Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/gypdAmauFMVKFDriX-MzaDwTR68.roa
File: gypdAmauFMVKFDriX-MzaDwTR68.roa (raw, json)
Hash identifier: uqz0Cv134yx4/QYTg7iyYbcKj1m3wCYzyJvs3rk7ing=
Subject key identifier: 83:2A:5D:02:66:AE:14:C5:4A:14:3A:E2:5F:E3:33:68:3C:13:47:AF
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B2579707CBDC1FFE84BC9B56356CC5
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/gypdAmauFMVKFDriX-MzaDwTR68.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9162
IP address blocks: 82.179.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:57:97:07:cb:dc:1f:fe:84:bc:9b:56:35:6c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=832a5d0266ae14c54a143ae25fe333683c1347af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:7d:c5:88:7f:4b:92:f6:3a:77:31:a8:05:
6c:a3:63:50:2b:a1:8d:b3:dc:49:c5:9f:2e:f3:7f:
4f:12:34:11:11:8d:a7:f1:6e:db:1a:00:83:1d:ee:
b3:5f:42:55:49:f2:7c:fc:75:fb:07:08:e8:fd:df:
f5:4e:01:8c:6e:f3:6e:18:0d:b8:09:40:2f:71:fc:
78:b0:7e:a9:e5:69:48:e0:f4:3f:2f:79:89:91:4f:
ad:39:31:b8:d5:18:43:46:c5:5d:1c:77:60:b8:2d:
91:d1:87:bb:a0:b1:44:7b:5c:3c:97:f7:3f:57:2d:
49:48:fb:ab:5f:c8:66:81:0b:39:11:a6:26:b1:30:
a6:71:f8:ac:80:a0:20:89:8a:de:bc:00:fb:09:84:
db:35:1e:c9:bb:33:fd:4f:98:e3:3e:51:cc:78:75:
47:a8:1f:4b:15:31:45:22:5a:d6:93:60:34:ac:9e:
8b:b7:9a:f6:e9:93:ad:92:fa:c3:7a:1d:11:46:dd:
4f:fa:e0:73:28:22:65:0c:8a:1c:b2:58:97:53:eb:
82:1f:c5:05:89:a1:9f:65:ba:2d:8c:d3:c0:c6:25:
e2:2c:99:ed:4d:a3:74:bf:41:8d:09:37:a0:07:81:
bc:44:a2:22:37:28:7b:fa:63:4d:8d:82:4f:a5:f8:
ac:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2A:5D:02:66:AE:14:C5:4A:14:3A:E2:5F:E3:33:68:3C:13:47:AF
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/gypdAmauFMVKFDriX-MzaDwTR68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.144.0/20
Signature Algorithm: sha256WithRSAEncryption
61:bd:b9:30:51:22:43:c4:6f:d4:5b:6a:96:e7:45:8a:12:9d:
24:f7:43:e2:19:dc:52:3c:ae:41:1b:5e:71:e2:18:e1:a0:38:
b7:2d:7f:8c:5b:82:f5:93:d6:4f:a3:5e:9d:6e:f0:83:6c:1d:
5d:2c:2b:a8:11:d5:e4:0b:a3:ca:fe:38:94:97:8b:55:ac:81:
2e:c1:10:d9:9c:64:e6:ff:1d:d0:e8:3e:d9:9b:32:5c:51:3b:
09:c0:2a:2a:8e:b7:45:98:e1:f2:31:7b:5f:46:6c:e7:a6:d7:
c6:8d:86:a5:4e:92:3b:a1:f1:ec:3f:27:34:60:95:20:75:40:
55:dd:1e:dd:b3:f3:b4:8c:de:93:cc:71:db:66:b2:fc:f2:71:
95:49:fa:69:c3:61:5c:2e:83:1f:ef:16:a5:f8:c1:eb:47:58:
3f:7d:e8:cc:e4:68:70:ad:de:f7:e0:10:43:88:c9:29:ae:b7:
8c:3c:b3:85:21:b5:54:6a:82:18:d3:42:e2:c3:2e:b7:22:91:
96:3f:af:c5:37:19:10:16:2f:0a:e0:66:08:e5:5d:72:d7:4d:
01:73:38:01:33:27:01:ff:df:33:09:c6:9f:c8:1a:e6:ec:d5:
90:86:b8:70:3c:9c:bc:56:b8:5b:cb:bf:b3:1c:74:e4:39:e7:
af:d8:58:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:30:08 2025 by rpki-client