Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/GhR7A-YbyUt1d9yLo7nMgqbFhHw.roa
File: GhR7A-YbyUt1d9yLo7nMgqbFhHw.roa (raw, json)
Hash identifier: w6k3BagHuzed7pMgFqXDwDrZFogGz/AtgIn1sQdxfok=
Subject key identifier: 1A:14:7B:03:E6:1B:C9:4B:75:77:DC:8B:A3:B9:CC:82:A6:C5:84:7C
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825CDB195DF44E800C5095A84FFB070
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/GhR7A-YbyUt1d9yLo7nMgqbFhHw.roa
Signing time: Thu 02 Jan 2025 17:52:33 +0000
ROA not before: Thu 02 Jan 2025 17:52:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216011
IP address blocks: 94.125.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:cd:b1:95:df:44:e8:00:c5:09:5a:84:ff:b0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a147b03e61bc94b7577dc8ba3b9cc82a6c5847c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:df:9c:80:52:d0:b7:35:97:6f:e7:94:e4:
3d:fa:ba:d6:14:3d:7f:a8:5e:2a:74:42:8f:8d:b1:
4c:87:fd:b9:f7:d2:e6:9e:6c:2a:7f:c1:9a:7d:bc:
a8:a7:3a:9c:31:c4:42:fb:3d:91:0f:20:33:a8:0f:
d0:c9:20:e5:22:6f:b8:6d:99:a1:92:40:0d:2a:a1:
e9:26:02:90:11:34:ae:35:f7:2e:c1:71:d5:a2:65:
d9:d8:46:f7:52:8e:07:30:81:5f:78:e0:2a:9c:8e:
d1:a0:a0:4e:b5:4b:b7:88:06:a5:bc:d0:7d:65:c6:
a5:13:2f:48:7a:1c:61:db:29:a2:15:13:8f:97:5e:
97:17:80:10:e0:1a:89:7e:ae:64:bf:b5:cf:31:d5:
a9:23:56:24:4d:b2:db:51:86:9c:33:e3:c8:57:58:
e3:ba:ce:3e:c2:23:5c:a5:f7:c0:9d:d1:9e:c9:c6:
a5:0b:38:4b:13:2d:c4:b8:78:2b:2b:94:22:5e:70:
2b:ca:3f:1a:87:17:f1:13:19:30:f3:dc:0d:00:80:
3a:32:bb:3f:97:1c:b0:e4:37:5f:7e:b3:bb:4a:bd:
35:bb:51:7c:4a:09:6c:3b:72:de:91:2f:a3:44:33:
f6:1e:76:c7:70:31:c4:ea:65:63:09:52:0b:76:2e:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:14:7B:03:E6:1B:C9:4B:75:77:DC:8B:A3:B9:CC:82:A6:C5:84:7C
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/GhR7A-YbyUt1d9yLo7nMgqbFhHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.12.0/24
Signature Algorithm: sha256WithRSAEncryption
79:da:57:f3:0d:76:00:66:cb:df:90:19:bd:1d:a2:05:9f:86:
5f:46:40:1f:76:5c:03:14:35:0f:1b:41:85:2d:9a:34:ef:77:
0e:58:1f:14:25:49:00:a0:d2:f4:a2:dc:21:85:97:42:93:df:
9e:a3:f4:7a:37:b0:de:87:45:4e:94:03:3a:73:b7:6a:73:be:
89:72:b5:80:95:25:5b:f7:4b:c1:45:42:9c:06:1e:ae:7a:21:
18:58:31:e9:7e:5e:43:7e:12:97:39:6b:bf:4f:c0:30:c4:bc:
5c:bf:83:09:90:85:ff:65:23:a1:d7:b0:e9:e2:c9:2b:e3:58:
70:66:7e:3a:04:5c:d1:ce:0d:ee:0c:53:42:97:b4:5f:10:21:
90:b1:a6:35:0b:37:0a:db:b9:b9:06:4e:52:fc:bd:6d:86:df:
7f:a4:a3:c7:51:17:10:a0:34:c3:22:ef:cf:8d:76:69:3f:24:
c6:0a:fb:cd:42:ff:e6:ac:38:b7:fc:55:ca:01:21:e4:e6:5b:
65:91:12:3a:d6:e1:86:b5:81:2c:a2:a2:9c:6b:6f:18:c4:0a:
ee:0f:35:5b:2c:44:dc:a1:b4:eb:95:b7:8f:b7:4b:ea:a8:a7:
88:68:b1:81:c5:9c:23:98:f3:44:cf:39:69:be:5f:f5:be:60:
88:dc:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:56:02 2025 by rpki-client