Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GvxJo5JcmXFawW2v5xSvVBE-NPo.roa
File: GvxJo5JcmXFawW2v5xSvVBE-NPo.roa (raw, json)
Hash identifier: wkL9GYNIjiT9nWMVZt7t3wpMSxO0hv6sxLIs0HTGaag=
Subject key identifier: 1A:FC:49:A3:92:5C:99:71:5A:C1:6D:AF:E7:14:AF:54:11:3E:34:FA
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01946393B3A65DF8F5D5F1F6592D3DD7CD3C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GvxJo5JcmXFawW2v5xSvVBE-NPo.roa
Signing time: Tue 14 Jan 2025 06:50:11 +0000
ROA not before: Tue 14 Jan 2025 06:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 45.130.140.0/24 maxlen: 24
2a0f:f40::/32 maxlen: 48
2a0f:f41::/32 maxlen: 48
2a0f:f43::/32 maxlen: 48
2a0f:f45::/32 maxlen: 48
2a0f:f46::/32 maxlen: 48
2a0f:e386::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:63:93:b3:a6:5d:f8:f5:d5:f1:f6:59:2d:3d:d7:cd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 14 06:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1afc49a3925c99715ac16dafe714af54113e34fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:e6:07:21:92:42:43:8c:9d:7e:9b:99:5a:
ea:46:1c:a2:93:7c:3e:28:7d:e2:d9:d1:ac:31:87:
bc:16:35:5a:a3:17:08:d9:6a:a6:07:4b:50:77:0c:
07:c9:6d:c9:7a:40:7d:4b:9a:64:38:dc:e3:b4:02:
5a:07:10:01:55:1c:f6:e5:a6:59:37:1b:5a:f6:3c:
97:61:18:7a:87:79:3a:ac:0a:79:ba:58:ab:23:1c:
58:df:51:e0:a3:49:12:29:ad:d6:21:e2:fc:99:48:
3a:8e:dc:fc:a8:f0:29:9b:e6:19:fa:bc:d0:b7:29:
b7:57:4d:af:a2:e2:6d:0a:ee:9d:8f:95:f0:cf:3c:
a7:10:1c:15:fc:f2:e0:c1:2f:a2:14:46:98:7a:70:
c0:aa:25:de:9e:d3:42:6c:30:15:74:36:ae:c5:e2:
f1:6b:33:92:46:44:69:07:b6:22:a9:83:7f:1a:04:
40:07:61:e9:5f:28:77:90:60:4f:e0:32:d3:67:f3:
6e:7b:1f:fb:df:d2:47:b1:66:60:85:3f:67:65:36:
7d:3c:db:75:0f:1a:46:46:2d:2c:12:16:92:28:80:
cf:a0:de:94:ff:d6:52:9e:cd:7b:63:42:9a:c1:e1:
c9:f4:fe:d7:29:08:39:e6:40:ea:ed:09:36:d7:97:
d6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FC:49:A3:92:5C:99:71:5A:C1:6D:AF:E7:14:AF:54:11:3E:34:FA
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GvxJo5JcmXFawW2v5xSvVBE-NPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.140.0/24
IPv6:
2a0f:f40::/31
2a0f:f43::/32
2a0f:f45::-2a0f:f46:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e386::/32
Signature Algorithm: sha256WithRSAEncryption
a2:9c:94:78:f6:7a:76:44:41:2b:3b:ac:28:2d:d9:4c:d2:34:
6c:27:63:dd:63:13:42:03:ba:cb:46:d7:f2:fb:d0:4f:dd:d0:
eb:c3:44:90:68:d5:00:1f:02:fb:61:31:95:fe:61:a3:83:9f:
f2:c3:2a:a3:1e:c6:99:18:05:78:4f:14:d2:8b:53:61:9f:60:
bf:95:62:5a:22:99:2d:ad:1e:6e:41:9c:29:89:e7:c7:90:2f:
8e:d6:36:fd:1a:44:43:28:fc:7d:3f:18:b8:82:f0:4a:73:c8:
ae:b3:14:d1:46:40:06:7c:4c:a7:0c:a3:54:57:77:8c:bf:26:
4f:b5:78:50:e5:cd:1f:48:30:d9:19:59:12:50:7d:27:ab:da:
4e:f2:2b:8b:8e:80:b0:a0:cd:56:df:ea:82:5c:3a:fb:2e:57:
f6:29:c6:8b:32:47:3a:34:f5:f8:5f:a5:5a:dd:46:fc:9f:86:
64:41:24:08:dd:15:bf:dc:0b:69:b5:a1:75:21:70:04:bc:a7:
64:92:c9:67:e8:c4:f6:29:5c:67:57:ae:4b:98:47:80:fa:cd:
fa:56:e5:39:1a:e9:fd:b9:4a:ce:90:75:ff:6a:02:68:7a:9f:
f4:24:d1:ac:96:69:4b:d8:6a:02:ff:a8:55:9c:02:e3:b3:eb:
f2:08:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:45:12 2025 by rpki-client