Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/_G6b2YObaO8vXwxmRAdxtdM520E.roa
File: _G6b2YObaO8vXwxmRAdxtdM520E.roa (raw, json)
Hash identifier: 1ZvsYB4M9L/iBBRu/0d0SPNVtbn8DNDppTZnbpT7L4o=
Subject key identifier: FC:6E:9B:D9:83:9B:68:EF:2F:5F:0C:66:44:07:71:B5:D3:39:DB:41
Certificate issuer: /CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Certificate serial: 019420D6053F79B80CB336FF6BDA50505C1B
Authority key identifier: 65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/_G6b2YObaO8vXwxmRAdxtdM520E.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41027
IP address blocks: 195.189.228.0/24 maxlen: 24
195.189.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:05:3f:79:b8:0c:b3:36:ff:6b:da:50:50:5c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc6e9bd9839b68ef2f5f0c66440771b5d339db41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:88:b2:fe:32:20:ed:c4:7d:f5:d6:a5:0a:
fa:74:90:aa:f8:60:a7:92:ac:4e:cd:cb:6b:57:f9:
b2:b0:b1:d9:32:16:7b:a7:22:42:de:05:e7:9f:7c:
75:d4:2a:0d:22:ad:9e:4a:c0:be:2f:2e:29:13:fa:
8f:0b:60:76:ad:67:56:11:55:c9:25:86:d1:88:12:
61:a5:32:f9:7b:c6:ee:3d:2e:ff:36:7b:ca:d0:fc:
5d:25:5f:cc:5a:e3:d7:e5:e7:1c:0e:58:82:f8:d4:
e8:54:14:af:65:5a:af:65:9b:1c:8c:5d:7b:8b:72:
37:bb:ab:5f:7a:86:82:17:e9:6a:51:40:ea:1b:ac:
6a:53:22:7b:19:1f:aa:be:c6:b6:0a:4f:53:4a:7b:
c1:a6:60:c3:49:9d:13:0b:68:7e:5b:fd:b5:0d:dc:
61:21:f0:55:58:b2:81:4c:f6:31:b1:be:b4:37:1a:
a4:6d:52:cf:06:a4:7f:c1:4c:cb:78:0d:b8:99:e2:
7d:4a:4b:be:48:59:73:10:83:2a:ab:ee:08:66:db:
c1:cd:79:21:f7:3f:6b:cc:a8:26:9f:4e:4a:ce:17:
8a:95:e1:d0:47:45:73:05:36:56:d8:24:30:df:b8:
90:c5:ea:3b:36:1e:0a:fc:f0:4e:16:e7:e9:a5:83:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6E:9B:D9:83:9B:68:EF:2F:5F:0C:66:44:07:71:B5:D3:39:DB:41
X509v3 Authority Key Identifier:
keyid:65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/_G6b2YObaO8vXwxmRAdxtdM520E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.228.0/23
Signature Algorithm: sha256WithRSAEncryption
42:5f:02:c5:97:7a:9d:48:ce:50:f1:5d:8d:8a:2a:21:26:e4:
01:cd:0e:f9:8c:fe:58:55:0f:3e:fe:86:85:17:c0:21:a3:38:
5d:f1:77:05:44:ec:35:da:91:de:e9:b7:9e:e5:bd:08:5d:3d:
eb:20:62:19:5b:9d:7d:7b:07:37:ae:30:a1:82:7f:15:ab:54:
cf:63:7b:85:78:63:f9:f4:81:72:4b:ae:34:0d:3c:f4:8e:af:
06:81:20:c7:ff:a6:8a:29:ea:fd:b5:d7:57:51:a5:36:d9:f2:
0d:3c:d8:5b:32:80:69:3b:f5:58:6c:27:aa:a3:9e:31:67:79:
33:53:35:c3:16:cc:25:7d:40:44:c1:1e:3e:16:72:f5:f8:bc:
88:94:6a:26:c6:16:e5:fe:74:25:8f:37:02:b1:ba:46:da:cd:
1a:69:b5:30:b7:be:41:1f:37:e8:48:30:d2:32:35:15:95:ca:
3b:ca:47:bd:a4:ab:1d:24:04:fb:7d:59:d1:19:49:4f:a4:60:
2d:3c:c5:a8:75:fb:c8:ba:6f:06:3c:f7:cb:84:39:e0:f6:1f:
dd:09:6c:6e:2c:36:e1:b4:29:12:3a:6c:a0:07:c9:70:b9:6a:
34:bf:dd:f2:8b:76:11:a8:b8:0b:cc:6b:d1:de:34:41:47:4c:
50:7a:0b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:10 2025 by rpki-client