Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/GJVV3SoEfsa0pgtLtiw7hYQqnlY.roa
File: GJVV3SoEfsa0pgtLtiw7hYQqnlY.roa (raw, json)
Hash identifier: X3L+IE/tHK5/79Ef7HYRs6p2vD8nOugSbhs0gMsz8zU=
Subject key identifier: 18:95:55:DD:2A:04:7E:C6:B4:A6:0B:4B:B6:2C:3B:85:84:2A:9E:56
Certificate issuer: /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Certificate serial: 01941FFA213DF9D52825DCB904851406F06C
Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/GJVV3SoEfsa0pgtLtiw7hYQqnlY.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31711
IP address blocks: 193.28.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:21:3d:f9:d5:28:25:dc:b9:04:85:14:06:f0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=189555dd2a047ec6b4a60b4bb62c3b85842a9e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:b8:5f:ed:ae:f1:72:71:80:6b:da:6e:d2:
07:5e:e3:a8:ce:0c:f3:6d:4c:3b:d8:47:10:92:ff:
1e:53:d8:ba:ea:f6:04:dc:ae:aa:b9:fe:09:cf:68:
7d:70:34:bc:6d:97:f8:ad:8e:51:52:b0:09:cb:a1:
a6:ca:d7:5b:08:32:e4:dc:49:bd:38:f2:da:fc:7a:
11:c9:a1:5d:a8:f9:ce:16:9b:69:45:12:bb:e9:05:
dc:f3:6e:a6:34:9d:4f:02:cd:5d:d3:aa:ce:ed:4b:
82:6a:f2:f5:59:e2:33:c0:ae:ac:bb:ef:56:de:51:
4d:6c:46:43:8e:b8:55:7a:b9:ac:98:a2:1e:77:82:
c1:5e:41:2a:93:8d:c7:6b:9c:b8:64:fc:99:36:35:
6a:6d:8d:fe:b8:da:09:ee:dc:04:5d:76:5c:0b:61:
c8:89:36:b6:d9:39:1d:c6:36:90:a5:1a:ea:c9:d0:
d3:0e:3e:b1:0f:75:08:14:be:6b:8d:e0:04:81:e0:
eb:56:1f:2c:18:5a:29:0a:36:17:33:e6:ac:0a:71:
32:9d:0c:7d:fc:1a:ae:07:58:f3:39:1d:a1:78:f3:
09:34:79:d3:15:cb:f5:ec:9c:11:8d:c6:07:44:99:
3e:08:ee:a1:86:c9:ac:8e:fb:a3:1b:f7:00:52:30:
d6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:95:55:DD:2A:04:7E:C6:B4:A6:0B:4B:B6:2C:3B:85:84:2A:9E:56
X509v3 Authority Key Identifier:
keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/GJVV3SoEfsa0pgtLtiw7hYQqnlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.146.0/24
Signature Algorithm: sha256WithRSAEncryption
60:22:2b:3d:b4:10:33:ba:e4:5d:4d:a3:e5:c2:e7:04:52:ed:
40:da:17:16:79:2e:47:3b:1d:b3:30:99:39:9d:d8:bc:bc:6b:
4b:fb:b6:dc:6c:d6:f8:2f:9c:ef:93:51:5b:24:4b:81:1f:39:
d4:83:d6:c4:57:43:62:1d:c8:65:d5:6b:76:49:20:ce:0d:73:
51:26:c0:01:f7:43:9d:c2:3d:a1:87:d7:1b:b3:c7:91:27:d7:
88:49:c4:1e:30:7f:98:97:88:15:06:32:20:e4:ad:5b:0d:96:
7f:9b:fc:e7:16:47:cf:9d:fa:1b:ab:c9:58:c9:55:cc:79:bc:
5c:4e:a2:5b:17:9e:55:a1:d4:e5:cc:1d:fd:d6:2c:ed:90:51:
d4:9e:2b:9b:90:c0:a6:1f:40:e0:48:9e:23:fa:b7:c8:c8:e2:
7f:54:14:3d:83:db:53:1a:f8:6a:a1:e9:ed:ad:e7:d6:d7:df:
96:62:c6:00:0c:6d:42:29:fa:ba:f3:91:7b:ed:2c:7b:fd:19:
e7:74:5e:a9:ec:94:c1:60:f7:1f:18:e7:70:d3:2f:2f:64:fe:
38:9a:fb:9b:da:1e:21:15:7d:26:40:c4:f6:bd:eb:e4:38:bb:
5a:e9:b2:a6:5a:24:bf:3a:62:b0:ce:d3:1b:6b:67:a1:39:68:
fa:24:dc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:22:06 2025 by rpki-client