Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/GI5eR-bcyPUXcabh8oF3ym-w-jY.roa
File: GI5eR-bcyPUXcabh8oF3ym-w-jY.roa (raw, json)
Hash identifier: HMe9khM1DXfAv5MN/QlZDROBBZj6X8B6CZKWjkcWcFY=
Subject key identifier: 18:8E:5E:47:E6:DC:C8:F5:17:71:A6:E1:F2:81:77:CA:6F:B0:FA:36
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 019424453383F9624576E4F9E6691241C34D
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/GI5eR-bcyPUXcabh8oF3ym-w-jY.roa
Signing time: Wed 01 Jan 2025 23:48:22 +0000
ROA not before: Wed 01 Jan 2025 23:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43395
IP address blocks: 185.46.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:33:83:f9:62:45:76:e4:f9:e6:69:12:41:c3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Jan 1 23:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=188e5e47e6dcc8f51771a6e1f28177ca6fb0fa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:57:b3:93:37:1b:5e:5a:32:ff:ee:9f:55:86:
6d:a3:6c:38:5d:76:1b:13:09:91:de:9f:0f:05:88:
ff:34:78:f2:a4:f3:6b:eb:4d:5a:e4:d7:61:0a:a8:
32:14:de:ac:d6:d9:54:28:b7:d6:25:2e:b6:a7:74:
26:fd:24:b9:2b:92:d7:c7:b1:60:82:15:54:df:b0:
6a:c9:b7:e4:2a:99:fd:04:e5:53:11:e4:a8:dd:aa:
5d:a4:43:91:6b:1d:b0:59:76:f9:69:35:02:aa:49:
30:ed:90:31:3f:eb:5c:35:c7:99:c4:5e:ca:cc:7e:
e4:2d:45:1e:4b:66:6b:30:43:20:55:af:a9:6c:36:
11:b1:d4:8d:6f:fc:eb:d8:4c:b4:9c:ab:49:69:90:
f0:ca:5e:e3:6f:28:f6:84:b2:85:41:fa:93:05:c6:
56:b9:84:04:e2:52:c2:12:8b:10:95:70:f4:37:41:
6d:f2:f8:81:0d:c0:25:d9:b2:9d:07:ae:65:10:e4:
dd:28:a6:cb:69:d2:00:39:c0:90:f8:4d:49:f0:7a:
17:ff:88:88:3e:33:80:0e:f8:60:af:4c:8e:84:a7:
41:9d:a9:3d:f2:41:f1:49:20:80:b1:31:1c:47:f9:
0c:b1:6c:b0:40:e4:de:83:93:bb:eb:1d:19:fc:87:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8E:5E:47:E6:DC:C8:F5:17:71:A6:E1:F2:81:77:CA:6F:B0:FA:36
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/GI5eR-bcyPUXcabh8oF3ym-w-jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.108.0/22
Signature Algorithm: sha256WithRSAEncryption
80:16:9a:6a:ce:00:c5:cd:16:91:94:ab:37:2b:f4:f3:c6:4c:
6f:1b:43:6d:0b:09:de:fc:a2:59:e6:a4:b5:bc:cd:67:a2:f6:
fb:58:e9:7f:f4:3f:d4:20:96:eb:4e:64:4f:9f:50:27:4e:e9:
f5:20:30:6a:eb:9e:7a:e6:24:f5:5b:2c:01:9e:89:c7:6e:a7:
94:03:cb:f1:22:6a:ef:a3:03:b6:71:d6:9a:1b:81:9a:1e:c3:
83:07:6a:c9:8f:dc:3b:26:ea:98:e8:39:e3:2b:62:2a:13:c9:
32:bc:49:cc:f3:e7:ee:a8:31:67:66:1d:86:69:3f:6b:40:a9:
38:6d:13:f2:67:58:1d:5e:a7:f2:95:77:0f:ac:61:13:0c:05:
05:aa:2a:80:de:f4:db:b1:61:e0:fc:65:63:54:06:87:b8:11:
43:37:2e:24:15:e1:64:89:99:ed:6c:b2:e1:5b:15:0a:a0:d3:
b7:29:04:9a:3d:b3:f6:18:73:c6:e1:60:8b:60:2e:e9:b5:14:
71:82:06:ae:8a:63:00:d9:50:1c:6e:48:23:95:2f:03:f1:d0:
dd:1e:81:c6:b2:c0:e7:69:23:d6:f2:7b:f0:8b:20:ce:59:71:
31:85:96:67:cf:65:0a:ec:c4:ec:5d:1f:66:be:0d:fd:87:37:
0c:9c:0b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:33 2025 by rpki-client