Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/gdHXFojCxWXaHY_cAJtvf6Cqm-k.roa
File: gdHXFojCxWXaHY_cAJtvf6Cqm-k.roa (raw, json)
Hash identifier: qxGVXrUq05G5ZdyA/pZHhsaWPTDKm9cP79oGLtYRcXE=
Subject key identifier: 81:D1:D7:16:88:C2:C5:65:DA:1D:8F:DC:00:9B:6F:7F:A0:AA:9B:E9
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A30CD2278AF54982FD537179B8FDE
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/gdHXFojCxWXaHY_cAJtvf6Cqm-k.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202819
IP address blocks: 84.245.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:30:cd:22:78:af:54:98:2f:d5:37:17:9b:8f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81d1d71688c2c565da1d8fdc009b6f7fa0aa9be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:ee:ff:29:c3:7f:5f:44:40:34:55:dd:17:
c8:8c:8d:00:8e:35:84:53:99:84:a0:64:57:48:e2:
af:f4:69:29:a7:1f:d1:40:03:1f:4f:58:94:37:1a:
00:84:fc:53:c0:58:5c:77:5f:a7:43:21:be:2e:1f:
49:e1:d3:4e:47:c1:e8:85:62:31:bd:96:b9:82:17:
2c:35:44:8e:31:d6:36:20:98:11:f5:7f:e8:de:4c:
20:70:a4:8d:a1:19:ed:7e:b1:6a:f9:8c:99:bd:1f:
d3:46:ce:9c:75:10:57:bd:12:aa:d5:55:1b:30:0a:
06:eb:a5:70:0a:a2:e8:b3:24:9f:d9:1e:ec:9a:54:
f5:f6:11:54:5b:d7:e2:20:c2:fe:b3:f0:de:b6:08:
6a:59:b4:c4:72:9c:29:6b:6e:56:24:01:ad:2e:e9:
08:d9:a8:04:c2:f4:33:11:83:ec:e9:6a:ea:37:82:
6c:bd:65:e5:08:31:bb:d3:7b:a3:18:55:fc:09:b3:
46:89:cb:42:ae:bb:a3:07:52:f7:53:d8:5f:cc:c2:
15:3f:86:81:ac:66:94:8a:33:e4:09:b9:52:29:fc:
d4:68:a6:0a:b6:62:93:fc:56:6a:23:ef:42:c1:1b:
fe:2b:02:a2:51:57:04:3f:95:16:7c:22:ef:3a:61:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D1:D7:16:88:C2:C5:65:DA:1D:8F:DC:00:9B:6F:7F:A0:AA:9B:E9
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/gdHXFojCxWXaHY_cAJtvf6Cqm-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:49:01:09:cb:48:23:b3:67:1e:fa:98:a3:0f:3f:87:e9:fe:
0d:70:6a:66:1e:7d:15:53:f8:3f:af:2a:b5:fc:3c:90:eb:3d:
99:1a:5e:b0:ca:97:29:ec:71:f9:ef:99:ce:2a:fe:08:49:b5:
16:4f:b9:16:dd:16:bc:fa:f2:b7:d3:4a:bd:34:e9:3d:53:29:
1b:e9:8f:ae:19:db:47:fa:cc:c7:86:a2:4f:63:01:26:82:d8:
df:67:b1:0d:0c:3a:2d:34:ac:09:22:bf:6d:32:e1:05:bc:bb:
e1:50:2b:e2:13:4e:9f:7e:65:46:28:1d:a8:b5:bd:cf:37:b1:
eb:f2:b9:ca:f9:bd:19:b8:a2:7a:24:9f:a1:c8:a6:9a:47:bd:
82:ea:76:05:b1:ff:f2:42:77:b4:da:ba:e5:ac:e1:02:b2:cc:
ec:65:2e:bc:4d:c4:25:6b:c1:59:90:6f:18:52:62:31:a0:73:
99:95:65:36:cf:dd:b0:c2:07:75:0f:6a:09:9c:da:1b:23:b2:
a2:16:fb:10:d9:e3:fe:9c:88:1a:96:ba:8d:98:7d:a6:28:a9:
5b:bd:35:09:83:b0:d4:c0:22:96:3c:5c:f7:af:17:70:63:77:
3d:dc:0f:b0:28:05:70:36:ea:5b:55:f4:0d:c2:ad:b3:8f:fb:
68:ef:26:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:39 2025 by rpki-client