f0:0e:05:1a:18:00:36:
d1:65:98:7c:e5:ab:32:87:cf:34:62:da:fe:22:ca:
b0:cc:a3:ee:dc:f3:ff:0b:20:88:af:6c:83:32:68:
d8:7b:95:6e:74:da:be:40:0d:5b:83:f7:6e:b9:1a:
59:d1:92:67:c8:60:a4:b6:16:8a:65:28:e0:9e:de:
47:c1:d9:7b:fc:ac:8a:99:73:d5:ce:89:8b:77:3d:
91:fb:43:ba:07:75:6e:fb:6e:4a:5f:13:1b:0f:50:
72:04:d5:5f:40:4f:48:58:74:fe:41:69:03:eb:3d:
e7:6e:e5:a9:86:ab:95:38:51:69:20:a7:dd:4a:ff:
49:40:e0:ad:f4:03:b8:20:d3:ea:48:6f:71:10:93:
cd:b5:0b:77:21:1c:1e:10:7e:13:a3:c6:54:64:8f:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:66:6C:18:95:66:16:86:21:02:FE:55:02:45:DF:EB:B2:5C:37:EC
X509v3 Authority Key Identifier:
keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/pGZsGJVmFoYhAv5VAkXf67JcN-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.179.0/24
185.51.100.0/23
Signature Algorithm: sha256WithRSAEncryption
24:f4:05:e2:16:12:a5:e5:e7:7f:fd:ca:b3:71:6a:1d:7e:5a:
d6:9a:8d:68:b0:da:de:7e:13:53:31:96:f6:99:99:dd:f6:0b:
09:98:7d:b6:ad:6b:b5:76:58:ca:a5:8c:85:c0:e2:63:f5:51:
c6:7b:85:24:6c:4f:f0:95:a9:2e:64:e9:d8:4f:24:4e:fc:e0:
70:ee:02:11:fb:71:7a:46:f2:31:03:f0:53:fe:c8:6b:41:94:
f5:b5:53:ec:0b:6c:c0:96:10:e6:02:03:fb:72:77:37:4d:05:
3e:07:80:45:6e:e4:54:b8:9c:f7:1e:23:c3:c4:64:61:2c:ff:
ba:a5:06:f7:58:a7:68:d6:0a:85:30:c7:ea:2b:7c:4e:04:0a:
97:e4:5b:63:ba:65:f4:1d:10:ff:e2:e8:08:2e:de:d2:90:04:
e4:43:69:d9:cd:af:39:cb:71:e0:ea:5b:b4:05:1a:11:72:22:
b9:d8:69:85:96:68:e6:59:cf:9b:db:fa:84:33:de:4e:ac:77:
4d:8d:ca:6c:12:6a:d6:55:e0:31:2a:82:f0:61:e8:7f:12:dd:
63:6b:a3:3f:5b:04:19:c0:97:ee:2c:0d:29:c0:db:9f:8a:8c:
3e:35:b8:c7:ad:6b:79:60:e2:93:da:93:0c:6d:8d:16:04:3d:
b8:cb:97:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:15 2025 by rpki-client