Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/_gpLxW0fzvb5DJJQd0bq0o_QET0.roa
File: _gpLxW0fzvb5DJJQd0bq0o_QET0.roa (raw, json)
Hash identifier: tD3Cm8lKrfj4EtGNAWAxKK6dJmhObO63VITMzdu4Eek=
Subject key identifier: FE:0A:4B:C5:6D:1F:CE:F6:F9:0C:92:50:77:46:EA:D2:8F:D0:11:3D
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0194221F6CC1383AD97AFA112EFA5DDEB935
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/_gpLxW0fzvb5DJJQd0bq0o_QET0.roa
Signing time: Wed 01 Jan 2025 13:47:52 +0000
ROA not before: Wed 01 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51847
IP address blocks: 45.146.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6c:c1:38:3a:d9:7a:fa:11:2e:fa:5d:de:b9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe0a4bc56d1fcef6f90c92507746ead28fd0113d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:bb:3f:df:60:ba:e2:67:88:c9:35:6f:c1:
71:53:72:1a:76:58:e5:15:7b:ef:01:fd:84:92:8d:
65:5e:d9:44:c8:a2:97:b9:b8:aa:06:a9:31:46:79:
18:9b:f2:fa:ab:15:18:30:ea:30:49:da:54:99:42:
a1:9b:18:af:03:69:bb:de:aa:6c:74:75:d7:d6:45:
ad:5f:be:2d:f8:35:b2:9e:ea:c4:b4:f5:4a:0a:14:
32:11:5b:38:af:8c:14:45:d2:b4:2f:3a:78:dd:0d:
41:73:af:dc:d9:8b:86:b9:3a:a0:82:79:3b:4e:bc:
81:e0:51:56:c7:fe:d6:7d:c7:1c:8a:77:dd:6a:66:
e4:1a:d6:01:f7:cc:54:b2:b8:50:31:a5:c1:36:7c:
fd:95:e0:85:62:f6:58:64:c5:fc:51:7b:de:64:20:
18:8b:78:f2:d7:bf:a5:c3:61:e1:df:d3:67:7e:ef:
c9:7c:0b:35:30:95:ac:c0:db:52:fd:02:1c:4e:fd:
70:d1:d4:45:c3:2f:0a:f9:24:43:e6:33:ce:b9:0c:
1a:1c:3a:95:df:02:2c:76:c4:ca:37:c2:bf:49:47:
ab:1e:36:0c:8c:0f:ab:98:7b:fa:a3:1a:e8:e1:22:
c5:6b:16:e8:7c:9d:80:37:79:98:8c:5d:88:b7:c4:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0A:4B:C5:6D:1F:CE:F6:F9:0C:92:50:77:46:EA:D2:8F:D0:11:3D
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/_gpLxW0fzvb5DJJQd0bq0o_QET0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.232.0/23
Signature Algorithm: sha256WithRSAEncryption
14:bf:15:25:94:d8:57:64:c7:04:6f:c2:1e:5a:7f:00:c2:c2:
bf:04:b7:e8:de:7a:4c:4a:2d:ea:b9:b7:69:2e:ab:00:ff:24:
61:c8:08:38:b0:28:7f:0d:4f:9f:13:50:0e:af:71:9c:56:b6:
2c:bc:db:84:84:56:ba:93:fd:63:0c:70:ff:2c:84:0c:2d:a4:
3a:53:70:29:35:7d:b7:7d:e4:a0:1c:c7:52:34:94:43:a2:78:
f5:18:29:92:25:44:5a:8f:fe:9d:98:40:68:11:5a:23:51:88:
7b:5b:ef:8e:32:46:1d:49:8f:e8:2d:5e:ab:e0:f7:6f:8d:3e:
58:6d:97:37:f0:5c:bd:9c:f8:91:5f:56:e9:a2:7f:2e:b2:ff:
28:fc:bd:09:50:f2:7c:0f:73:19:80:bf:db:3c:49:f3:28:a1:
54:31:2d:91:92:74:3d:a7:07:57:76:10:21:c2:e7:5e:87:5f:
24:a3:4f:fe:47:6f:23:e0:cb:4b:0b:9a:5e:c3:5e:71:cd:14:
7d:89:bb:58:c1:40:83:c7:d2:d5:bc:ee:77:cc:b7:e6:59:48:
bc:3c:e6:39:32:25:60:6e:f7:b0:1c:47:79:6a:3e:fd:66:23:
f1:ce:5d:a1:47:da:4a:c7:25:42:3b:b6:46:b0:41:91:ed:40:
df:21:2c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:45 2025 by rpki-client