Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/GHjwnLUndLphHCJPh-qrOX8_zps.roa
File: GHjwnLUndLphHCJPh-qrOX8_zps.roa (raw, json)
Hash identifier: b//UMqi7Agd+yuEn41KzmO7VIfrmzPVe7tc4UxNlKdk=
Subject key identifier: 18:78:F0:9C:B5:27:74:BA:61:1C:22:4F:87:EA:AB:39:7F:3F:CE:9B
Certificate issuer: /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Certificate serial: 0194228E21AD2201CD3BCB68FEC500A67735
Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/GHjwnLUndLphHCJPh-qrOX8_zps.roa
Signing time: Wed 01 Jan 2025 15:48:47 +0000
ROA not before: Wed 01 Jan 2025 15:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211612
IP address blocks: 94.76.40.0/24 maxlen: 24
94.76.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:21:ad:22:01:cd:3b:cb:68:fe:c5:00:a6:77:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Validity
Not Before: Jan 1 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1878f09cb52774ba611c224f87eaab397f3fce9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:94:76:8f:d1:3c:49:94:51:73:ab:f4:dd:
2f:45:85:23:64:e2:fb:97:80:77:df:22:80:74:74:
d5:0c:83:c1:ea:14:84:f0:38:54:25:0a:b2:10:65:
58:3d:74:81:74:c1:5e:28:24:f8:14:46:a7:0e:f1:
45:45:82:99:6d:3e:60:65:84:66:46:fd:e7:17:50:
b0:87:8e:5a:3a:8b:56:f6:61:79:be:e4:f4:d0:f1:
a4:17:e5:cc:bb:36:57:c0:bb:77:a6:f5:fe:8b:0b:
d7:a8:7b:a2:40:79:81:5f:30:9a:4b:0a:c3:b7:87:
4e:29:33:1e:8b:39:84:35:3c:73:74:cd:11:e3:ab:
36:de:d0:6b:fb:38:e4:30:a3:50:2b:17:81:9f:d7:
ad:4f:cb:14:f5:00:1f:b9:9f:04:30:a5:20:4f:34:
c7:4f:5e:6d:e7:87:a4:0d:4e:24:4c:87:34:45:0b:
3a:bb:2a:78:1a:ba:46:12:c3:6f:97:fd:f4:e4:be:
08:5b:21:59:ee:df:f5:cd:65:23:c5:47:18:0a:32:
72:c4:af:90:56:81:39:63:52:67:08:1e:23:18:d8:
65:82:5b:75:60:43:c5:60:de:f6:29:04:a1:5e:70:
32:e9:d7:0b:95:c3:59:3c:e7:b7:c7:4a:08:10:32:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:78:F0:9C:B5:27:74:BA:61:1C:22:4F:87:EA:AB:39:7F:3F:CE:9B
X509v3 Authority Key Identifier:
keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/GHjwnLUndLphHCJPh-qrOX8_zps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.76.40.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:6c:63:57:75:fe:88:b0:cc:b5:7a:be:26:fe:08:6d:74:b4:
6b:3f:1e:73:09:86:19:8e:8a:a3:7c:4b:17:79:49:09:da:9a:
78:09:f0:a1:61:a0:3c:9a:a4:54:6b:fa:37:2a:15:26:d4:dc:
8d:86:95:77:4d:1c:c8:9b:24:39:d9:74:e1:88:58:9c:f3:b1:
f3:7e:38:f1:0b:4d:dd:29:18:c4:57:f3:a0:79:96:a1:e0:77:
65:e7:47:c2:c6:78:97:67:8a:50:53:79:7e:ac:0a:46:e6:bc:
57:67:0f:df:72:42:00:80:23:81:25:6a:98:13:a1:95:b0:7c:
ce:ff:57:ba:32:56:cb:c3:9f:67:14:ba:98:88:cc:a5:97:42:
65:f9:a6:16:58:ab:30:6e:df:64:df:34:40:7e:2a:b1:a9:3e:
4a:0c:37:bf:40:ac:53:c4:c2:f7:2d:79:85:de:23:00:19:2e:
d3:83:ce:a6:76:02:55:78:45:23:fe:53:3f:07:72:95:82:14:
b0:f1:60:3d:46:e5:32:4d:b4:9d:a6:8a:ac:99:e1:12:05:cd:
02:04:86:79:65:f3:5a:76:c4:de:2c:ed:50:7a:06:90:a4:f3:
7e:78:a7:02:d9:2a:e5:a8:78:36:89:d6:29:ea:76:0c:77:29:
05:09:c0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:09:16 2025 by rpki-client