Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/GDxm2zcd8Lnhjk0mCi0fCSfcw18.roa
File: GDxm2zcd8Lnhjk0mCi0fCSfcw18.roa (raw, json)
Hash identifier: 2s+mStFbGwTH5aRw2Ej0hEDuLtxVhcXn931+yvpJuwg=
Subject key identifier: 18:3C:66:DB:37:1D:F0:B9:E1:8E:4D:26:0A:2D:1F:09:27:DC:C3:5F
Certificate issuer: /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Certificate serial: 019422FC31C405B14669C8C8DE9421AD7786
Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/GDxm2zcd8Lnhjk0mCi0fCSfcw18.roa
Signing time: Wed 01 Jan 2025 17:49:00 +0000
ROA not before: Wed 01 Jan 2025 17:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12945
IP address blocks: 91.212.176.0/24 maxlen: 24
194.126.241.0/24 maxlen: 24
2001:67c:2e20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:31:c4:05:b1:46:69:c8:c8:de:94:21:ad:77:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=183c66db371df0b9e18e4d260a2d1f0927dcc35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:ce:0b:86:ba:1b:9e:c8:fd:bf:90:f4:13:
6c:7b:93:f5:a5:4c:62:8f:ec:ec:ab:13:ae:64:c8:
d6:62:a5:19:d4:4f:95:7a:4a:fe:ee:00:0a:93:1b:
0f:6a:37:9b:b1:ce:e8:37:3f:55:66:e9:58:11:2c:
9e:e6:2c:57:1e:dd:06:d2:f7:89:c9:df:fc:89:5e:
2f:4e:10:3d:65:23:ac:10:50:d5:2e:8e:0d:66:48:
07:f5:85:e7:63:6b:5a:f5:23:b5:72:9a:9b:15:d8:
77:cb:d5:70:a0:0f:00:fa:8d:df:1d:92:c9:db:c6:
b8:90:6e:da:ed:5b:d7:dd:56:31:5c:26:c6:83:67:
eb:01:ad:a4:5b:b9:2c:61:29:6b:7b:ca:43:70:c2:
75:7f:a3:9d:d0:23:2d:6f:3a:6a:b5:65:33:ec:5b:
43:38:3f:a6:60:82:e0:86:f8:ec:53:94:d4:4b:86:
fa:ee:b0:e8:3d:49:99:44:cd:1f:da:3f:5b:a9:dd:
e8:e9:28:44:eb:47:38:3d:c1:3f:84:d0:bc:7e:4a:
d1:69:e7:31:6b:40:46:d8:ed:3a:42:eb:a0:d9:76:
71:37:1f:23:12:b8:ff:1e:0a:48:bd:9e:a0:3e:a9:
eb:e3:47:13:da:e3:6e:ec:42:69:66:40:e6:50:f5:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3C:66:DB:37:1D:F0:B9:E1:8E:4D:26:0A:2D:1F:09:27:DC:C3:5F
X509v3 Authority Key Identifier:
keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/GDxm2zcd8Lnhjk0mCi0fCSfcw18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.176.0/24
194.126.241.0/24
IPv6:
2001:67c:2e20::/48
Signature Algorithm: sha256WithRSAEncryption
a9:cc:1b:aa:87:89:de:e8:d8:14:21:0e:7e:e0:49:20:88:2a:
49:51:ca:f4:ae:e2:56:ba:01:6c:1b:a5:16:24:f0:21:3e:28:
24:1c:f7:9b:d8:c5:ab:74:92:22:af:2d:42:36:ca:8f:78:d6:
c2:d3:f7:c2:67:c7:11:ed:90:9e:ee:d9:38:ee:d6:56:cc:fc:
ab:a4:b8:dc:fb:37:0a:ff:f2:e3:4e:d6:7b:1b:20:44:37:e2:
6c:c1:f2:48:27:04:a3:9c:4f:c4:16:af:f5:e0:e1:2e:d8:dc:
08:c0:a0:d5:b6:03:9f:76:54:85:17:37:f0:2a:e4:6a:fa:67:
f4:af:12:dc:48:25:96:9f:48:41:c2:55:c8:9d:fd:91:b8:87:
3a:bf:0a:50:1f:c8:10:74:78:3e:fe:a1:8c:f3:09:23:bc:19:
c6:4c:b1:52:d0:53:10:bd:5a:8d:3a:a2:b4:e3:8b:d5:3d:5a:
1b:8a:0b:4d:c5:3e:3e:6d:5b:75:02:34:e7:8c:9c:df:cb:1f:
25:4f:31:ff:10:c0:79:75:de:fa:31:22:d4:ce:2c:10:bf:51:
fc:a8:75:19:71:d6:43:cb:7a:4f:64:54:53:c4:20:1c:4b:1e:
63:5e:ce:4f:be:a6:b6:83:48:7c:9c:33:1c:a0:95:d8:d1:ce:
68:8d:00:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:36:44 2025 by rpki-client