Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/xrGACS-1hAxmap4Rb-Oc9S070js.roa
File: xrGACS-1hAxmap4Rb-Oc9S070js.roa (raw, json)
Hash identifier: mptaEeEJPbcTmStEp7RBmFaS5iUHgb9cGp/H5Fm+PGs=
Subject key identifier: C6:B1:80:09:2F:B5:84:0C:66:6A:9E:11:6F:E3:9C:F5:2D:3B:D2:3B
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 01941F8C2512845CF03A9C759839DD3DA47D
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/xrGACS-1hAxmap4Rb-Oc9S070js.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29208
IP address blocks: 193.84.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:25:12:84:5c:f0:3a:9c:75:98:39:dd:3d:a4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6b180092fb5840c666a9e116fe39cf52d3bd23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:22:ad:c3:78:0f:e0:eb:dd:2b:fd:dd:5e:
be:8f:90:f8:75:0e:0f:81:08:b1:90:a1:3c:28:86:
de:46:55:e0:26:4d:21:1d:e7:0c:22:ef:bb:db:b0:
d3:6b:ba:63:d4:0d:60:f0:aa:c0:83:b8:27:a8:8d:
a2:56:65:b1:85:32:e9:67:57:e1:ad:da:dd:e2:c6:
4b:d5:e5:3d:59:48:e6:cf:7d:b6:bf:04:c8:25:4e:
f2:60:3b:93:5b:25:db:79:d7:c5:bf:76:cc:00:57:
35:1a:cb:e6:7e:86:e4:43:c5:cd:c4:b0:b4:58:9f:
33:30:b7:db:74:a6:7d:fa:dd:eb:01:44:69:9e:af:
e1:47:3c:b9:31:7f:bf:fb:d1:c3:be:36:fd:78:94:
6f:f0:f3:b4:63:59:f2:14:2c:dd:ef:9d:45:fe:b5:
43:6b:1b:4f:d4:44:31:ae:4a:59:3b:88:f5:74:98:
f4:00:b9:33:a6:aa:77:8c:60:61:b5:48:39:61:4a:
52:9a:a4:b2:0e:9b:b8:35:22:dc:ea:8d:3f:97:ed:
16:13:46:51:94:75:9c:41:4b:b9:06:7d:b0:69:6b:
fa:10:ce:f8:db:96:a2:d0:17:77:ef:e5:c6:0a:2d:
04:fd:b9:cf:a8:a8:9c:af:75:9b:55:d7:af:9c:d2:
7a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B1:80:09:2F:B5:84:0C:66:6A:9E:11:6F:E3:9C:F5:2D:3B:D2:3B
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/xrGACS-1hAxmap4Rb-Oc9S070js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.68.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f9:12:d8:06:15:72:73:0c:4e:47:37:d2:bf:ca:0e:e3:bb:
eb:58:43:4b:28:32:fc:88:53:46:b2:36:0e:01:53:51:4f:3f:
74:2d:a3:1c:93:04:05:5a:ab:ae:a8:87:6e:0b:c3:a7:48:db:
89:17:29:15:25:d7:fa:42:98:2a:ab:10:ee:4d:8d:99:4b:2e:
56:f5:fe:54:a5:0f:d2:53:7b:f5:58:5e:36:b8:0e:f4:dd:27:
d6:17:2b:a4:6d:e4:0f:d5:82:25:aa:c3:d7:ca:33:73:91:ea:
23:90:ee:98:61:04:b8:75:e3:a2:d8:a5:66:59:94:64:d9:25:
52:72:d7:94:89:5c:b5:80:b3:d8:3a:5c:16:16:3c:60:f2:ed:
7e:e0:9a:a5:b0:ba:de:b7:1c:32:11:5c:71:b2:f7:d1:9f:6b:
d9:97:04:a6:96:25:28:0d:64:13:56:8a:0c:2d:e9:e3:17:39:
03:10:1f:93:a1:cc:cc:5c:d3:94:a8:15:d7:f0:d6:08:92:82:
d3:65:9e:61:8e:be:79:13:9b:ed:a7:9e:19:92:80:34:b9:ed:
fc:59:9d:78:18:d7:dd:6c:1b:f8:81:58:95:d7:6d:51:9e:8b:
09:b2:3f:d8:75:22:70:6e:8d:9f:70:5d:42:96:9a:67:93:5b:
1e:19:c4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:26 2025 by rpki-client