Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/GRjGVnhDoWbQf18vA-j6jPrf8bk.roa
File: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (raw, json)
Hash identifier: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=
Subject key identifier: 19:18:C6:56:78:43:A1:66:D0:7F:5F:2F:03:E8:FA:8C:FA:DF:F1:B9
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 0194266BF11A2D5C3DE2EDE953AD9E387F13
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/GRjGVnhDoWbQf18vA-j6jPrf8bk.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.1.164.0/24 maxlen: 24
194.1.165.0/24 maxlen: 24
194.1.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f1:1a:2d:5c:3d:e2:ed:e9:53:ad:9e:38:7f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1918c6567843a166d07f5f2f03e8fa8cfadff1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:6a:69:48:d6:5b:b0:f1:68:9f:9c:2e:4b:
6e:9e:ca:ad:75:3b:d9:33:36:cf:b0:5b:81:1f:32:
3c:10:4f:0c:b3:73:9a:32:6e:1a:6e:b5:fa:e5:82:
b4:45:c5:40:e2:ea:6c:43:e3:a2:c1:90:7a:67:af:
ca:ef:0f:7e:3b:86:3b:b2:38:71:5e:e7:b8:c9:e1:
ed:23:37:c5:d9:91:9d:df:af:e0:53:a3:43:32:73:
1d:99:2e:88:da:6f:81:9d:b2:4e:4c:7f:dc:f6:f2:
f9:53:a0:aa:31:a1:24:e2:2f:13:fc:7e:90:2e:81:
c6:d3:3d:d6:ec:d7:20:78:01:48:b6:9f:12:ec:2d:
e7:3d:a7:63:26:18:ad:f3:09:98:45:60:3a:7a:ac:
af:88:c3:34:21:3e:57:71:8e:dd:a2:87:15:43:58:
2a:96:db:dd:58:96:24:39:10:82:c8:2e:45:53:2f:
b2:d8:9a:40:12:07:34:5f:4b:a3:fe:28:14:f0:66:
24:92:68:26:06:a4:b8:78:cb:0e:d5:d5:44:ce:ac:
4e:07:18:51:a4:56:01:5d:8c:d7:c9:ba:b6:ce:7b:
9b:31:91:36:25:8b:46:37:6e:40:b5:20:fd:1d:ee:
9c:5d:75:bb:12:be:97:d4:30:18:da:2f:7e:c2:63:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:18:C6:56:78:43:A1:66:D0:7F:5F:2F:03:E8:FA:8C:FA:DF:F1:B9
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/GRjGVnhDoWbQf18vA-j6jPrf8bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.164.0-194.1.166.255
Signature Algorithm: sha256WithRSAEncryption
15:e1:fc:ac:b9:5b:7d:8c:24:33:ca:af:a9:12:d1:d3:ae:fe:
9f:92:42:19:68:9a:26:4e:a6:69:1d:c9:84:20:dc:22:ab:7c:
69:4a:8e:15:3a:d2:ec:5b:98:fc:e3:1d:87:e8:19:b8:7a:3f:
5f:83:fc:45:48:74:5b:73:29:ac:74:d9:52:20:e2:fb:fd:2f:
af:6c:c5:f9:1d:17:d7:67:f5:5d:03:48:00:e5:9a:82:0b:ab:
50:e5:0b:f3:33:1a:a3:1e:c5:60:0e:a0:de:ee:d6:4e:31:6f:
65:d3:05:5d:81:21:92:ef:6a:21:59:8c:68:4b:1a:47:fb:40:
dd:35:cf:a3:48:18:ff:f5:97:a2:5e:bd:73:7d:b7:37:ae:1c:
09:b8:98:6d:30:0d:06:0f:00:23:78:8d:9c:49:97:b7:b3:cb:
fd:df:40:ad:4a:57:8c:9e:33:34:8a:38:a3:51:53:40:a5:a7:
e6:69:18:16:f4:02:81:95:23:17:91:f3:77:e9:db:df:9f:a7:
46:c2:b8:3f:f0:cf:12:7f:3f:62:77:24:d4:57:59:60:39:f9:
02:1c:39:1b:18:6c:55:42:29:86:48:f8:0a:1a:75:25:f8:96:
00:cf:30:55:ab:2e:1c:4c:70:a2:03:ac:a8:49:dd:80:b8:c7:
05:78:ac:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:25 2025 by rpki-client