Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/gWBn1z5wJ573-A_JCrTWoUMVcwU.roa
File: gWBn1z5wJ573-A_JCrTWoUMVcwU.roa (raw, json)
Hash identifier: eRnLQ0R/etEfmVAViRE9PujI2pbJzVSTqcsk+ucvQDM=
Subject key identifier: 81:60:67:D7:3E:70:27:9E:F7:F8:0F:C9:0A:B4:D6:A1:43:15:73:05
Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial: 019422FBA251E776EDD6E8A251D7A43AD1C3
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/gWBn1z5wJ573-A_JCrTWoUMVcwU.roa
Signing time: Wed 01 Jan 2025 17:48:23 +0000
ROA not before: Wed 01 Jan 2025 17:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49619
IP address blocks: 185.252.128.0/22 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a2:51:e7:76:ed:d6:e8:a2:51:d7:a4:3a:d1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=816067d73e70279ef7f80fc90ab4d6a143157305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:76:ed:9b:fc:a8:9f:da:6b:d5:2c:c8:be:9f:
9a:17:37:95:1c:1e:38:5e:cb:38:ad:53:9b:be:ed:
d3:64:ee:b6:75:ad:54:ac:f2:d3:92:61:31:2f:ae:
51:55:52:1f:49:c0:b6:ff:77:35:bc:0a:48:e1:47:
ab:bf:f7:c5:e9:c6:1b:66:79:da:14:6d:41:b8:6f:
2a:2e:61:e2:1a:21:33:2d:ab:77:96:61:4a:2d:ca:
96:18:68:50:9a:fa:60:76:66:96:e5:6d:f6:fc:66:
5d:7c:56:90:7e:56:95:d5:b7:87:4d:25:7d:bf:d4:
94:04:36:71:11:e5:84:3f:01:62:2e:92:15:87:7e:
3d:2b:6f:c1:a9:86:82:ee:e5:59:64:46:c9:e0:9e:
31:16:25:9e:79:71:f5:05:a0:fd:7f:88:0b:c8:af:
57:94:bd:28:35:02:b0:88:9e:4e:67:8c:dd:ae:4e:
df:e8:5b:78:d8:6f:e1:20:fa:b9:fb:8f:d5:b7:20:
0c:8f:11:e6:55:92:b6:b9:55:0b:85:b5:77:a3:ce:
d8:28:e3:50:b5:09:06:6b:68:81:54:31:e8:18:b9:
90:c6:a5:83:14:19:48:1a:6e:7d:aa:22:01:53:bd:
de:cf:dd:b4:97:1d:67:fe:ed:47:79:2d:e6:b8:11:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:60:67:D7:3E:70:27:9E:F7:F8:0F:C9:0A:B4:D6:A1:43:15:73:05
X509v3 Authority Key Identifier:
keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/gWBn1z5wJ573-A_JCrTWoUMVcwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.128.0/22
Signature Algorithm: sha256WithRSAEncryption
31:3e:7a:fb:62:3e:69:07:f2:0d:90:58:3f:fe:96:f1:3c:be:
3a:81:8a:2c:76:da:3a:0c:58:6a:f8:57:3b:69:58:4c:96:b0:
45:01:85:15:3e:73:be:be:c8:65:79:5e:1a:e1:2a:5d:68:4a:
82:21:c2:f6:c5:e9:36:82:e6:44:b9:ac:04:dd:8b:1c:3a:2c:
a2:4f:30:7e:df:fc:0c:cc:f4:e3:8a:0f:a9:b7:16:f9:79:9d:
1b:cd:6d:c5:4a:c5:9e:60:0b:32:fb:b5:b2:31:ff:e9:11:a3:
f0:da:84:3c:41:48:76:8c:ea:25:cd:d9:09:f5:03:9a:38:90:
3c:19:00:f1:eb:aa:14:4c:c6:52:d7:1c:d0:16:53:81:90:fc:
f6:5f:c4:90:8d:56:97:2d:c8:9b:9b:38:ef:a8:68:9d:a6:52:
c3:56:88:6f:9d:75:5e:6f:a7:90:18:f1:59:77:31:9e:66:0d:
9c:28:a1:0b:c4:86:dc:de:a4:e5:14:6f:d4:50:7b:1a:a1:98:
0b:bd:04:95:02:f7:7a:d3:d8:2f:a4:11:5d:d6:cf:e7:f5:2c:
d0:b9:08:03:53:fa:e5:bd:91:88:77:64:37:46:5b:06:38:3a:
14:54:d9:72:b7:46:29:53:2a:10:c0:c8:0e:5c:c7:ea:a2:7f:
a2:fb:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:51:15 2025 by rpki-client