Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/G7UCO8Vqg1runszmtQBQmkn8DqY.roa
File: G7UCO8Vqg1runszmtQBQmkn8DqY.roa (raw, json)
Hash identifier: 5UbSXfgLxbMjgxcmGz7miCGa9V5+dL7nrdVkUhcTIyw=
Subject key identifier: 1B:B5:02:3B:C5:6A:83:5A:EE:9E:CC:E6:B5:00:50:9A:49:FC:0E:A6
Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial: 0194258EFAD23F79AFB1FE502AAD336C86AB
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/G7UCO8Vqg1runszmtQBQmkn8DqY.roa
Signing time: Thu 02 Jan 2025 05:48:34 +0000
ROA not before: Thu 02 Jan 2025 05:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 185.48.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fa:d2:3f:79:af:b1:fe:50:2a:ad:33:6c:86:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Validity
Not Before: Jan 2 05:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bb5023bc56a835aee9ecce6b500509a49fc0ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:22:ff:5e:6c:c0:8c:f5:ea:33:64:c0:36:
98:bd:26:3e:4a:66:25:ac:d9:c3:d4:0e:8f:d4:91:
b1:21:22:62:bd:0d:bc:70:de:52:c1:e6:41:d7:c4:
db:5f:b5:69:f3:1d:77:c6:98:f9:a6:f1:b9:d2:2e:
60:64:cd:c9:4c:fb:9e:b4:04:73:1d:e5:65:ff:29:
80:85:51:a2:96:27:a5:ce:79:d9:7b:48:21:c2:20:
5d:ba:71:e2:8b:bc:66:1e:b4:bd:e2:b7:e5:b8:53:
67:f4:54:5e:a5:d0:a7:c5:b2:64:73:fc:66:0d:bb:
9c:0f:0e:84:11:63:af:d0:45:f5:06:bc:f5:43:a9:
53:c5:8c:86:c6:cb:65:2d:82:e9:02:53:09:f0:1b:
be:ce:94:e1:63:d2:04:83:71:b8:86:4e:e2:5c:33:
9e:02:b1:e3:02:a5:03:40:bc:d6:54:94:4f:ba:e0:
a5:1d:fb:b2:83:8e:a6:5e:64:22:71:88:fb:4d:ee:
35:03:d7:e0:92:0e:6b:f6:e2:ed:b2:1f:98:12:90:
c4:c6:ce:79:b1:4b:12:56:6c:57:7d:cb:b0:a5:cf:
a2:93:e0:2b:1a:ea:92:21:21:36:9e:52:8c:b1:e0:
93:06:7e:e0:c5:16:48:9b:1e:eb:c3:81:11:2d:76:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B5:02:3B:C5:6A:83:5A:EE:9E:CC:E6:B5:00:50:9A:49:FC:0E:A6
X509v3 Authority Key Identifier:
keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/G7UCO8Vqg1runszmtQBQmkn8DqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:92:e2:0b:5c:81:93:9c:e8:f0:c1:7a:2c:53:2a:98:17:e0:
e6:46:50:fd:ca:5f:58:39:e2:7d:32:5b:95:8b:b4:f6:cd:93:
20:b6:db:a8:4c:6a:5b:15:ce:a1:cb:6b:ba:31:c0:d2:12:dc:
80:ef:1f:05:a2:29:f4:d9:7e:4b:6f:55:47:5c:6f:32:77:3c:
3f:ad:2c:c9:5d:26:f4:02:59:8a:7f:2f:3e:c3:94:d0:6b:2a:
01:51:e3:01:06:be:f0:4c:80:74:63:94:1e:d3:73:09:d3:cd:
6b:6b:35:3e:e6:d0:9b:11:bf:2c:97:65:8b:a7:49:78:3d:70:
ff:c2:20:37:5d:22:58:3e:69:a5:62:74:e5:1b:a1:52:63:9c:
18:dc:6f:b1:00:bc:77:10:0d:47:e4:f0:e0:07:14:a9:1f:95:
26:3c:a0:d8:aa:41:c0:26:43:be:38:a6:ab:e9:b8:01:11:d1:
5a:d1:c7:ce:bf:4b:65:72:ce:3a:48:fb:d2:cc:0f:ea:44:c3:
10:34:4c:e4:5d:00:2d:cb:21:d4:c8:47:bd:e8:78:7b:78:7d:
ce:29:4b:16:df:eb:71:95:a1:a0:3f:18:ab:dc:9d:0c:79:39:
12:1e:a8:2e:6e:32:17:b2:64:f2:e2:84:be:6c:1f:f4:17:cc:
b5:5f:d0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:29 2025 by rpki-client