Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/GKke9u-g19ORaszjeZzhH6pAcUM.roa
File: GKke9u-g19ORaszjeZzhH6pAcUM.roa (raw, json)
Hash identifier: xdtY9xo6gnGlpB3ETcBJ3YBkjHIlQqwLDRHWq8GtahI=
Subject key identifier: 18:A9:1E:F6:EF:A0:D7:D3:91:6A:CC:E3:79:9C:E1:1F:AA:40:71:43
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019427485543598659330B3C07DD370B0AC5
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/GKke9u-g19ORaszjeZzhH6pAcUM.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34592
IP address blocks: 194.225.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:55:43:59:86:59:33:0b:3c:07:dd:37:0b:0a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18a91ef6efa0d7d3916acce3799ce11faa407143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:b2:5a:7a:9e:15:4a:c9:91:8e:4d:64:c2:
3a:af:69:ff:4d:db:6d:9f:9b:7b:df:38:0c:7e:0e:
5d:09:9f:2a:33:d9:7c:11:14:75:60:c0:c9:52:b1:
12:b5:c6:fe:4b:9c:ed:4a:69:0c:7d:c8:22:d2:a7:
12:a3:f0:4a:34:f6:dd:8e:e3:c1:e2:78:c4:94:8e:
82:1c:76:c9:12:79:5b:57:7c:bf:87:25:e7:f7:33:
db:bf:bc:40:96:7f:19:f2:ba:01:11:54:1c:03:1d:
72:7b:33:de:e8:da:a7:f6:ff:b3:ea:2e:c2:b4:b7:
f2:53:fb:89:e4:ac:3b:ac:f5:6c:be:d9:fb:7a:63:
6b:73:33:9e:1d:20:a8:d9:71:2a:db:ac:1a:b9:8e:
3f:fc:c8:57:24:f4:8e:18:02:b5:3f:e5:30:0f:90:
3d:f0:09:a2:6e:f2:2b:6d:1a:e0:a8:64:fc:32:e0:
4d:10:9a:ed:a4:dd:a9:c4:9b:04:4d:5f:d8:65:61:
d5:8d:03:c8:92:a5:8b:37:af:9a:a2:d2:6c:da:1b:
8e:48:8e:ce:d2:f7:c8:b5:ae:22:2e:8d:34:5e:72:
d8:f6:8a:c6:e8:7c:b5:b1:7e:b7:59:bd:04:c6:90:
0d:9d:11:03:64:32:d7:8c:40:8c:88:71:bc:af:7a:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A9:1E:F6:EF:A0:D7:D3:91:6A:CC:E3:79:9C:E1:1F:AA:40:71:43
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/GKke9u-g19ORaszjeZzhH6pAcUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.148.0/23
Signature Algorithm: sha256WithRSAEncryption
11:36:01:8d:de:45:d0:74:43:e6:0c:ee:00:f4:c3:a2:88:08:
0a:c6:d3:80:a7:5f:55:76:8f:52:6a:d2:6a:3d:40:86:02:ff:
46:72:76:37:00:3b:2d:8c:ec:8f:6a:03:c2:25:7d:d7:ad:53:
f5:7d:a0:3b:51:e7:67:29:26:22:27:47:10:76:bb:2b:0e:60:
a6:8f:ac:8f:ae:3c:c6:a2:d2:6a:1f:57:fa:9c:28:a4:9e:7c:
ad:d9:c6:04:78:24:b8:8c:5d:4f:27:ec:f3:dd:db:e2:9b:f5:
a8:93:cc:04:d7:63:ba:8d:00:2d:9a:b3:3c:d9:4f:23:e1:70:
99:34:75:d7:c7:fe:72:87:47:a2:8f:b8:07:a5:c2:c8:29:96:
51:e5:84:8d:64:5c:3a:2e:2a:c6:e8:ca:41:ee:73:fd:51:9d:
30:f8:fb:e9:a6:32:a0:d1:6b:45:5e:f2:13:29:04:78:64:1a:
f2:12:a1:1c:fb:48:94:82:66:d3:89:04:4e:f2:00:e8:bc:f3:
4f:98:d7:a2:ae:ca:ea:42:31:f0:2f:46:58:b3:7e:5a:f9:ae:
88:25:ae:c6:d3:a1:f1:1d:5f:cf:f1:1a:5f:2e:3f:81:53:8a:
5d:7c:65:a2:30:f9:1c:9f:57:40:d2:83:d6:ac:e3:49:45:38:
8e:28:5b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:45 2025 by rpki-client