Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/gHJucLDeNn72Z4YnTbDzcr70suE.roa
File: gHJucLDeNn72Z4YnTbDzcr70suE.roa (raw, json)
Hash identifier: X6NHV3AqWLuDzNFlvaXO3pKnS4ZKS+A8HYjFylVbHNQ=
Subject key identifier: 80:72:6E:70:B0:DE:36:7E:F6:67:86:27:4D:B0:F3:72:BE:F4:B2:E1
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA739BCBD2E68CFEAAC20BDD816E66
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/gHJucLDeNn72Z4YnTbDzcr70suE.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25070
IP address blocks: 213.199.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:73:9b:cb:d2:e6:8c:fe:aa:c2:0b:dd:81:6e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80726e70b0de367ef66786274db0f372bef4b2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:2c:91:c1:bb:8d:6e:8e:15:8b:1c:3a:f2:
ce:26:80:75:91:27:a1:72:c2:1f:20:99:9d:78:46:
d4:89:29:30:19:68:0b:86:a7:bb:6b:c9:58:63:61:
76:6e:1b:75:b5:82:2d:2c:2e:2c:cc:8c:a1:f4:b3:
3e:d3:4c:3a:d8:ba:d0:54:09:45:24:c9:0f:2b:3a:
76:00:34:0d:2f:bb:cc:81:36:4c:b4:d2:13:e7:a4:
6e:32:6e:b7:f8:0e:0c:89:37:ce:4c:e4:5c:48:1f:
f4:ed:4e:94:0d:63:ba:5b:65:0d:54:58:26:10:19:
ef:f7:c8:23:e4:cd:15:b4:d5:db:93:26:74:c7:fc:
21:30:d5:8c:3b:04:82:fa:55:a8:ba:9e:e9:66:09:
61:86:e4:aa:7f:6b:9d:8e:41:2c:7e:74:da:91:38:
13:d3:d4:2d:67:d6:c2:8f:6c:49:cf:dd:06:c6:28:
3f:80:57:68:95:83:f0:28:a1:8a:a0:13:d2:b4:e9:
1d:fe:65:f5:09:3e:7f:a9:90:44:5a:83:03:f5:f9:
d8:7e:c6:01:54:30:97:5a:74:82:45:4a:58:f2:0e:
fb:ba:ac:7a:c3:b1:ea:d9:9f:b8:43:10:ba:ea:5f:
66:f8:71:a6:e7:e9:9a:30:4b:62:0e:d4:29:52:16:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:72:6E:70:B0:DE:36:7E:F6:67:86:27:4D:B0:F3:72:BE:F4:B2:E1
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/gHJucLDeNn72Z4YnTbDzcr70suE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.199.213.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:6a:ad:aa:f6:fa:ad:7a:41:43:ad:ab:38:d8:09:3b:18:35:
db:11:bc:4c:47:4f:39:91:54:08:ed:19:d3:cf:d9:b3:cd:dd:
74:11:09:8a:fe:cd:b1:19:3c:7b:a8:50:07:3e:9d:b1:eb:ba:
b5:14:81:b1:d6:c4:ad:ab:f7:6e:57:4a:d4:aa:c4:8d:c4:0c:
da:7b:fd:9f:c6:61:ee:2a:3a:54:64:9e:8c:02:b0:b2:24:04:
a3:7f:8f:37:82:d8:ea:6e:84:a0:2e:08:bb:5e:67:d1:bb:5e:
49:99:ca:7f:5d:fd:7e:8e:c1:f0:57:4f:4e:d4:c2:b8:a3:53:
d4:95:ac:00:d8:c9:86:68:31:cc:8b:96:5f:46:70:6c:90:01:
9c:b6:bc:52:94:85:ca:cb:f9:8e:5b:ca:17:93:74:73:d3:ea:
ef:30:e6:32:fe:4f:f6:6d:5e:19:3c:26:f0:b8:07:55:8e:e9:
51:8f:5b:8b:9c:0e:9d:14:32:75:19:57:8b:b9:ed:11:61:6a:
b9:22:63:8a:bd:59:54:0b:08:b0:66:c0:ad:61:cd:78:f6:98:
f1:41:34:fa:0f:01:3a:61:d2:ce:a2:81:a1:f9:3f:4d:bb:17:
8f:c4:92:2d:3e:f6:41:dd:16:88:02:ba:cf:6e:15:db:92:03:
0f:cc:0e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:59:50 2025 by rpki-client