Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/guRa0ry_XeErXAXDimQX6nD8r-o.roa
File: guRa0ry_XeErXAXDimQX6nD8r-o.roa (raw, json)
Hash identifier: HkTFHVv5bF3CwAvh/UV6s5H3UbyzToqbz92TpMOY9SE=
Subject key identifier: 82:E4:5A:D2:BC:BF:5D:E1:2B:5C:05:C3:8A:64:17:EA:70:FC:AF:EA
Certificate issuer: /CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
Certificate serial: 019427B518371AC7603017369E2CF818A6B2
Authority key identifier: E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/guRa0ry_XeErXAXDimQX6nD8r-o.roa
Signing time: Thu 02 Jan 2025 15:49:27 +0000
ROA not before: Thu 02 Jan 2025 15:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47284
IP address blocks: 195.182.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:18:37:1a:c7:60:30:17:36:9e:2c:f8:18:a6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
Validity
Not Before: Jan 2 15:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82e45ad2bcbf5de12b5c05c38a6417ea70fcafea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:48:54:32:0a:61:63:48:42:5f:15:bf:93:
d3:38:37:45:54:20:9e:30:65:5f:b2:05:9e:99:2a:
32:31:97:27:b6:01:b1:c4:17:cb:5d:9c:bc:b0:c0:
2b:fe:00:7d:c5:18:ee:52:f9:a7:be:f2:b7:a0:b5:
4e:92:cd:ff:3d:83:96:9a:51:10:f3:e8:fa:67:56:
fd:f5:02:83:c6:be:46:c9:6b:cd:ee:55:23:a4:2f:
64:c7:e5:52:1c:fc:c0:c3:a3:47:ab:f9:49:e7:d4:
f3:c3:3b:88:83:dc:b7:3d:3f:ca:22:b3:21:24:48:
03:85:ee:7d:26:c6:15:9e:56:ca:f0:a9:46:ec:2a:
ac:a9:11:63:05:5e:a8:4b:06:8a:ae:8e:68:a2:9e:
7b:a1:54:be:18:33:a0:44:4b:44:55:c0:66:9d:fa:
59:84:33:0f:27:84:f7:ab:bb:ff:d6:11:e6:f8:4a:
fd:da:17:b0:3d:38:4a:9c:19:93:89:4d:de:63:cf:
fd:a8:a6:21:7c:21:34:93:eb:ac:1e:ef:fe:41:25:
d1:8d:89:9c:bc:77:31:97:d9:cd:bc:68:b1:14:49:
6e:98:d3:e7:c6:a6:00:0b:1e:fd:e2:dc:08:43:99:
48:e5:6f:64:9f:15:ed:72:12:4a:6d:75:86:f8:5f:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E4:5A:D2:BC:BF:5D:E1:2B:5C:05:C3:8A:64:17:EA:70:FC:AF:EA
X509v3 Authority Key Identifier:
keyid:E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/guRa0ry_XeErXAXDimQX6nD8r-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.47.0/24
Signature Algorithm: sha256WithRSAEncryption
69:7d:96:3f:63:00:d9:63:f7:51:fb:3d:7a:f6:51:61:0e:ba:
8b:15:00:df:96:d2:93:da:78:a1:39:22:65:8e:07:c6:7a:62:
86:2c:e5:ab:ee:e3:38:21:cd:a9:d2:cc:29:f6:34:9f:b8:b7:
dc:08:9e:a4:ef:76:ac:a8:be:e1:e1:84:69:97:95:5b:5e:49:
f6:19:42:1d:1c:25:62:a7:c9:32:d6:5c:c7:2f:ff:d7:2e:61:
bd:2c:d9:e2:43:9e:fa:55:52:53:e7:98:46:f1:31:7f:a1:e7:
48:23:2e:01:f8:1a:34:49:94:1c:18:6d:4c:0d:9c:68:b6:bf:
98:ce:ae:6f:04:f7:00:d4:31:1f:73:b8:99:a4:7a:c6:f9:eb:
48:7d:ab:98:48:c7:64:e4:44:de:ae:3e:7d:66:47:7a:ad:84:
4e:3e:fb:00:34:43:6b:fa:f0:a2:9b:96:74:57:dc:ff:93:a0:
73:79:54:9d:f5:95:04:02:55:11:82:0f:55:88:fd:e8:b5:67:
31:dc:5b:ed:17:5d:82:ca:1d:2f:3d:9a:35:15:2f:1f:3a:84:
7f:72:91:4c:ba:df:db:78:41:34:fa:9a:e2:97:e5:5d:e8:47:
4b:4b:63:32:89:36:ba:ae:0a:1b:fb:ff:b6:4e:55:d6:96:43:
87:7a:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:51 2025 by rpki-client