Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/gC-I7nL_Xkk4-3X3c-2DTXA7WK4.roa
File: gC-I7nL_Xkk4-3X3c-2DTXA7WK4.roa (raw, json)
Hash identifier: v0YiLfrhlviYaHzBgPvOrWo3ri6FWwYauWU+NKTp5TE=
Subject key identifier: 80:2F:88:EE:72:FF:5E:49:38:FB:75:F7:73:ED:83:4D:70:3B:58:AE
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019423698A5B8F60F71A3C97C680DE980614
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/gC-I7nL_Xkk4-3X3c-2DTXA7WK4.roa
Signing time: Wed 01 Jan 2025 19:48:26 +0000
ROA not before: Wed 01 Jan 2025 19:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33925
IP address blocks: 188.240.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8a:5b:8f:60:f7:1a:3c:97:c6:80:de:98:06:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=802f88ee72ff5e4938fb75f773ed834d703b58ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:02:7c:dd:d8:71:1a:90:5d:dc:43:a7:5e:
43:94:b9:3e:02:5d:27:de:9b:73:1f:aa:b3:9f:7c:
8b:89:2f:7b:ce:02:ce:bb:a1:af:f2:ec:b1:04:72:
2d:cc:ed:e4:15:a1:34:ef:5a:3b:93:14:09:7c:c8:
d9:99:67:d6:d6:f9:26:2a:3f:f6:e4:f5:ab:c7:c4:
b8:64:c9:c5:45:77:0e:5a:d5:3c:b0:2e:af:55:68:
52:cb:80:2b:21:7d:66:2c:13:b4:8a:75:06:3b:20:
3e:3e:00:65:3e:eb:ca:ce:c2:8a:ed:0d:b2:cd:ce:
be:03:4f:27:88:2c:59:af:2c:2a:0e:93:e5:c3:46:
3b:bd:91:71:35:d0:0a:ed:2a:30:9c:76:72:7d:43:
7f:d0:33:fe:14:d6:00:cb:b9:9d:00:95:37:68:43:
d0:25:77:d4:88:df:a8:37:9a:d6:84:f9:d8:e0:03:
b6:b1:7f:31:81:48:9f:d7:a8:bb:90:10:39:b4:b6:
a5:fe:9a:c1:5d:a6:85:cf:88:ab:58:07:e6:a2:ef:
7d:58:4f:79:b7:b7:87:ab:d2:a5:e9:2f:7b:78:98:
27:8f:58:30:26:7c:ae:4f:98:74:80:0a:cf:96:d6:
87:d2:84:40:0c:55:05:0d:28:d1:a8:30:f7:12:a7:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2F:88:EE:72:FF:5E:49:38:FB:75:F7:73:ED:83:4D:70:3B:58:AE
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/gC-I7nL_Xkk4-3X3c-2DTXA7WK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.89.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fc:7b:56:40:70:3e:a5:46:cd:bc:b5:0b:22:c0:9c:3d:fb:
eb:e2:25:97:08:46:5e:8c:85:c3:1d:1f:cb:55:19:f5:f8:38:
d8:3a:58:d9:ba:ef:72:52:4f:c9:3a:65:5d:6a:41:89:3a:04:
fc:7c:dc:ca:46:a3:1b:a9:e3:76:ad:5d:0b:58:98:ab:bb:6a:
f1:1e:dd:99:43:01:16:b9:df:ec:f7:90:13:27:63:ad:27:36:
b6:4f:82:25:c1:8f:fe:c0:5a:c5:33:fb:6d:f4:0a:2c:20:18:
c4:c4:96:30:18:96:1a:ef:a4:5e:55:b4:55:d2:2a:6a:ea:e6:
56:69:4a:0b:f8:43:cc:77:47:b6:ab:02:c4:9a:0e:db:98:c6:
22:8f:89:c7:7e:0f:da:02:4e:0c:0b:12:12:3b:b1:54:4b:39:
ce:69:51:80:d2:fc:a2:ed:5b:c8:6f:b7:92:8c:a7:2d:2c:4d:
b5:06:4d:a8:27:2a:d6:28:88:40:ff:ae:dc:cd:4a:b3:dc:00:
c1:a5:df:4b:d3:85:d5:6f:1e:49:ae:ba:ea:af:a6:ce:a3:53:
ae:d9:9b:b8:f5:cd:12:48:a3:c2:59:d9:73:72:05:6c:b1:6a:
aa:51:d2:ff:ab:89:6d:c4:af:93:1c:12:b6:9d:ed:2d:88:bb:
00:69:45:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:21 2025 by rpki-client