Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/gQebbEYT275J4Jd89tHKU2ac4sM.roa
File: gQebbEYT275J4Jd89tHKU2ac4sM.roa (raw, json)
Hash identifier: iKbGbenCLGdunx9L03flN4696vAcgVbczlqjT2YbIiI=
Subject key identifier: 81:07:9B:6C:46:13:DB:BE:49:E0:97:7C:F6:D1:CA:53:66:9C:E2:C3
Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial: 0194244557597BCCE7348AE194C1F684BEDA
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/gQebbEYT275J4Jd89tHKU2ac4sM.roa
Signing time: Wed 01 Jan 2025 23:48:31 +0000
ROA not before: Wed 01 Jan 2025 23:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3301
IP address blocks: 83.150.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:57:59:7b:cc:e7:34:8a:e1:94:c1:f6:84:be:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81079b6c4613dbbe49e0977cf6d1ca53669ce2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:d5:d6:ba:79:17:dd:24:10:fe:d1:25:30:
0a:f2:f6:6e:cb:51:4d:8f:5f:fe:e5:31:67:40:b2:
f6:a6:b7:98:c6:f3:1d:c9:f3:f4:0c:26:99:8d:16:
85:84:79:31:70:5c:01:29:15:d7:c9:9c:1c:09:79:
98:99:85:7e:63:16:b0:e3:f3:c7:96:da:50:5b:2a:
ae:c2:ce:3f:03:20:71:0c:32:bc:dc:6a:0f:67:95:
2b:93:b0:23:93:37:2e:24:a8:cf:c2:fb:ee:65:f0:
c0:0c:91:cd:86:27:d3:02:f6:5e:54:60:70:22:56:
9d:49:40:f5:fa:fe:a3:e0:cf:76:d8:af:06:1d:7d:
fa:c1:bb:d2:e3:a3:1a:f2:f7:cd:71:a5:84:dd:a3:
96:bf:16:8a:8c:19:f5:11:b2:a5:71:9f:96:55:4f:
1c:ea:56:59:9b:22:3a:68:82:a4:b5:da:51:76:d9:
c4:00:1d:73:1b:69:aa:d1:c2:08:4e:9b:f9:02:0a:
7e:ac:3b:00:cd:c3:cb:38:08:85:1e:fe:35:e5:e3:
e8:a5:05:bb:9f:f9:78:9b:e6:dc:c0:0f:f8:03:17:
20:8e:41:a3:76:04:d7:23:00:2f:87:48:bd:d7:11:
86:e1:5a:bd:fd:d9:54:4f:59:64:c8:d4:16:23:ba:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:9B:6C:46:13:DB:BE:49:E0:97:7C:F6:D1:CA:53:66:9C:E2:C3
X509v3 Authority Key Identifier:
keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/gQebbEYT275J4Jd89tHKU2ac4sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.176.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:29:df:16:f2:b0:e0:b3:a9:f6:d9:9c:78:8e:3a:c6:e6:6b:
80:13:03:83:4a:72:ca:d8:a5:32:82:77:0a:a5:e1:71:56:47:
aa:de:ce:63:85:90:ff:fe:fb:d2:a8:6e:bb:28:90:10:99:06:
bc:3e:60:89:c9:c5:11:3e:9b:9e:e6:db:6c:d8:9a:c4:89:ea:
57:21:02:cd:aa:df:5c:07:0e:26:ff:1f:1d:97:8c:71:48:e0:
c4:9c:54:6a:cf:d3:cd:ab:1b:57:dc:84:26:5e:ea:f2:d7:2d:
bb:fe:d4:00:5b:58:3a:cc:75:11:53:a6:ec:12:f0:b4:1e:3d:
d1:af:92:06:ae:2d:95:61:47:54:81:3f:4c:fb:04:39:09:0b:
15:79:d6:ad:7e:21:85:20:fb:e1:65:d1:3b:25:6e:83:78:df:
36:dc:bb:b0:90:9f:f6:ec:13:70:47:0c:ad:d6:13:b0:fd:19:
48:9d:66:5a:cc:b5:9f:22:42:5e:21:95:8a:bd:31:32:be:b4:
e3:23:9f:2c:3a:14:e4:e5:e9:b5:1b:f7:66:95:ee:e9:16:57:
09:75:86:07:81:17:06:25:95:22:d0:be:84:7b:66:84:d2:da:
c9:d9:9a:68:e2:97:b3:68:b9:37:8a:a4:bd:42:c3:97:c2:10:
e5:54:79:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:58:28 2025 by rpki-client