Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Gd1zQfVjRZXroata2PmP30CuDKM.roa
File: Gd1zQfVjRZXroata2PmP30CuDKM.roa (raw, json)
Hash identifier: RqU8bNatcUu4EwhlGbNuxnTKfPeUMiUCMwmP7NzWfJ4=
Subject key identifier: 19:DD:73:41:F5:63:45:95:EB:A1:AB:5A:D8:F9:8F:DF:40:AE:0C:A3
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA9DEF7143856F0C5F68A404CF564E
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Gd1zQfVjRZXroata2PmP30CuDKM.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60067
IP address blocks: 141.101.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9d:ef:71:43:85:6f:0c:5f:68:a4:04:cf:56:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19dd7341f5634595eba1ab5ad8f98fdf40ae0ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:4b:bb:97:8c:67:d8:d3:48:04:0e:a1:17:
71:81:22:a5:7d:9f:69:b1:95:db:ab:98:f4:b4:8f:
53:4e:b0:f1:c9:f4:f6:dc:cc:0d:4d:44:73:de:46:
0f:ae:4e:83:75:6e:bc:0d:58:c5:71:27:2f:f6:ff:
93:77:aa:a7:df:35:1e:ec:3e:b0:c8:35:c4:03:75:
8c:21:dc:9c:9e:1c:60:c2:71:1c:e5:7d:40:51:88:
7a:8a:9d:c2:91:a0:41:93:35:48:3c:4a:ee:f0:83:
92:f3:af:3b:ab:93:b3:6b:40:a1:fd:61:48:db:60:
6e:b6:79:e3:0e:24:14:d1:7e:af:f3:f8:a4:40:a2:
aa:3b:d6:4b:ea:bf:08:60:8c:2f:9a:30:36:01:41:
bf:53:c9:6d:ad:e3:a2:67:32:99:c3:d2:60:49:cb:
d0:47:8e:18:26:62:f7:23:89:ea:19:ea:7f:74:3b:
5c:19:22:f5:35:13:10:ac:ca:11:07:74:e1:ad:e2:
16:1a:ca:85:40:10:80:ad:ec:b3:d2:a4:b2:b1:e3:
57:72:3f:86:dd:df:4b:f1:e1:59:90:11:4a:a0:b9:
17:71:7a:19:75:7d:7b:25:09:6a:48:99:3b:f8:c3:
3e:0e:84:eb:1d:9f:b1:46:24:db:31:c9:34:ea:07:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DD:73:41:F5:63:45:95:EB:A1:AB:5A:D8:F9:8F:DF:40:AE:0C:A3
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Gd1zQfVjRZXroata2PmP30CuDKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.200.0/24
Signature Algorithm: sha256WithRSAEncryption
48:8e:1f:cd:f5:f9:7d:9c:ce:86:72:0a:2b:48:b2:a4:ea:9c:
45:1e:f1:f8:35:5a:1e:3e:fc:4f:00:63:38:b3:5f:cf:24:54:
39:68:2d:12:27:b6:73:63:98:3b:a1:7f:96:31:61:22:e6:7e:
cc:dd:d1:67:f8:20:0f:a6:0e:36:7f:17:cc:1d:51:78:f2:4f:
7a:a3:e6:db:a1:73:95:8d:52:0f:1d:67:c3:8b:4a:0a:8b:64:
cd:c4:7c:79:06:d7:c8:78:7b:9a:bd:2c:b8:0b:cb:90:cb:e0:
79:a4:3f:5e:8e:ef:de:9f:da:a1:9b:ef:12:8f:c5:ca:f4:71:
b5:1f:25:4f:1b:ce:51:9d:cd:d5:92:d5:16:09:84:13:cd:10:
01:58:25:6e:21:ad:39:1b:78:97:da:a7:e1:e9:54:25:b7:25:
65:4a:09:4e:45:c4:c7:6a:44:ee:3f:3a:ba:88:48:bf:3e:58:
7a:f0:65:a5:1e:b3:af:b8:5d:77:bc:e8:76:4e:ea:30:58:65:
92:c1:6b:37:05:8e:21:5b:2c:26:6e:67:8b:b8:b1:17:e5:48:
07:31:f2:c2:bb:31:3e:ee:1c:dc:f4:a2:3a:1e:13:16:92:23:
ce:98:6b:8b:b7:aa:4d:a5:d3:05:52:0c:ed:b4:9f:6b:12:74:
03:d2:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:08 2025 by rpki-client