Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/GcfGZsk2NpZK22JGd8D0XeNiNxw.roa
File: GcfGZsk2NpZK22JGd8D0XeNiNxw.roa (raw, json)
Hash identifier: xyiKkwW0L3cggM56dv+wqjei/Sm7QJIbhPrsiBjuOa4=
Subject key identifier: 19:C7:C6:66:C9:36:36:96:4A:DB:62:46:77:C0:F4:5D:E3:62:37:1C
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 01941F8C0C8C65B3971F81DC1822F6603FD3
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/GcfGZsk2NpZK22JGd8D0XeNiNxw.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209216
IP address blocks: 2.56.76.0/22 maxlen: 22
2a09:d0c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0c:8c:65:b3:97:1f:81:dc:18:22:f6:60:3f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19c7c666c93636964adb624677c0f45de362371c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:aa:cf:7d:e5:fb:e3:d6:d0:be:16:6c:54:
e4:66:c1:ef:1a:0f:b9:c9:d9:82:64:4f:9d:ee:bf:
98:8b:bc:66:3a:38:c4:40:9a:45:27:f3:41:5c:d2:
1a:9b:34:42:a9:72:71:fb:3a:08:6e:6f:12:86:57:
e2:cf:a4:a5:a6:95:0a:c4:41:2b:02:92:59:a6:e3:
ce:3c:7b:48:a5:8b:67:7b:a1:5e:0a:b5:63:3d:1d:
50:47:60:d8:ce:31:60:ed:66:8b:4c:8a:60:44:37:
d4:0f:c3:78:13:ba:0c:bb:bf:f2:ea:d4:51:85:02:
9b:56:64:6f:c0:0d:b5:1d:35:20:e6:76:83:87:0c:
a9:0a:e1:3c:e4:d5:d1:30:c6:f0:7a:f7:c2:8f:df:
ce:15:f9:0d:54:89:2a:07:23:55:0b:c4:bc:03:80:
7d:8e:5f:21:f4:e8:5e:f0:cc:86:b5:60:f3:e3:12:
53:4e:f0:3b:a4:ac:de:c3:7c:24:e9:c4:80:dc:b5:
47:ea:1e:77:d1:2b:f8:c8:8a:6e:db:87:b7:bc:db:
8a:90:5f:e5:8d:a2:b2:d3:af:19:5c:97:6f:9d:5b:
b8:0e:a4:47:16:e3:5c:dc:60:e3:b1:65:39:0b:de:
3b:b7:3f:0a:05:06:25:74:49:30:ee:de:a1:b6:b1:
88:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C7:C6:66:C9:36:36:96:4A:DB:62:46:77:C0:F4:5D:E3:62:37:1C
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/GcfGZsk2NpZK22JGd8D0XeNiNxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.76.0/22
IPv6:
2a09:d0c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:f0:5c:3c:64:4c:7b:37:4b:b3:2c:bd:5a:1c:cc:b1:ea:d2:
87:01:bf:55:2b:dc:15:ae:6c:46:3d:e1:22:b1:94:70:e1:d5:
2c:d0:c2:2b:42:50:e3:a5:44:6b:7f:f5:09:82:5d:1a:56:57:
ba:95:66:a5:43:13:63:5e:5d:d3:6d:c0:05:ed:fd:c6:37:42:
c6:8f:9c:2b:13:52:31:38:2d:dd:47:35:78:f7:47:22:6c:42:
9e:57:3a:a4:58:cd:65:93:eb:a0:dc:8c:96:e4:34:22:b1:5e:
55:0e:f9:dc:19:77:a2:8c:36:17:a0:6f:eb:50:95:ca:90:54:
2b:6a:a7:e0:af:45:f5:59:aa:95:95:07:fc:a7:d6:cf:f6:50:
b0:44:c2:33:b6:b7:b5:43:e6:0b:5e:5c:f3:16:0e:f9:e2:8a:
96:fb:4a:db:15:ac:33:db:a6:d7:a5:da:f0:8c:a2:3f:65:f3:
0d:2a:1d:7a:b1:7e:5a:91:b2:65:b0:6e:ca:ee:39:24:df:e0:
b5:9f:84:fb:63:af:87:4f:7b:07:7a:6f:27:7c:f0:03:86:a1:
87:e1:76:89:29:c5:6b:22:22:67:3f:1e:6d:2b:03:af:32:7c:
4b:54:14:86:00:6f:2a:cc:25:21:c3:7e:82:a4:e9:13:ba:da:
e3:2c:e8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:26 2025 by rpki-client