Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/GIkjsAXUOqBrfR8icMDdstxYHT8.roa
File: GIkjsAXUOqBrfR8icMDdstxYHT8.roa (raw, json)
Hash identifier: A3W3v0v+GEkuTCUXdEtyG/Iegv8/6YkqWT1oUSnMlYY=
Subject key identifier: 18:89:23:B0:05:D4:3A:A0:6B:7D:1F:22:70:C0:DD:B2:DC:58:1D:3F
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01947E9A4468E4C78E7937EE530F6F70F5FF
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/GIkjsAXUOqBrfR8icMDdstxYHT8.roa
Signing time: Sun 19 Jan 2025 12:47:06 +0000
ROA not before: Sun 19 Jan 2025 12:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213642
IP address blocks: 46.8.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7e:9a:44:68:e4:c7:8e:79:37:ee:53:0f:6f:70:f5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 19 12:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=188923b005d43aa06b7d1f2270c0ddb2dc581d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:a5:c2:e5:c5:29:70:ae:37:6c:fc:f0:d1:
f3:f3:04:10:dd:d3:bb:6f:f0:4a:bb:eb:d1:1a:98:
a9:a5:fc:23:b0:a2:95:2e:97:91:0e:40:20:6c:3e:
0d:f5:d3:a7:0f:05:d9:89:9a:09:27:02:37:8e:1d:
30:bb:09:00:72:f3:a7:3c:1b:63:12:56:b2:67:98:
2c:5d:d4:e7:84:da:41:38:9e:86:a5:51:27:e2:66:
c2:cf:ba:cf:81:85:8a:e4:ee:70:ee:bb:2f:c0:34:
b8:03:a3:fd:2f:8c:b4:07:36:35:49:da:59:a6:64:
ae:86:7f:75:09:1b:1a:e8:10:d3:43:51:dc:62:52:
ba:d8:4a:6e:3f:95:57:1c:0d:91:41:c6:25:cd:be:
c6:21:a9:a0:f6:ec:6f:72:2a:b7:60:c8:25:a4:1f:
46:1e:aa:4b:a8:87:14:73:25:ec:6c:db:d1:7b:c0:
1f:26:60:d3:12:09:8e:a9:b2:14:90:65:90:e8:8c:
d5:00:69:5c:37:61:f6:df:89:89:83:6f:42:12:35:
9f:2a:d3:fb:ff:db:fc:bb:c3:d0:ed:0f:44:c3:6f:
3d:df:c7:bd:c9:26:a5:29:6c:4b:d3:94:74:63:ee:
0b:b3:54:bd:f5:94:a0:1a:ea:22:9c:bf:98:70:07:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:89:23:B0:05:D4:3A:A0:6B:7D:1F:22:70:C0:DD:B2:DC:58:1D:3F
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/GIkjsAXUOqBrfR8icMDdstxYHT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.96.0/24
Signature Algorithm: sha256WithRSAEncryption
68:df:03:d9:2a:90:9d:e7:2d:e1:ef:4d:78:d0:5e:88:f7:8c:
f3:ea:97:47:e6:13:d5:8b:9f:22:a9:d3:14:57:96:6d:dd:ae:
3c:fa:55:0e:b8:b4:0f:82:f0:1d:32:ac:ea:d7:c2:e5:23:c9:
26:7c:bb:06:38:68:8d:9e:2c:fe:5e:d8:5d:47:9f:99:68:05:
dc:29:1f:84:b1:47:1b:0a:31:ac:fe:12:17:05:2c:9f:20:fc:
e8:3f:44:c7:6f:20:6d:8a:da:13:a7:17:4b:cc:3e:84:0e:1b:
9a:ba:53:4c:0d:54:ce:cf:78:a1:b9:4a:51:49:bc:84:86:f0:
42:97:0d:97:e9:77:8f:e3:3d:ab:6a:c8:bc:8a:06:74:3f:94:
bb:da:bf:3a:0b:06:6e:51:94:8c:25:c1:c7:97:3d:64:bb:a7:
3c:1b:38:55:10:df:13:71:88:be:e8:98:76:e7:c2:67:a2:f0:
5a:20:ea:61:ff:f5:a2:7f:27:ae:f1:ec:bf:9c:0a:85:3e:3c:
55:94:90:01:8b:f4:8d:f9:29:1b:33:3a:67:a3:bc:8b:23:df:
fa:84:01:3c:a3:a6:6f:e8:95:55:c7:33:2b:dd:84:cf:66:e9:
8f:9d:ae:b7:f4:08:67:d9:ee:6c:1c:44:4b:80:56:7a:d3:80:
59:03:04:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:49 2025 by rpki-client