Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/gZGV3ZpcxwvLV76b2J5Kk7rk7EQ.roa
File: gZGV3ZpcxwvLV76b2J5Kk7rk7EQ.roa (raw, json)
Hash identifier: m5yCtX3uyNg6SubqImYu3dP/93LI/wjUpImYUsUqvhc=
Subject key identifier: 81:91:95:DD:9A:5C:C7:0B:CB:57:BE:9B:D8:9E:4A:93:BA:E4:EC:44
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B26BBDB9928D8083B556FF8890EADA
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/gZGV3ZpcxwvLV76b2J5Kk7rk7EQ.roa
Signing time: Wed 01 Jan 2025 11:48:48 +0000
ROA not before: Wed 01 Jan 2025 11:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207256
IP address blocks: 85.142.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:6b:bd:b9:92:8d:80:83:b5:56:ff:88:90:ea:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=819195dd9a5cc70bcb57be9bd89e4a93bae4ec44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:59:a3:23:a4:1b:f4:fe:1b:b5:c3:1a:d6:
ef:0f:55:98:b0:8a:8b:18:1b:f3:42:33:dc:ae:2c:
e3:eb:e8:09:e6:35:16:6e:e7:56:36:be:32:76:a7:
78:93:64:b7:ca:b3:58:4b:1a:64:61:99:c1:09:5c:
b8:c8:7e:d4:e3:13:8e:7e:ff:1d:30:57:56:dd:e2:
17:9e:68:60:9f:79:c8:6d:1f:c9:80:8e:be:ec:4b:
ac:54:21:73:5a:f5:02:0b:2c:32:ed:1c:b7:db:11:
1c:11:8b:30:e5:94:ff:1b:35:63:35:08:34:91:ca:
93:4a:4f:4d:a1:eb:73:4b:f1:66:87:65:34:2f:ae:
d4:a6:50:69:61:ce:6a:0f:dd:5b:f9:be:a4:7c:7a:
3f:28:db:90:8b:4b:08:49:30:2a:45:65:00:96:fb:
23:74:5a:bb:ca:32:67:4c:79:ac:39:d8:9f:ae:ab:
91:0d:5f:4b:42:cc:26:e8:a6:0a:27:0e:28:51:c1:
83:ed:31:8c:8c:6e:cf:61:79:0c:23:00:d3:4b:c5:
e0:ad:6c:48:43:b7:ca:99:5e:60:d1:7c:b2:79:47:
22:24:cb:f4:81:1d:9d:7d:62:e7:45:29:1c:8b:4a:
bd:da:c9:e3:d3:ef:6e:05:8c:dc:00:ff:f6:5f:e9:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:91:95:DD:9A:5C:C7:0B:CB:57:BE:9B:D8:9E:4A:93:BA:E4:EC:44
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/gZGV3ZpcxwvLV76b2J5Kk7rk7EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.251.0/24
Signature Algorithm: sha256WithRSAEncryption
61:eb:04:60:13:2f:b4:22:84:47:5c:52:9c:a6:6f:79:a1:cd:
88:f6:aa:f6:ba:ca:30:ca:68:4a:3c:6d:04:f6:25:cf:85:5b:
66:9b:c3:e2:04:67:4c:e9:49:28:fc:e7:bc:9a:3c:21:c7:9e:
56:ff:01:bc:05:ab:f8:93:b6:ff:64:8d:0b:94:76:f1:b0:92:
5a:44:00:cb:d3:f2:af:ec:e7:a4:c6:ac:ee:d5:8f:98:18:31:
e7:27:e7:66:1b:95:13:84:e3:32:95:c2:1d:f3:56:3f:4e:11:
86:ae:a3:0d:b2:c1:60:fa:42:ef:6c:55:0d:59:eb:6c:01:f1:
e6:07:89:7c:2b:76:8d:29:f9:f4:7c:c6:ed:22:75:68:73:8c:
8d:eb:3e:43:31:e5:c5:a3:c4:43:65:d6:7e:ba:fa:4a:f4:d7:
2d:39:6d:0c:83:de:10:99:b0:3a:f2:c6:bd:32:15:38:0d:b3:
6b:12:a7:bb:58:43:63:55:7f:e6:12:1a:64:21:99:ea:05:9a:
07:b6:47:c1:4c:32:49:d5:cc:67:94:93:94:49:e6:c3:0c:c5:
a9:8b:de:3c:07:04:3d:ad:e9:c4:55:c0:c9:e1:9a:6c:6b:93:
b3:05:30:4e:42:51:87:3b:7d:aa:13:63:00:ad:ee:a6:3f:04:
7e:1b:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:50:41 2025 by rpki-client