Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/GQbUjmjK1Sie8UzB_WEZDlOyx2w.roa
File: GQbUjmjK1Sie8UzB_WEZDlOyx2w.roa (raw, json)
Hash identifier: hLZ6zl0uYK+Tk2xH6iUg3LmMrdrohrcPcPKVl183NTk=
Subject key identifier: 19:06:D4:8E:68:CA:D5:28:9E:F1:4C:C1:FD:61:19:0E:53:B2:C7:6C
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA4113C829631C9EE31430D48E1018
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/GQbUjmjK1Sie8UzB_WEZDlOyx2w.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211412
IP address blocks: 93.115.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:13:c8:29:63:1c:9e:e3:14:30:d4:8e:10:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1906d48e68cad5289ef14cc1fd61190e53b2c76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:7b:77:c2:c2:27:ad:c3:d5:95:5e:94:3e:
6f:d7:4a:d3:1f:d7:c6:b9:e8:d0:99:56:e4:ca:5f:
d2:58:62:74:47:aa:00:d5:3e:17:45:65:27:75:77:
7a:72:4b:cc:b0:e1:cf:56:ac:de:cd:47:a2:7c:2c:
d8:41:42:54:85:b8:3d:6f:fc:71:47:49:fb:1f:45:
13:c2:e6:69:18:66:2b:c4:02:ed:cd:ed:7d:4b:39:
be:02:44:c3:1c:9d:a7:32:bd:63:da:ce:38:47:58:
f6:cb:c1:91:d7:09:e0:e3:15:1f:a9:30:c7:73:c7:
87:28:69:c6:86:04:b4:03:d7:d3:4f:7c:c8:13:b6:
72:a5:3c:fa:4c:7c:2d:3b:5d:39:16:dd:d8:40:7b:
8a:cb:fd:dd:d3:52:b4:f2:e9:fe:ec:e4:45:2a:24:
52:c3:39:8f:4e:86:52:c2:1a:d5:f0:54:e1:44:9e:
cd:c2:26:51:2e:58:4c:4a:21:64:e4:2e:82:76:39:
5f:bf:60:84:f6:e1:fa:50:03:b4:b2:3a:90:20:7d:
90:21:bd:75:d1:40:bd:74:d7:8d:8b:01:0a:b3:f3:
97:ea:54:63:f0:3b:02:76:d4:fa:c5:cb:10:f0:a3:
42:e2:50:f7:3b:61:d6:2b:cc:0a:1f:7f:5e:2a:24:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:06:D4:8E:68:CA:D5:28:9E:F1:4C:C1:FD:61:19:0E:53:B2:C7:6C
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/GQbUjmjK1Sie8UzB_WEZDlOyx2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.42.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2d:4a:31:52:7f:20:3d:2a:23:7a:36:c0:91:d8:37:97:95:
f9:fe:05:a0:f6:a4:2c:43:a7:ef:43:ee:37:fb:d6:c4:c0:f6:
b7:36:29:51:db:c9:0a:5a:e0:84:eb:03:4d:4b:05:04:60:70:
9d:3b:7e:2a:7f:32:a6:c7:24:30:d1:67:3b:81:60:4f:bd:d6:
82:65:c8:89:bb:5f:49:c0:28:25:26:34:c1:3b:da:74:5b:3f:
e3:9c:0f:d4:72:9e:c1:78:f3:54:2a:78:42:69:08:03:bd:a6:
df:c7:1c:a5:22:71:e8:c3:3e:4d:11:dc:cd:c6:d2:33:5c:25:
57:ba:3f:da:3c:d1:fe:a5:fa:4a:dc:2b:6a:a5:15:64:ec:8a:
a7:f8:ba:a9:44:55:db:5a:38:87:41:9b:5f:8e:a8:dc:25:47:
11:25:ae:2e:73:47:d4:9a:d6:01:aa:82:27:58:3b:43:34:b5:
e0:58:55:89:cc:72:6e:0d:da:90:eb:b9:df:eb:c4:b6:5e:de:
0c:dd:5d:65:96:1f:1c:fc:92:ec:c1:6a:aa:a5:6a:bc:75:fb:
92:ab:92:61:c2:85:fc:21:64:d8:a1:20:be:d1:59:ed:e5:55:
fc:a1:24:45:b4:b8:fc:a5:2c:97:ea:fe:94:00:45:27:2c:b1:
6e:d2:23:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:21 2025 by rpki-client