Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/GDKGeKleHqIsNhWuvQIPnj1S5ik.roa
File: GDKGeKleHqIsNhWuvQIPnj1S5ik.roa (raw, json)
Hash identifier: 027frokon21vo4MMUC96Z9OEZpQ3AsbdGWojRJwBl/8=
Subject key identifier: 18:32:86:78:A9:5E:1E:A2:2C:36:15:AE:BD:02:0F:9E:3D:52:E6:29
Certificate issuer: /CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Certificate serial: 019423D6F8F4778D50B0F7278227E61FCD61
Authority key identifier: 20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/GDKGeKleHqIsNhWuvQIPnj1S5ik.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197796
IP address blocks: 91.227.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f8:f4:77:8d:50:b0:f7:27:82:27:e6:1f:cd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18328678a95e1ea22c3615aebd020f9e3d52e629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:62:5c:1e:4f:a6:ab:44:fb:ef:02:c8:7f:
6b:a7:32:51:89:06:b7:a1:2a:2e:40:3e:e4:72:0e:
e8:2b:e2:89:83:e3:8c:81:73:e1:74:fd:44:e3:c6:
17:84:6c:ce:65:b4:e8:53:17:8c:19:8b:cf:42:bf:
ca:c9:7f:fe:bd:80:28:c9:17:b0:e6:4c:9d:eb:e3:
64:02:aa:b3:91:9b:a1:67:63:6a:86:74:3d:7d:78:
19:39:56:07:e0:d2:4f:00:39:c1:3e:83:40:c0:de:
2b:86:06:70:84:83:0e:c6:b8:df:ef:5a:30:db:fd:
8a:19:91:14:3f:e1:92:c4:c1:19:8a:a2:75:d8:d4:
f1:d2:0c:bb:69:c3:5b:ab:8d:18:88:29:df:b1:2e:
30:80:83:75:29:dc:2c:ad:60:43:c5:4d:e5:4e:fd:
eb:00:52:61:05:79:34:54:95:f0:1a:ea:0a:54:58:
f3:1c:34:77:5b:bb:2d:c6:1b:2e:8b:23:18:c6:a8:
34:90:88:58:e4:f7:13:27:86:ff:c0:1f:c4:b7:5f:
18:bf:1c:7b:c3:63:11:2a:63:d9:a5:b2:77:7b:6d:
fb:23:f4:1c:79:c9:90:d0:70:38:cb:15:25:7d:6f:
10:bf:8e:ba:24:7f:cd:b3:30:29:db:f1:ac:9b:84:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:32:86:78:A9:5E:1E:A2:2C:36:15:AE:BD:02:0F:9E:3D:52:E6:29
X509v3 Authority Key Identifier:
keyid:20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/GDKGeKleHqIsNhWuvQIPnj1S5ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.43.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1f:58:79:61:14:ed:3e:0b:bb:70:4a:2e:20:80:dc:8d:0f:
6e:2e:8e:c1:63:3a:e3:f6:be:e3:ff:f0:69:d0:16:d1:c1:49:
b9:f5:e6:89:97:89:4d:79:5f:06:e7:a3:61:56:51:1f:96:bc:
a2:20:e9:42:64:a5:91:40:4d:0d:4d:d5:69:0e:21:93:09:23:
56:30:7b:7f:fd:cc:fe:5c:42:80:70:f7:ba:f8:e4:40:85:ac:
65:cc:b6:53:ae:f6:83:d6:81:ea:1b:7d:e5:39:9f:f3:05:8d:
3c:23:c3:82:ea:00:54:5f:62:43:53:74:96:11:52:7c:86:4f:
c2:ef:85:68:bd:63:73:9e:b3:fd:a1:74:4e:2e:ef:51:87:67:
ae:05:55:31:cc:4f:d8:1e:4d:ef:fe:53:93:6c:59:60:f5:0a:
5b:ba:d7:de:9a:fb:9c:2d:50:f4:3c:f3:3e:ae:50:76:20:77:
b6:e1:11:6c:47:f0:02:9c:d4:ed:0d:d9:d0:18:33:3c:60:e9:
5b:65:d2:d5:84:81:99:43:d6:2a:95:4d:2e:13:0f:60:8a:de:
5d:35:c6:8e:66:05:db:30:de:5f:da:48:c7:78:d1:3b:83:7b:
b1:0f:d0:f6:51:a7:42:1f:64:6d:7f:7a:54:35:92:b9:65:87:
8f:d8:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:38 2025 by rpki-client