Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/gvsVSFz03ym6x4GX1RIpPiUYpbE.roa
File: gvsVSFz03ym6x4GX1RIpPiUYpbE.roa (raw, json)
Hash identifier: qMyunpUmf/QPIAP0ujJIHQg80YhQYSCuTZCFegCEJUA=
Subject key identifier: 82:FB:15:48:5C:F4:DF:29:BA:C7:81:97:D5:12:29:3E:25:18:A5:B1
Certificate issuer: /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Certificate serial: 01941F8C340AEC24F719EF32A985C36C6B8A
Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/gvsVSFz03ym6x4GX1RIpPiUYpbE.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6696
IP address blocks: 194.1.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:34:0a:ec:24:f7:19:ef:32:a9:85:c3:6c:6b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82fb15485cf4df29bac78197d512293e2518a5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:16:80:65:70:c5:47:85:81:ee:e8:c2:5b:
64:b9:a3:87:3d:33:66:c6:ac:69:0b:c8:91:55:10:
16:a9:4f:6b:0c:d2:ec:8b:4f:98:a6:17:18:3e:2e:
ac:d4:8f:7a:ac:f0:98:9b:45:7a:75:a7:4f:99:04:
a5:8e:1c:06:b4:4c:40:bd:10:19:b8:f3:37:d5:ab:
d9:f7:58:b4:cc:20:a2:7c:48:a8:99:54:cd:8f:63:
12:3c:27:21:c3:05:b3:74:cd:39:9b:e4:49:77:71:
32:5d:a0:5e:a4:f8:c2:ea:ff:50:4d:7b:6a:62:f9:
4c:cd:5f:5b:62:2b:10:f2:68:8a:50:11:e7:5b:49:
38:18:8e:43:75:56:3d:f1:45:16:02:d4:26:06:8c:
d2:76:db:be:a4:ca:e1:95:57:67:7b:88:ae:c5:07:
bc:49:ad:ff:f4:e9:b4:af:57:87:6b:ec:a0:19:3f:
39:ac:a7:26:7e:de:51:ab:19:c2:e1:eb:24:c5:a3:
c7:72:ac:e2:1d:40:6e:ab:ae:fc:9c:e9:e1:99:2a:
43:df:d1:99:57:93:e4:f8:9a:3f:58:ae:0d:f7:24:
b6:17:06:d0:79:7a:ce:18:d1:5c:35:0f:5f:c1:f5:
ba:7a:0b:fd:87:69:de:50:7c:f7:8a:a7:51:aa:ec:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FB:15:48:5C:F4:DF:29:BA:C7:81:97:D5:12:29:3E:25:18:A5:B1
X509v3 Authority Key Identifier:
keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/gvsVSFz03ym6x4GX1RIpPiUYpbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.205.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ef:e0:cf:5d:d0:b9:16:ff:a3:9c:91:0a:1f:4e:9f:55:86:
29:00:1f:41:39:75:1a:d6:0d:c3:ee:2a:b9:8e:d4:ad:09:dd:
b1:72:c8:3a:c7:af:73:14:1f:41:fa:d9:5d:72:8d:63:72:81:
de:44:b6:08:06:30:91:e0:41:8c:c0:94:7d:b8:6c:69:14:ba:
36:9c:8e:1d:fd:6d:14:6b:39:dc:ce:e7:f1:f3:59:ab:d4:a8:
39:0a:4a:54:8d:bb:8c:52:a4:d0:f9:f6:b7:3f:76:a9:21:34:
10:88:dc:6e:09:a9:06:f0:5b:4c:27:f7:7e:06:43:43:53:b3:
88:4c:c5:fd:13:a6:ec:5b:99:c9:2c:e3:0a:c2:45:6e:db:21:
cc:1e:79:86:41:0e:8f:3a:20:1c:82:ee:51:26:59:c9:eb:6b:
07:32:ae:fc:a1:0e:f7:29:e8:f3:cb:c2:f1:e8:00:1f:3f:42:
1e:6f:f8:db:a8:92:4a:c3:ef:ab:6d:4c:29:16:e6:20:b4:33:
af:50:f2:d4:4a:d3:85:d0:5d:44:04:f4:99:4b:45:a6:b4:8e:
4c:4a:8e:e7:9a:e1:3d:bb:40:84:c2:16:9e:67:bc:7d:63:10:
bd:55:90:63:ad:e0:4d:5e:d5:f7:66:3a:a9:cc:e9:f0:2d:1d:
0b:ed:c2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:49:27 2025 by rpki-client