Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/GZYeFwr_EjxFupfkHCuHE44i-Z8.roa
File: GZYeFwr_EjxFupfkHCuHE44i-Z8.roa (raw, json)
Hash identifier: /pJZmmG3eMN+VmdP7ZhmWeO1LyfYh7Z1IZDpJE0dX54=
Subject key identifier: 19:96:1E:17:0A:FF:12:3C:45:BA:97:E4:1C:2B:87:13:8E:22:F9:9F
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0194221F34A212A62787D74FE3F907F4413D
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/GZYeFwr_EjxFupfkHCuHE44i-Z8.roa
Signing time: Wed 01 Jan 2025 13:47:37 +0000
ROA not before: Wed 01 Jan 2025 13:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42926
IP address blocks: 46.8.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:34:a2:12:a6:27:87:d7:4f:e3:f9:07:f4:41:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 13:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19961e170aff123c45ba97e41c2b87138e22f99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f5:eb:ed:9d:3a:ee:a5:96:c4:16:fb:b9:58:
f3:89:70:ee:69:c0:04:9f:d3:3b:6f:0b:ef:d5:57:
f8:62:8f:c1:25:22:b1:ab:32:0a:b5:7b:9e:ec:75:
a0:1a:27:f4:05:5d:9c:09:c4:4a:3c:1e:d7:62:7f:
c3:65:99:5c:79:90:ac:4e:b8:e8:b8:a0:2f:09:b3:
2c:78:7f:3a:6e:6c:29:fd:dc:a0:cd:c5:30:42:4e:
24:5e:c0:6f:64:82:27:12:0a:37:5c:f2:ec:59:9c:
87:cc:2d:a2:7f:15:4f:33:d9:0b:16:4d:39:fa:78:
b0:4a:43:be:c5:32:b0:77:6d:c3:b0:f6:d4:41:1f:
46:ab:7d:91:cb:9a:4a:ba:64:41:1c:d9:11:8f:81:
f9:d9:e5:eb:25:1d:4f:4b:7e:17:ba:69:fe:17:0e:
12:38:c2:db:15:32:e0:29:30:ce:fa:03:33:e9:d2:
80:f5:f6:bf:e7:1b:35:a7:88:be:6f:48:c3:5f:52:
fb:22:cc:ee:56:5e:cb:21:51:64:67:88:e1:55:d4:
91:cf:21:e5:48:36:e1:a5:08:61:1b:8f:ac:4a:ed:
3c:6f:11:85:60:e1:85:bb:09:43:56:84:9b:47:62:
9d:ff:c6:93:ec:5e:a4:3e:17:02:fe:27:a8:1c:bc:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:96:1E:17:0A:FF:12:3C:45:BA:97:E4:1C:2B:87:13:8E:22:F9:9F
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/GZYeFwr_EjxFupfkHCuHE44i-Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.194.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ef:09:00:00:6c:78:ad:56:fd:01:49:55:97:c4:6a:0a:74:
ce:7c:37:d2:87:3d:59:dc:69:5d:23:fd:ec:74:af:ec:ad:c8:
eb:b3:83:0d:9b:3e:66:d2:3d:7e:14:0d:c9:78:f8:5d:b0:93:
dd:2e:26:21:8e:1f:45:f6:9b:a4:00:65:48:44:58:e5:25:b2:
de:c1:89:e2:80:4d:6f:c5:f1:81:4a:6f:5c:04:8e:74:28:f9:
7f:ea:19:73:2c:32:4a:79:22:49:04:88:92:c8:0c:e4:1e:68:
be:96:19:6a:4f:9a:c7:43:27:88:cd:30:2e:f0:87:ff:c1:cb:
da:47:d0:87:24:2d:84:07:3e:e2:86:2e:3e:0a:44:e9:d2:34:
e3:cb:4b:8e:9c:f7:4a:53:f0:be:ec:4c:01:b6:73:5e:e5:95:
40:19:67:52:4a:98:e4:5e:88:0c:b3:31:31:7a:ff:74:75:9d:
3c:90:5b:1f:57:aa:80:a7:41:58:ff:41:8b:6b:ee:2a:3e:00:
1c:bc:33:ee:00:74:db:88:b1:3b:e2:75:61:b7:57:05:17:49:
95:63:67:4d:34:70:f5:57:34:a7:be:45:f7:74:89:bd:4d:21:
eb:1b:34:30:5f:37:fe:79:73:79:3c:2d:11:9d:92:90:5b:ba:
09:10:ef:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:33 2025 by rpki-client