Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/GO5PY0agBoKkma7NteMSdFbX44k.roa
File: GO5PY0agBoKkma7NteMSdFbX44k.roa (raw, json)
Hash identifier: jwM1qR7KbSYH5wU03Z7/YrapkXuYuB0WPqYmk8E3608=
Subject key identifier: 18:EE:4F:63:46:A0:06:82:A4:99:AE:CD:B5:E3:12:74:56:D7:E3:89
Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial: 01941FFAA7B8F5B81EC598F80114F44CED09
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/GO5PY0agBoKkma7NteMSdFbX44k.roa
Signing time: Wed 01 Jan 2025 03:48:28 +0000
ROA not before: Wed 01 Jan 2025 03:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 193.5.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a7:b8:f5:b8:1e:c5:98:f8:01:14:f4:4c:ed:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18ee4f6346a00682a499aecdb5e3127456d7e389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:77:60:8c:9f:56:45:9b:7d:40:d8:95:c0:
3d:7f:bc:a2:eb:12:60:42:99:85:fe:87:b1:e7:8e:
e2:d8:ae:66:ee:41:4a:07:c4:a1:85:c7:a5:36:6d:
ff:dd:32:d8:e9:4c:83:89:5a:b2:7f:cb:3a:1c:1d:
45:e2:9f:d7:01:2f:f3:f0:73:81:6b:a3:e9:d4:06:
cc:cd:d3:01:54:fb:67:09:28:55:1e:34:ae:eb:7b:
f3:81:fd:52:9c:28:4f:df:d2:67:e6:3a:6a:ce:fd:
18:fa:72:a6:96:bb:48:b6:c0:de:00:50:85:0b:58:
95:16:47:64:d1:c6:cd:cf:fa:77:73:0a:44:c0:af:
80:5f:e7:e3:7d:b4:59:39:f9:71:bc:24:cc:46:2b:
e7:d1:37:25:54:e6:b9:29:1b:c1:f7:35:da:6e:a8:
ad:33:13:7e:c9:64:25:75:bb:fa:7e:30:36:83:0a:
2f:79:e2:e0:b0:ef:7c:65:88:a8:9c:3b:47:7c:94:
70:91:6a:c2:f2:d3:0b:53:1b:7f:9d:ca:2a:b0:cb:
dc:da:c4:b5:32:24:0c:59:7d:51:d9:f9:fa:e5:bb:
eb:6d:11:ef:40:2e:dd:ad:90:2d:2f:65:ae:d0:49:
13:06:71:f8:cb:0f:c9:c1:a6:1a:d0:fd:1f:5d:1c:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EE:4F:63:46:A0:06:82:A4:99:AE:CD:B5:E3:12:74:56:D7:E3:89
X509v3 Authority Key Identifier:
keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/GO5PY0agBoKkma7NteMSdFbX44k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.56.0/23
Signature Algorithm: sha256WithRSAEncryption
18:8e:85:5c:d5:8f:b9:aa:0c:d6:10:09:2a:18:b2:72:0a:1f:
d2:cc:c3:50:8f:ef:4a:6d:42:33:bc:ae:90:54:8d:42:69:ff:
13:a5:49:da:47:5e:ef:28:9e:2b:c5:41:83:e3:e9:f4:82:e0:
1e:39:9e:b6:ca:c2:5f:b1:81:13:53:aa:e9:f3:bc:fb:4a:d3:
8b:1c:20:f6:dd:02:4d:e7:94:bc:8a:13:f6:aa:8e:9a:c3:0c:
fb:be:1c:c5:c7:a0:c4:35:8c:c9:e6:49:84:45:57:e8:ae:b2:
c5:14:b3:fe:f3:9e:41:f0:27:77:42:6e:76:0e:1c:83:30:50:
57:e6:c5:81:af:d6:4d:d0:cd:6b:ff:b0:f1:3d:ac:a8:f4:3f:
01:d2:96:11:7b:66:db:78:e9:dc:51:9e:ea:35:13:19:04:c4:
e4:97:45:c6:7f:7f:00:e5:a0:7c:00:49:62:b9:dc:2b:bf:6b:
f7:a3:ca:92:8a:29:8c:b8:b1:a8:f2:84:53:08:be:3a:10:28:
d8:d3:68:26:7e:2b:4c:03:82:89:02:64:b5:ed:b4:10:c0:46:
b7:af:22:3c:19:a9:2b:99:69:0a:41:a0:51:e7:75:7c:ed:3e:
6e:2d:bf:95:ca:39:66:85:ec:44:28:51:cb:0a:e3:60:26:82:
f2:83:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:20 2025 by rpki-client