Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/gz7229OR-UwSeE8Mrmip6_lWRzM.roa
File: gz7229OR-UwSeE8Mrmip6_lWRzM.roa (raw, json)
Hash identifier: HqILwLXjV1tcVlx0sNjeuEAQfPHai/C6EYXvfZ4gHY4=
Subject key identifier: 83:3E:F6:DB:D3:91:F9:4C:12:78:4F:0C:AE:68:A9:EB:F9:56:47:33
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 0194221FA6A501CB5F0C675D589D27979640
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/gz7229OR-UwSeE8Mrmip6_lWRzM.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205007
IP address blocks: 217.196.104.0/24 maxlen: 24
217.196.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a6:a5:01:cb:5f:0c:67:5d:58:9d:27:97:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=833ef6dbd391f94c12784f0cae68a9ebf9564733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:a8:30:43:d0:01:2e:e6:a8:3c:14:0a:56:
f3:04:c9:ee:27:fe:06:84:b0:92:1f:2e:a2:18:0e:
3c:1b:c1:12:91:a1:56:00:98:0c:e9:15:10:45:b9:
9b:f5:42:12:ac:bc:47:95:89:3e:f6:54:e9:2f:f1:
5d:04:0f:28:2f:42:cb:28:1b:18:22:c7:68:1d:a7:
f7:c5:64:a6:47:e5:51:90:aa:76:e5:8c:6d:6e:c9:
16:3d:5f:e5:ab:d0:fe:62:28:c5:a1:48:41:8f:8d:
21:e8:d1:a5:c3:89:0e:38:65:c8:af:cd:8a:d0:dd:
f1:45:08:7d:10:09:34:5e:c3:23:56:3b:0c:43:98:
6b:ae:be:a0:1f:6b:2f:f5:6a:9d:3e:9a:6b:f8:2e:
ca:42:e2:b7:74:80:57:4a:d9:e5:5d:e5:bb:66:0a:
0a:f8:91:f8:8b:de:5b:79:82:1e:01:7f:71:0f:b0:
8d:35:70:da:da:fd:b5:88:24:ab:a6:f8:a4:4e:03:
a9:e6:51:82:9e:8f:4f:c3:d6:da:af:88:9d:b3:a6:
d1:3d:dd:11:da:f8:63:82:c9:ed:f7:19:58:26:5d:
42:c7:22:a5:1a:4a:8e:d5:02:32:f8:00:19:e9:78:
d7:89:8d:07:55:b3:2e:c2:53:32:0b:b2:19:9b:6f:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:F6:DB:D3:91:F9:4C:12:78:4F:0C:AE:68:A9:EB:F9:56:47:33
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/gz7229OR-UwSeE8Mrmip6_lWRzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.104.0/23
Signature Algorithm: sha256WithRSAEncryption
17:28:19:c4:46:9e:c7:4b:e3:5d:68:ca:50:4c:aa:c3:30:06:
27:38:fd:33:3f:fd:3f:9c:9c:a4:20:98:73:f9:ff:94:81:e1:
39:f5:bd:a8:78:67:2a:89:5b:0f:4c:0b:3a:68:4a:b1:af:b0:
7d:3e:1f:31:8c:08:be:53:50:89:88:d2:5b:f6:cc:a1:56:c9:
ec:b8:26:78:3f:92:13:20:2a:73:6e:0d:f1:83:d8:91:17:bb:
91:54:04:6e:6c:bf:9f:e2:60:57:75:cc:b4:02:7e:f0:3e:89:
51:b8:43:61:14:b4:54:eb:bc:43:14:c5:aa:b9:46:33:c9:50:
da:a7:b3:40:a3:f8:c9:58:ef:3b:8b:5c:74:9f:05:58:0f:b6:
b6:76:d6:a3:bf:2b:10:12:c1:04:78:ea:75:3d:58:82:a9:68:
a1:1e:c1:62:46:d8:52:cc:4e:ad:ba:7f:11:56:9e:0e:f7:10:
33:be:47:c8:5e:4c:b6:60:e5:a1:e0:e8:43:10:2e:03:1e:fc:
f1:e3:97:ee:ad:06:53:f5:ef:fe:4e:e8:70:15:36:75:30:e8:
3b:91:12:70:c1:7b:b2:8f:71:41:25:82:5d:93:29:9d:6b:8e:
9b:9d:df:e6:0e:c1:7e:fb:10:f9:98:6f:69:e5:66:6e:e5:50:
86:4f:f3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:37 2025 by rpki-client