Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/gTXc09MBtqnmw3GOQ02qrwpMS84.roa
File: gTXc09MBtqnmw3GOQ02qrwpMS84.roa (raw, json)
Hash identifier: c/faZAzER1FA8lwrLMG8MZsQ5SgoZv9mWu1aAorpMcM=
Subject key identifier: 81:35:DC:D3:D3:01:B6:A9:E6:C3:71:8E:43:4D:AA:AF:0A:4C:4B:CE
Certificate issuer: /CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Certificate serial: 0194266BF2F51791AC55555F6DEF0385F7FB
Authority key identifier: 14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/gTXc09MBtqnmw3GOQ02qrwpMS84.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209141
IP address blocks: 5.180.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f2:f5:17:91:ac:55:55:5f:6d:ef:03:85:f7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8135dcd3d301b6a9e6c3718e434daaaf0a4c4bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:78:9d:47:52:32:f7:a8:7b:52:24:53:af:
bb:3d:6e:6c:ae:61:6f:23:b9:10:de:a3:dc:fc:92:
a2:2a:fe:15:72:3d:8b:a7:58:55:d8:20:ac:a4:d8:
25:46:bc:d9:5f:10:9a:8e:3c:2f:43:af:ae:77:fc:
1e:d6:2a:a0:83:5d:7c:06:d7:a7:f1:6f:b9:7b:96:
a5:e1:23:b1:99:12:c3:cb:3c:80:02:ea:d9:5b:6e:
1d:a4:b9:b1:a2:78:b7:db:ee:17:15:ad:c1:0f:84:
bc:e8:ca:e2:ec:1d:e1:7d:c0:b8:a1:d1:10:f8:31:
ea:cd:fc:66:0e:49:31:de:6f:3b:c8:5b:b5:46:13:
c3:3a:98:83:77:c2:c9:7b:a2:c4:86:c8:2c:b0:17:
dd:7e:6a:51:85:06:8d:08:9a:d6:14:4c:32:fb:80:
56:0e:d4:91:89:7b:1a:50:7c:48:d4:58:c5:02:0c:
da:3e:09:7d:91:38:80:79:30:97:56:2c:b5:a8:9a:
0f:ac:0d:c7:9c:64:f1:40:f9:6c:9c:ee:3c:61:fc:
b3:d5:96:b7:1c:2b:1c:60:66:d8:e0:49:9b:60:72:
79:9f:85:37:19:26:b9:a8:e9:64:67:18:94:a1:4f:
17:da:46:be:4b:95:f3:0f:a2:30:4e:d2:82:26:3c:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:35:DC:D3:D3:01:B6:A9:E6:C3:71:8E:43:4D:AA:AF:0A:4C:4B:CE
X509v3 Authority Key Identifier:
keyid:14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/gTXc09MBtqnmw3GOQ02qrwpMS84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:09:fb:1b:d6:28:58:db:01:a8:83:91:3a:05:6d:24:81:b1:
73:9b:f3:3f:06:3d:60:3a:fb:0c:34:9e:99:2b:c8:56:c1:47:
c0:7b:60:92:f9:fb:02:9f:71:b0:96:b6:ee:cb:64:39:6e:03:
e0:6e:4a:a3:ab:2a:91:f1:f3:6c:e7:bb:92:59:c4:d2:06:c8:
6d:84:60:09:55:2d:7b:e7:94:e1:0e:c6:bc:41:4d:db:d2:75:
fd:41:e0:e0:88:42:16:b0:28:f2:d7:74:2b:1a:0d:e0:4e:5c:
bf:c4:67:df:e7:91:59:fb:63:c9:3d:85:7e:dd:4c:0d:7a:32:
05:7c:1f:39:11:a3:13:a2:2c:3f:d6:ff:4a:f1:82:f1:bd:b8:
f9:2d:74:7d:a1:93:6a:ba:68:28:69:31:48:06:12:04:27:38:
d5:d5:3f:4a:6e:e1:83:82:98:2d:9d:89:9a:aa:e5:0b:8b:86:
1d:6d:ba:13:c4:0c:79:fa:29:48:21:ac:ed:75:20:f9:14:40:
da:5c:70:0b:01:ee:71:45:cc:8a:1a:ea:31:11:20:5d:70:e4:
b7:9b:dd:2f:84:2c:b0:32:e2:d1:72:f1:7d:23:36:5d:f8:a4:
9a:a8:90:42:bc:75:1b:59:fe:8e:7c:bf:9b:5f:1d:63:14:25:
14:f9:1d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:08:45 2025 by rpki-client