Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/grKIm7Lo2eZE2vteQMGt4oHjtOE.roa
File: grKIm7Lo2eZE2vteQMGt4oHjtOE.roa (raw, json)
Hash identifier: 2kq2MqRQm4HSGsYIQVdRn5p0QWWgpGXBFjPu/GSW7ak=
Subject key identifier: 82:B2:88:9B:B2:E8:D9:E6:44:DA:FB:5E:40:C1:AD:E2:81:E3:B4:E1
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 019421B20FCE8B116B927CD269BA1EBE5B06
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/grKIm7Lo2eZE2vteQMGt4oHjtOE.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.10.120.0/22 maxlen: 24
2a0e:3d80:beaf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0f:ce:8b:11:6b:92:7c:d2:69:ba:1e:be:5b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82b2889bb2e8d9e644dafb5e40c1ade281e3b4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:04:7d:8c:ad:60:72:c6:23:39:c7:8f:56:
fc:f2:e6:74:27:ad:22:10:09:6d:24:b5:dc:87:7f:
26:81:dc:1e:eb:1c:8f:45:c2:bf:d2:e7:c4:6b:c4:
61:fd:3f:39:2a:dc:e2:b9:d1:0f:05:66:92:5d:ab:
f4:8c:72:1e:69:3a:87:8c:81:c3:b3:10:2a:40:5c:
fd:d0:69:de:7a:e9:1d:4e:7d:85:53:5f:a7:58:4a:
10:c4:d9:8d:80:7c:fa:f0:26:f8:8c:ba:1d:dc:2d:
cc:a1:be:07:22:3f:29:0a:08:8c:fb:2c:e6:3a:c1:
f3:98:5e:af:27:ef:a8:f3:8d:93:fb:79:61:87:31:
2a:00:89:d2:1a:0f:d9:84:d3:35:74:ea:18:7c:98:
08:0b:f1:f3:47:dd:e3:6e:e8:03:80:3d:3c:0d:71:
7c:1b:af:a8:f8:23:0b:24:99:b6:99:12:e4:60:62:
1c:fc:b7:f7:9d:0d:5f:96:ac:2f:fd:3a:21:d9:2a:
d7:46:f8:db:d0:cd:41:b4:cb:56:c9:1c:b1:9c:2c:
71:6d:a3:66:5d:1d:7b:95:93:62:d7:00:6d:4f:9f:
da:af:45:ff:1d:c5:91:ea:de:e6:be:d9:ea:db:c8:
ca:03:88:4a:12:b2:4b:f0:98:71:04:5e:14:bc:52:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B2:88:9B:B2:E8:D9:E6:44:DA:FB:5E:40:C1:AD:E2:81:E3:B4:E1
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/grKIm7Lo2eZE2vteQMGt4oHjtOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.120.0/22
IPv6:
2a0e:3d80:beaf::/48
Signature Algorithm: sha256WithRSAEncryption
92:75:79:c6:d6:4b:8f:83:93:09:21:51:1f:81:1c:b9:4d:fb:
b3:2e:3d:98:57:e7:47:66:71:84:5e:6f:08:a4:56:40:4d:d3:
2c:f4:2e:70:e8:8e:eb:24:dc:fe:a4:bb:8a:56:cc:0e:c8:6b:
36:72:42:dc:34:18:8e:70:dc:57:1c:bf:98:4d:25:58:72:36:
13:5e:5f:d6:b2:89:fa:32:de:10:84:62:40:fd:f3:a8:51:99:
19:b6:3d:6b:c8:e0:a4:60:ed:16:91:d7:07:12:21:e1:bc:a2:
df:d9:b5:73:57:71:88:dc:09:35:21:98:c1:f9:02:5a:d2:52:
ec:b4:b5:dc:37:18:f2:1a:9c:b7:21:bf:9e:47:7c:9c:85:fb:
0c:27:a7:83:35:41:05:bc:b7:32:a1:ac:5b:6f:36:5e:02:5e:
6f:9b:fa:10:3c:d7:db:a5:19:02:18:04:4e:0d:ee:75:9f:d2:
3b:bd:00:1b:0f:dc:fa:f7:97:27:e6:4a:e0:70:87:e3:62:1e:
20:28:c5:62:86:01:2c:3e:3a:b1:bc:7f:c2:3b:36:eb:7d:d3:
30:5e:81:40:c6:39:59:5c:14:50:5b:34:46:b8:cd:8e:bc:71:
4d:49:f3:b8:bf:c8:df:67:02:96:24:18:01:4e:86:f9:34:82:
da:3c:5c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:47 2025 by rpki-client