Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa
File: GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa (raw, json)
Hash identifier: Ni4Tstwu0GgIgTRS0r/kMJY1nK24hB/s3xhSSr7BatI=
Subject key identifier: 1A:5B:97:D5:B5:C0:38:21:0A:A2:23:C6:8A:A7:7D:E0:22:77:3E:74
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 019423D7525FD880306B1F551575F892729E
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa
Signing time: Wed 01 Jan 2025 21:48:21 +0000
ROA not before: Wed 01 Jan 2025 21:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8896
IP address blocks: 91.223.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:52:5f:d8:80:30:6b:1f:55:15:75:f8:92:72:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: Jan 1 21:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a5b97d5b5c038210aa223c68aa77de022773e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:b7:99:1b:e1:c7:05:b8:39:a9:02:16:a2:
f1:5e:26:f4:d6:a5:d0:8a:f6:09:6e:cb:53:17:6d:
b5:88:48:99:bc:2c:3b:b8:1e:0a:cb:5c:e6:28:1a:
0d:7e:b2:82:7f:33:df:26:b2:59:72:ef:e7:7c:78:
51:a2:15:5e:f7:f1:2a:07:eb:39:3b:70:01:e6:19:
a5:ac:00:92:47:c4:c9:26:58:78:b0:cb:73:82:a5:
69:36:a8:a1:b9:da:0d:00:d4:c9:eb:12:26:23:43:
90:a4:2f:e8:77:57:1c:ee:00:cd:79:2e:14:1d:05:
1f:44:a7:4f:1b:10:8d:58:ee:fd:a0:cc:0a:4c:4f:
70:8e:48:f6:ea:98:00:8b:b9:e6:02:22:06:60:98:
b2:b5:98:7f:fc:eb:9b:3e:ec:62:c2:3c:88:c0:7d:
d6:72:eb:9f:12:8e:b2:d7:a5:9f:1b:e7:e1:e9:6e:
f6:99:2d:0e:0c:a3:e1:e5:42:ac:3a:19:cf:9d:9e:
69:ac:3b:bd:85:73:fa:87:a9:14:6b:10:04:c1:b5:
56:19:94:0f:5d:08:f1:fa:d0:79:d1:5b:da:86:bc:
b6:93:cb:d9:e0:22:d8:d1:5e:ff:16:f7:5d:c8:0b:
3c:87:f5:21:ac:76:5c:c5:9a:83:c0:4f:38:f6:1b:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5B:97:D5:B5:C0:38:21:0A:A2:23:C6:8A:A7:7D:E0:22:77:3E:74
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.85.0/24
Signature Algorithm: sha256WithRSAEncryption
53:71:25:47:38:02:25:d9:f9:ef:ff:d2:50:64:ea:c7:ae:76:
7e:fb:60:17:18:ef:d8:cf:60:e7:4a:8a:d3:8d:45:66:af:fa:
f3:80:28:c0:8a:4f:b9:5b:5a:51:b9:fb:b5:e7:fe:0a:d8:4d:
f5:ff:6b:c3:79:17:58:10:6e:ab:2f:5d:c6:52:39:5d:37:01:
d3:48:a4:62:c2:0c:9d:71:8f:88:b2:d8:6f:bb:8b:29:59:d8:
41:27:f2:27:50:15:3b:e5:13:08:4e:73:5e:ea:8f:d6:9c:23:
f9:0e:f6:ff:a1:c2:6d:45:b2:a5:5f:3c:1c:ba:b5:a0:30:e9:
25:8b:78:e7:ac:94:65:9f:0e:85:af:a2:fa:25:88:70:72:1a:
06:ab:41:df:b9:c5:ca:9c:fa:3f:5f:81:fa:bb:d4:91:cf:5a:
59:27:86:93:d1:c2:46:f2:e0:eb:26:6a:e1:59:0f:be:a1:53:
6e:ab:03:89:f5:3b:4b:71:09:98:cd:10:a4:40:9e:68:f7:3b:
ed:c7:d2:63:ac:60:b2:07:a5:aa:8e:12:11:7c:ce:63:79:aa:
4b:29:3c:58:a6:be:f9:a7:a0:00:79:1d:7f:c1:80:cd:d6:65:
08:76:9f:3d:70:f1:3d:16:d6:ef:ed:bf:c7:03:52:4f:a9:9d:
ea:f8:73:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:00:46 2025 by rpki-client