Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/gLbYx573_mCaGUlXxiWajg-EMEY.roa
File: gLbYx573_mCaGUlXxiWajg-EMEY.roa (raw, json)
Hash identifier: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=
Subject key identifier: 80:B6:D8:C7:9E:F7:FE:60:9A:19:49:57:C6:25:9A:8E:0F:84:30:46
Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial: 0194221F9657C779336D65BDFA414ABFDC4B
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/gLbYx573_mCaGUlXxiWajg-EMEY.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200354
IP address blocks: 194.107.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:96:57:c7:79:33:6d:65:bd:fa:41:4a:bf:dc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80b6d8c79ef7fe609a194957c6259a8e0f843046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:92:92:c4:9a:3c:e4:74:66:fa:ba:83:ad:
ed:01:5c:b1:35:f2:9c:a7:6b:e1:4a:a9:ac:f5:a7:
27:f0:86:2f:0c:77:d5:34:11:dd:d2:31:2e:d0:34:
bd:e9:1a:0d:c7:55:70:0d:6b:2a:18:e5:0f:c7:49:
89:49:39:43:33:a0:e4:91:b1:29:51:31:e7:fc:6c:
2d:9a:67:43:2a:e8:bd:cc:cc:12:e1:ef:f6:33:58:
c1:91:8f:b3:6b:fa:5f:88:e0:38:63:48:02:40:20:
00:e0:59:50:88:d5:25:dc:5c:df:dd:cf:4e:0a:11:
a3:1d:0e:2d:41:36:79:63:a0:a4:6c:4a:7e:cf:f9:
80:9f:9c:69:cc:3a:b0:3c:1c:41:da:09:51:c3:7d:
dc:94:df:74:95:ec:f3:10:3f:d9:3e:42:02:40:c9:
25:bd:fd:14:15:21:41:79:69:73:92:04:7c:a6:0b:
e1:75:de:a9:24:c3:79:0e:95:0d:f7:76:65:be:50:
32:a2:97:36:07:b2:67:a0:e5:a7:b5:b4:dc:58:34:
9e:6a:5b:47:63:30:4c:fe:97:bd:1d:a3:2b:a7:c9:
c8:a3:34:d4:a1:4d:db:8b:0a:ef:4c:08:41:92:e3:
4e:37:27:7f:31:25:95:e7:7b:c7:5e:a9:38:c3:f4:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B6:D8:C7:9E:F7:FE:60:9A:19:49:57:C6:25:9A:8E:0F:84:30:46
X509v3 Authority Key Identifier:
keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/gLbYx573_mCaGUlXxiWajg-EMEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.176.0/22
Signature Algorithm: sha256WithRSAEncryption
33:00:0d:5d:99:ad:c1:8c:7a:6c:33:4a:8a:87:40:36:ef:08:
d2:bf:1d:34:84:53:39:fa:7c:a7:d0:2d:79:07:be:ba:94:ba:
5f:54:a0:07:ff:85:25:26:9c:e2:70:fa:91:18:ce:c6:c9:82:
b3:d6:7f:b6:d5:88:20:bf:de:45:0c:bb:25:5a:2d:3e:f8:40:
0f:00:10:40:f8:b3:09:99:d4:5a:b6:c4:11:59:04:a4:a6:d8:
8d:9d:36:8d:f6:30:c7:0d:c7:72:9b:d2:27:fd:5e:93:0c:43:
d4:4f:4f:8e:05:86:b6:60:1e:a6:58:b1:2a:f7:6c:b3:b2:5f:
4a:44:b1:6b:3e:d2:25:23:42:7b:e9:8b:68:54:20:44:ad:53:
26:0b:c3:37:26:cd:bf:4b:b7:68:7f:df:f4:da:02:b6:d8:49:
87:4b:50:dd:e4:ea:2c:88:ee:c3:a5:24:fb:80:7f:5e:01:80:
57:0d:86:13:8e:17:7b:95:a4:92:c5:22:ab:31:d9:d1:72:71:
35:41:79:c5:3d:3d:20:c9:ea:12:ee:3f:94:7c:d2:46:fe:b8:
02:44:8c:64:45:3d:44:bf:5d:f4:50:ad:57:90:b2:41:02:c7:
db:80:f9:e3:fa:9f:2e:c1:72:59:87:cc:0a:58:2a:38:87:82:
b2:6a:1d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:35 2025 by rpki-client