Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/gbt2dgdGb2TfEQLZpGeeWa4Q8LE.roa
File: gbt2dgdGb2TfEQLZpGeeWa4Q8LE.roa (raw, json)
Hash identifier: 8u/Ojowmbeh2NJJrlt+cpAfuaPDNBJguGalS5XBICGg=
Subject key identifier: 81:BB:76:76:07:46:6F:64:DF:11:02:D9:A4:67:9E:59:AE:10:F0:B1
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825CB6731B2538474D37FB632C440AF
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/gbt2dgdGb2TfEQLZpGeeWa4Q8LE.roa
Signing time: Thu 02 Jan 2025 17:52:32 +0000
ROA not before: Thu 02 Jan 2025 17:52:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211185
IP address blocks: 80.79.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:cb:67:31:b2:53:84:74:d3:7f:b6:32:c4:40:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81bb767607466f64df1102d9a4679e59ae10f0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:00:f9:04:4b:7e:8f:1c:70:3b:39:d2:4a:
fc:3a:2f:4e:51:82:db:00:c5:13:52:5b:ce:0a:21:
6e:eb:0b:e1:f7:2c:d4:34:d6:75:b7:d6:8b:04:bb:
c5:a4:92:fd:ba:84:82:1d:44:f4:4f:b2:7e:de:45:
84:6c:7e:bd:a6:4e:3c:49:d6:d7:24:22:c8:6a:0a:
4c:3c:33:fa:ce:da:b6:39:b1:c5:3e:22:5f:a7:f4:
88:55:2d:5f:7f:3e:9a:a3:8b:2d:af:29:78:53:54:
52:ee:0c:17:cd:76:7b:9c:e3:bf:68:af:17:ae:79:
c4:89:21:76:82:44:d8:8e:54:7f:69:6a:06:ab:d2:
69:d5:b3:cc:53:52:82:40:10:9f:6d:d7:8b:17:72:
ef:7e:d6:18:6f:01:df:2b:bb:34:e5:fb:88:75:ae:
a4:0d:7f:68:b9:f9:97:f0:84:9c:86:4f:b6:61:5a:
b7:55:63:c6:d5:47:bf:05:c3:0c:72:5e:eb:4b:2d:
90:6f:a4:b7:6d:8c:01:fd:44:3f:71:ca:b1:1d:75:
a3:dd:68:6c:60:c2:8b:8e:e2:b7:03:d2:2e:eb:82:
bf:da:dc:c9:22:2e:8f:4d:7c:d5:b2:a9:54:fe:8f:
de:35:6a:5b:6b:28:b7:5c:35:05:d4:95:99:fc:ec:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BB:76:76:07:46:6F:64:DF:11:02:D9:A4:67:9E:59:AE:10:F0:B1
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/gbt2dgdGb2TfEQLZpGeeWa4Q8LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:5f:01:95:0a:f8:d2:93:ef:19:a4:7f:b5:20:16:da:d6:b7:
af:12:9e:6e:ad:2f:3f:84:0e:50:d5:9b:a7:e1:a6:f7:17:89:
9c:ca:c3:cb:54:99:57:e0:26:6d:f9:98:50:3f:52:a0:72:6c:
bf:c1:43:80:38:08:8b:41:d0:e4:fc:a3:78:a5:f7:e3:91:72:
9d:fb:b6:f4:8f:71:a5:c1:c5:61:d2:b7:c4:81:75:7d:0f:7a:
dc:7d:d3:e5:ce:2a:39:cc:28:bd:e4:4b:6c:19:e4:15:42:ee:
66:27:30:f7:46:2d:96:18:b2:fa:46:36:b9:a3:b8:aa:a9:48:
db:0b:29:f3:6c:48:7b:94:b2:d2:b4:09:97:ec:6a:87:1f:67:
ac:8d:ea:a2:76:60:eb:2a:c2:f9:cd:80:70:b6:d5:52:a5:27:
1b:3a:f7:cf:75:76:a9:15:4f:bf:fa:9a:54:52:3d:71:ee:85:
3e:79:09:55:58:5c:bb:7a:cb:57:06:bf:97:be:0b:2d:b1:30:
85:0a:7c:3f:55:13:6d:ed:cf:57:32:f0:d6:f1:df:cc:49:94:
5b:06:9d:56:9f:44:5b:3f:a8:bd:36:b9:5c:1c:cb:99:57:5a:
42:23:7a:09:a5:08:20:33:85:bb:28:88:2b:f4:23:ce:20:b8:
8f:d7:28:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:03:34 2025 by rpki-client