Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa
File: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (raw, json)
Hash identifier: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=
Subject key identifier: 18:F4:6D:A7:9C:4E:91:E2:F9:70:56:CE:70:B6:4B:C3:01:C8:F6:CF
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 0194244494B7E5DE98D73E5197A3560AFF6E
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205447
IP address blocks: 94.240.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:94:b7:e5:de:98:d7:3e:51:97:a3:56:0a:ff:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18f46da79c4e91e2f97056ce70b64bc301c8f6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:68:5d:93:84:0d:68:ea:2a:c0:10:9a:6e:
d5:4f:49:87:c7:d5:70:b3:38:1e:5a:10:bd:78:d8:
e1:35:22:49:87:8a:2f:b0:d0:5a:5f:1a:90:a9:24:
f4:88:76:71:75:83:98:6b:30:89:cc:4b:72:5b:56:
e0:b7:1a:b1:f3:26:46:e8:03:de:5c:60:42:0e:c5:
d6:21:16:56:d1:5b:36:e0:06:5c:b9:04:5b:36:16:
88:db:14:04:e5:82:31:1b:fc:f2:43:2e:c3:d2:90:
83:16:dd:70:c5:03:6d:f7:13:b2:6c:fb:de:0b:91:
81:52:64:d6:6d:7e:8e:91:a8:01:51:f7:71:ee:77:
75:a4:d5:a2:ea:df:5f:58:b8:da:8e:68:34:f3:bf:
07:de:e9:e0:50:00:1e:3b:51:31:8f:97:38:da:36:
1d:5d:07:3e:a8:bd:80:0a:67:35:c4:0b:d9:76:93:
82:54:84:46:60:13:02:07:19:8a:77:6b:13:c9:a8:
95:4d:aa:d7:bf:ba:29:a2:cd:a4:a7:df:44:09:4b:
fc:8c:f4:67:f0:d3:d9:63:52:94:ad:1b:05:e6:37:
aa:40:b0:25:54:36:d0:8c:85:6d:d6:63:d4:5d:96:
4b:bd:81:1d:61:5c:0a:3b:a8:79:e4:27:23:18:3e:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F4:6D:A7:9C:4E:91:E2:F9:70:56:CE:70:B6:4B:C3:01:C8:F6:CF
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.27.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ad:39:af:1b:6d:a2:89:6a:d7:45:41:6d:9c:06:7a:28:82:
f7:01:05:59:b5:72:2f:5f:e6:c1:eb:6e:5e:9f:1b:ec:a3:c9:
7a:30:05:4f:c7:00:8d:14:cc:80:81:19:66:1e:4f:0b:01:05:
62:3c:51:0f:bf:f2:47:6f:90:ae:e3:71:38:0c:84:22:6a:5d:
ee:7c:85:88:f5:d1:55:df:21:e5:5b:1d:24:b9:68:e4:a4:3d:
5d:7b:c1:5b:f5:f9:ab:5c:71:81:ff:47:5b:55:dc:1f:8d:98:
a8:23:8f:84:13:da:bc:e1:50:be:b2:11:93:13:7a:a3:27:a4:
2d:fc:b3:44:4d:4a:d8:35:c0:6a:8c:6d:2c:38:6e:b6:93:36:
59:d6:4e:a7:bb:75:82:87:a7:7e:ba:90:c4:41:9b:38:b2:ed:
1d:ed:07:a0:41:78:d5:94:ea:b0:58:2e:5c:ec:bf:81:5d:e5:
bf:1a:ca:a8:14:8a:1f:40:fc:75:9a:6c:1a:fd:c2:52:2b:f1:
03:c5:12:6d:0e:e1:7a:ae:5d:e5:c7:6a:7c:6d:8e:52:07:ca:
dc:ef:c9:79:b6:35:47:e8:6f:1f:0a:95:e1:66:f3:dc:47:b9:
17:4b:36:28:bd:01:74:d7:85:7c:b5:2f:8e:09:10:a6:77:d6:
e7:d4:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:08 2025 by rpki-client