Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/GqbACIHpXheHhq0oe01LtYC6Cs8.roa
File: GqbACIHpXheHhq0oe01LtYC6Cs8.roa (raw, json)
Hash identifier: 1QDs0/2NoNbNsd7ad8m6jQQ5pnMmhaUanNisyPMXmxQ=
Subject key identifier: 1A:A6:C0:08:81:E9:5E:17:87:86:AD:28:7B:4D:4B:B5:80:BA:0A:CF
Certificate issuer: /CN=5993efdd0a28fd3ab66b7a05b9b8d77c56666356
Certificate serial: 019423D6AEC5A81DFE47BDA3042884147C0E
Authority key identifier: 59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/GqbACIHpXheHhq0oe01LtYC6Cs8.roa
Signing time: Wed 01 Jan 2025 21:47:39 +0000
ROA not before: Wed 01 Jan 2025 21:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51141
IP address blocks: 91.216.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ae:c5:a8:1d:fe:47:bd:a3:04:28:84:14:7c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5993efdd0a28fd3ab66b7a05b9b8d77c56666356
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aa6c00881e95e178786ad287b4d4bb580ba0acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:b7:20:c4:41:b5:26:fb:3a:b0:44:a3:ee:
10:08:1a:b0:cc:fc:8b:4c:f1:1d:88:49:71:be:a5:
92:ab:de:c4:32:6e:a1:2a:ba:7b:4b:2c:d9:16:61:
0e:ad:b8:37:5e:c7:01:df:0e:21:3d:1c:ea:48:a3:
d9:ab:2c:05:46:ba:c0:cc:0c:62:31:44:20:9b:fc:
73:76:0a:cd:30:67:e4:42:d2:92:5f:b3:f6:54:be:
bd:cc:0c:2e:8b:cc:91:31:47:86:29:32:b0:fb:b9:
08:5d:55:d1:3a:4c:85:a8:47:1b:5c:81:7c:28:45:
b2:31:2b:4b:42:f4:55:c5:96:d2:58:48:d1:95:f1:
48:a1:09:a0:34:fa:28:1a:16:f8:ac:ad:9a:08:9b:
a7:9f:14:37:5a:7a:42:19:2b:2a:f8:bf:f7:3e:4f:
89:e3:a3:3a:b5:37:34:6c:b3:64:30:a7:01:8a:dd:
53:43:77:5e:f4:89:43:c0:04:cc:14:38:4d:f8:06:
55:dc:66:64:6b:59:04:ce:80:d2:cd:8c:0c:ca:a0:
bf:80:56:c1:83:21:72:79:db:e7:37:47:95:77:38:
a5:5f:f2:46:35:d7:fd:1c:86:15:e5:e9:44:b6:d4:
57:ac:ab:da:d2:56:81:45:7e:03:16:9f:cf:1d:69:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A6:C0:08:81:E9:5E:17:87:86:AD:28:7B:4D:4B:B5:80:BA:0A:CF
X509v3 Authority Key Identifier:
keyid:59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/GqbACIHpXheHhq0oe01LtYC6Cs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.166.0/24
Signature Algorithm: sha256WithRSAEncryption
26:24:e4:a6:48:6e:45:bd:b8:9e:15:c3:57:35:ad:6c:31:4a:
78:ff:85:e3:d0:d0:47:af:6b:c4:b3:6a:35:a3:62:6e:0a:4d:
8a:ca:3a:f0:a5:fe:da:5f:96:cd:6c:56:5d:3b:b3:f6:2b:a2:
24:f6:9b:c0:96:cb:2b:bb:fd:d0:8d:56:9d:39:34:93:e1:ee:
0c:92:ca:66:70:06:70:45:4c:2f:39:63:9f:14:a4:e0:b8:e2:
3a:27:22:90:98:84:f8:7d:7d:b7:eb:56:0e:2d:69:10:10:27:
c7:59:f3:c2:b1:4a:e6:18:ad:f3:56:36:a7:ef:6a:c3:89:bf:
c6:f4:96:5f:40:a6:55:1e:1a:58:39:78:db:08:dd:2c:78:d6:
1e:f3:7b:b6:07:21:d8:02:79:96:c0:68:3b:e9:9f:13:d9:3c:
7b:ad:e2:73:87:43:4d:d9:db:26:51:cc:89:a4:08:b7:19:25:
69:99:c5:f4:12:ba:73:d0:90:94:ad:9e:fc:1e:39:c4:b1:28:
d3:97:6b:93:ae:e4:70:db:0d:ab:94:5b:c9:7f:82:54:1c:eb:
92:77:c4:f7:a3:4a:6e:69:eb:a4:6e:c4:c3:06:5c:13:3f:ea:
d1:2a:be:b3:4c:1f:72:55:9b:c5:d3:6d:27:ff:67:98:4e:9b:
16:59:00:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:08:44 2025 by rpki-client