Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/GEXA_gDFN_UI9pmu8MV3voaPJJw.roa
File: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (raw, json)
Hash identifier: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=
Subject key identifier: 18:45:C0:FE:00:C5:37:F5:08:F6:99:AE:F0:C5:77:BE:86:8F:24:9C
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 0194266BEC34B81A41AA80EEA6E28935A22D
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/GEXA_gDFN_UI9pmu8MV3voaPJJw.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29217
IP address blocks: 194.18.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ec:34:b8:1a:41:aa:80:ee:a6:e2:89:35:a2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1845c0fe00c537f508f699aef0c577be868f249c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:32:f4:73:c4:7f:75:c4:1c:0b:25:bc:66:
56:cb:2c:94:6d:eb:ef:59:24:c8:14:84:27:dc:d8:
1e:fd:0a:2e:4b:0b:0e:8c:2b:d0:d5:a4:3f:1c:09:
43:0b:17:60:e0:48:61:57:92:27:49:e8:58:71:55:
80:de:81:92:0d:75:0f:f1:2d:4f:4f:80:6a:0c:8c:
e4:9d:7c:ed:7b:23:e4:e1:08:74:2d:e4:68:5e:f1:
38:ec:a1:8a:7d:00:13:46:60:5e:4b:71:f3:2b:21:
68:d9:b2:bb:41:03:c4:dc:14:ff:78:c9:b8:21:e9:
44:ba:54:53:1e:e7:1f:ae:d5:de:ad:0f:ef:1a:82:
29:61:79:64:9e:0c:f0:4d:5e:da:f3:71:77:39:32:
b0:2b:25:b5:93:9d:a9:ab:4b:aa:45:81:e0:63:f1:
17:89:cf:96:90:e6:0d:20:e8:78:e7:5f:c1:88:c1:
e5:95:69:47:9e:6a:10:be:4e:de:9e:29:6f:14:a6:
fd:89:e6:e0:73:82:e5:a6:84:5c:51:c2:cd:5a:8d:
0a:6a:e7:69:24:b9:47:90:16:3b:85:ac:78:0f:a3:
2f:97:4a:84:dd:74:f8:dc:1b:93:17:e9:29:00:6b:
67:81:a8:6b:32:81:43:2e:80:8e:af:90:4e:42:11:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:45:C0:FE:00:C5:37:F5:08:F6:99:AE:F0:C5:77:BE:86:8F:24:9C
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/GEXA_gDFN_UI9pmu8MV3voaPJJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.18.224.0/24
Signature Algorithm: sha256WithRSAEncryption
79:25:e3:4c:09:6c:8f:65:e9:72:80:4b:70:eb:3e:58:8b:80:
b1:ac:02:d9:6e:ac:3c:8a:94:76:92:e2:36:05:77:7d:47:e2:
0b:7e:b1:0c:f5:2b:33:d2:79:f7:f6:23:d8:2a:58:74:ad:aa:
d1:80:f5:3f:4a:2c:79:81:43:18:9b:8a:2c:cc:ef:72:63:45:
7b:b6:88:d7:cf:88:63:e5:62:db:2e:6a:1c:a3:fc:33:0e:79:
42:89:c0:4b:45:7a:5f:5e:75:bc:3f:f7:f1:95:d9:ce:a5:b1:
4f:1f:22:8e:9e:23:a0:43:af:fa:d8:e9:65:e8:f6:ef:78:e2:
a8:36:0b:79:f2:a8:3b:f3:1c:2a:54:97:31:0d:d9:68:45:97:
7c:0d:70:d1:78:82:c0:82:cf:0c:73:f3:c0:e2:f1:68:c3:79:
d1:78:be:b8:29:43:d7:33:7f:f4:20:ef:17:d8:67:58:14:5a:
4d:b6:53:3b:e6:f3:91:8a:7e:57:90:58:82:48:bc:2f:b6:28:
54:a1:d2:51:75:0c:67:86:0e:49:d6:55:60:cc:9d:ef:77:b2:
89:67:72:ef:08:99:1f:2e:d5:19:51:08:08:a0:97:7b:74:a9:
08:ab:65:df:6a:a7:82:9b:6a:ce:83:30:be:9d:07:b2:6d:14:
21:e3:97:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:59 2025 by rpki-client