Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa
File: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (raw, json)
Hash identifier: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=
Subject key identifier: 18:2B:CC:A4:58:D3:A3:1E:E7:E4:59:8E:6B:92:20:AD:77:8D:D8:CA
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019482E4E58158A29A0C75D07BF24466A359
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa
Signing time: Mon 20 Jan 2025 08:47:06 +0000
ROA not before: Mon 20 Jan 2025 08:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 212.52.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:e4:e5:81:58:a2:9a:0c:75:d0:7b:f2:44:66:a3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Jan 20 08:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=182bcca458d3a31ee7e4598e6b9220ad778dd8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:27:19:5f:ca:8a:56:75:30:ff:7e:86:6e:
24:fd:13:9a:15:c8:c4:81:d3:81:2a:04:58:de:47:
5c:78:53:b4:82:de:98:8e:1c:a3:23:4a:8e:59:3e:
b6:38:df:d7:a9:d2:19:09:75:b9:32:6f:d7:0d:bc:
f2:20:d6:6d:93:8c:da:6f:9f:85:02:f0:e5:be:98:
21:2d:d7:33:84:b9:3e:2b:89:58:3d:94:c7:57:bc:
51:f0:1e:52:17:67:c2:72:cc:9b:6c:74:db:92:ea:
ca:a7:ac:e0:02:4b:c4:34:d6:4f:5a:de:72:59:15:
ce:08:53:74:02:f1:6c:ea:04:61:a5:92:bb:42:64:
50:29:2e:00:c0:fb:66:a0:6f:89:21:5a:23:8d:c8:
11:5c:5b:17:88:f7:3b:df:12:9b:d5:bd:99:e8:2f:
2d:d0:bd:2a:bf:95:cf:46:3f:98:de:45:56:79:9c:
1d:18:53:5d:79:1d:5d:f2:ae:44:bf:4c:ab:9c:4d:
a2:14:2c:c3:34:93:54:08:54:81:72:42:29:ea:1b:
01:e6:b8:d9:0e:73:25:7f:26:dc:7f:04:14:2e:2f:
7b:fb:2e:6e:3c:8c:a0:53:b5:1e:50:04:4e:cd:c9:
4e:cc:a6:bd:57:e5:59:81:83:b5:c6:05:2a:0d:01:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2B:CC:A4:58:D3:A3:1E:E7:E4:59:8E:6B:92:20:AD:77:8D:D8:CA
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.6.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0a:48:2a:d2:76:2d:78:76:d8:9f:cf:d2:7f:44:8c:c0:25:
a5:b4:84:c7:d7:69:90:4a:17:35:70:42:0c:5b:52:e8:43:84:
fc:dd:13:6f:4e:8a:a5:3c:56:1c:4c:42:8e:79:96:52:11:fd:
ce:d5:e6:09:e3:e1:3d:4b:5d:72:26:e0:ab:3e:26:ac:ef:46:
7a:1b:c8:8f:15:90:69:0d:2a:2a:07:4d:ea:bb:6d:e6:7e:76:
18:72:2b:0d:3e:d0:57:6f:05:83:d9:46:e4:06:ce:95:cf:c1:
eb:45:e4:09:c9:33:00:19:5c:14:64:fd:e3:22:d5:bd:aa:4c:
2c:73:d8:94:50:1f:c0:5e:87:27:32:75:e4:29:ff:5f:8a:9f:
c0:0e:ff:19:6f:29:14:25:91:34:6b:a6:fd:25:7f:d1:fe:29:
2f:69:d8:bc:b9:3e:22:22:41:ed:e7:93:83:4f:96:5b:39:e4:
d3:0f:77:4a:42:78:5a:08:9d:2b:5b:e7:d4:04:42:9f:d7:73:
f1:71:21:12:f5:37:f8:25:b4:6a:52:11:65:d0:f2:3a:5d:da:
d0:18:82:26:f7:db:de:b6:1a:f9:f1:0c:b9:a6:7a:e9:6b:f3:
c0:fe:b6:de:d4:74:25:d0:c3:43:41:6f:fa:4c:c3:83:3d:11:
a3:ce:f6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:04:03 2025 by rpki-client