Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/GkW1YU0IAt5cXh4qumZXIUtLkRM.roa
File: GkW1YU0IAt5cXh4qumZXIUtLkRM.roa (raw, json)
Hash identifier: tKb0Dvxo9CUUNUQ5i9j6+9OeBO0QcAxlq2Pe8gCyjjo=
Subject key identifier: 1A:45:B5:61:4D:08:02:DE:5C:5E:1E:2A:BA:66:57:21:4B:4B:91:13
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747CE28607D853221CC7CE72D3D9B35
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/GkW1YU0IAt5cXh4qumZXIUtLkRM.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200107
IP address blocks: 46.8.206.0/24 maxlen: 24
109.248.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ce:28:60:7d:85:32:21:cc:7c:e7:2d:3d:9b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a45b5614d0802de5c5e1e2aba6657214b4b9113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:fa:64:ca:26:45:3a:bb:d9:92:4d:ba:7c:
ea:68:4d:6e:da:15:ac:1e:52:0e:76:21:83:49:04:
b5:f0:90:4f:fa:86:1f:85:55:77:09:c1:14:77:ee:
dc:0c:84:19:21:b0:5a:06:da:4d:5a:16:b1:2a:ad:
63:9b:6b:ca:c5:d2:15:b7:df:b4:8b:bc:95:97:d2:
ff:74:14:6a:2e:15:28:64:2b:ad:7f:9d:83:83:95:
41:7f:f7:b3:0e:94:49:2e:08:f5:2b:da:be:5f:73:
24:cb:97:16:8f:ff:ea:5d:02:c0:fc:be:14:d3:42:
1c:8a:97:17:8c:b8:a6:4c:59:93:f2:67:35:4a:ab:
79:4c:75:17:f6:b4:b9:b5:da:74:56:46:80:d9:33:
85:ef:07:e5:88:49:96:74:ce:3d:8e:e4:31:ff:a0:
d4:34:85:40:da:61:d1:48:e5:b5:16:e6:7c:6c:5b:
2d:54:07:fd:58:76:86:99:39:f4:82:f0:eb:ef:4b:
d8:84:c5:ae:09:0d:cf:08:12:f8:20:e0:5b:10:30:
1d:ba:b0:f7:b7:5f:f4:86:af:85:c6:4e:b7:70:87:
a5:9c:c6:90:5a:af:2f:18:4c:be:9a:cb:11:df:71:
12:6b:c8:d1:0b:e7:94:ca:37:ee:e0:8e:69:21:64:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:45:B5:61:4D:08:02:DE:5C:5E:1E:2A:BA:66:57:21:4B:4B:91:13
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/GkW1YU0IAt5cXh4qumZXIUtLkRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.206.0/24
109.248.196.0/24
Signature Algorithm: sha256WithRSAEncryption
84:88:5f:25:9b:8c:28:43:e3:0b:06:6c:ed:6c:bf:71:b4:2a:
a7:8e:09:05:9f:0d:18:02:ce:62:fd:01:32:39:79:1f:5e:77:
47:19:6d:6e:06:09:b8:ec:47:b3:23:aa:a7:0a:3f:77:8d:8c:
9a:0b:2c:9d:1e:06:ec:6d:c8:8b:25:13:b2:13:c1:b1:91:0f:
ed:e2:aa:4e:cd:38:7d:dd:e2:d5:28:ad:dc:12:15:72:8c:6e:
71:7f:45:ba:94:39:76:ec:47:79:28:13:26:86:1c:d8:d5:01:
9f:48:02:e7:b3:bf:de:fb:b9:44:ba:bd:4c:e2:96:01:77:a4:
44:dd:7a:c4:7a:90:99:d7:5e:bb:2c:c1:ea:45:0f:45:8b:01:
4f:7a:36:ac:22:cc:85:8d:19:57:6e:38:c5:2d:14:d6:b6:21:
75:c4:8f:b6:9d:46:19:60:c5:c3:75:4b:43:6e:ac:9f:5a:a3:
39:55:79:7b:e3:89:e5:40:d3:83:b4:d0:80:3b:a2:45:6d:b2:
69:25:07:96:0d:56:a6:1c:20:79:27:84:05:ce:23:b7:00:1b:
43:19:72:6f:40:17:1c:c1:ce:ea:4a:8a:98:5f:73:ae:ee:cf:
b6:0d:94:85:08:14:9b:eb:3f:9b:69:af:f4:cf:70:ac:14:df:
d0:f6:24:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:32 2025 by rpki-client