Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa
File: GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa (raw, json)
Hash identifier: mWN38f7I4P8OFBnEBE5XW/rXhM8WqbQ5XVGNq6kRS/Y=
Subject key identifier: 1A:FC:5D:35:37:CA:67:C7:0A:E9:3D:04:D6:57:0C:61:1D:3E:12:E8
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 01941FFAAB5011F64173DA9E1D8038DFF5C5
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207311
IP address blocks: 178.17.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ab:50:11:f6:41:73:da:9e:1d:80:38:df:f5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1afc5d3537ca67c70ae93d04d6570c611d3e12e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:83:02:f0:25:56:c3:70:bf:7a:8f:0a:19:
ac:eb:ef:59:10:fc:69:93:91:0f:59:1a:91:4b:3e:
ff:07:ee:b6:5f:46:b7:76:1e:0f:f9:0c:ca:cf:08:
3c:ea:91:88:01:bd:e7:82:fd:5e:ce:40:0d:5c:f8:
2b:74:5d:f5:ae:eb:41:ba:7a:3b:49:00:cf:c5:6f:
8f:da:4e:c6:71:d4:4f:e5:34:41:16:d8:0b:6f:1d:
2a:51:98:07:9f:0f:e6:35:d3:91:59:45:b8:d5:cd:
63:e6:cf:21:72:fb:3f:80:0f:46:f2:03:20:8e:b5:
f1:9b:b9:18:bd:db:df:92:e8:9c:ce:70:54:53:b1:
17:45:9f:91:d8:97:17:91:78:b4:f6:c4:83:92:e6:
4a:69:de:19:96:dc:73:62:db:a5:1d:11:6e:1b:0f:
82:19:3b:0b:09:0c:84:04:b7:07:e4:7f:3d:92:69:
bd:8b:35:9e:87:61:53:e6:65:bc:f5:e0:83:59:79:
7f:b7:93:4c:c9:52:1c:58:b8:cf:f6:75:11:5f:61:
4e:61:d8:5c:d8:48:03:eb:4d:91:66:e7:fe:b6:1b:
30:93:da:65:13:df:d3:a2:6b:98:50:8b:69:16:52:
24:8f:da:0f:66:fe:46:36:4b:21:59:9c:cd:67:c5:
a4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FC:5D:35:37:CA:67:C7:0A:E9:3D:04:D6:57:0C:61:1D:3E:12:E8
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.218.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:83:44:2f:60:23:e8:40:ad:ff:e9:a4:e1:de:06:22:4b:cb:
34:70:f5:f0:7a:51:d7:a1:1d:02:5b:41:cb:f0:5d:26:86:b2:
17:15:a6:3e:d0:1c:32:df:c7:d4:29:23:ec:72:6c:5c:4e:95:
19:c1:c3:e8:8b:29:20:09:15:8c:88:fd:f8:3e:5f:3d:aa:32:
76:2b:16:ec:8c:db:89:4f:9c:f0:64:71:f7:63:8a:49:77:e1:
a4:30:a9:b1:2d:86:89:a7:1a:6d:0e:db:a1:cf:c8:91:fa:d3:
b2:0b:69:30:60:ee:8c:14:d3:e8:3a:ed:df:bd:e6:2b:e5:47:
32:64:94:fa:19:91:33:4d:4f:2a:6c:b6:9a:fe:9f:35:c5:16:
01:1c:98:30:f8:38:b9:f6:aa:dd:51:d7:c0:99:b9:17:55:bb:
35:ef:b5:c7:6f:99:84:e5:30:f0:ae:7c:ec:b9:31:f5:da:e8:
4f:3f:3f:33:50:ed:df:15:6c:37:07:bc:be:08:a1:d0:81:87:
91:3c:8a:79:1b:9b:a5:27:54:7f:a8:94:f6:4e:61:21:fa:f3:
6f:76:ee:6a:77:6f:90:ac:3f:8b:f7:da:4e:bb:fe:96:07:c1:
b2:37:d8:d8:39:0b:11:08:43:e9:af:2f:2a:82:42:6c:55:2c:
f3:0a:bb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:09 2025 by rpki-client