Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/gg-emnwJIGdBmpEHYh5OFvjnfmc.roa
File: gg-emnwJIGdBmpEHYh5OFvjnfmc.roa (raw, json)
Hash identifier: f0YF0XqFky78qYjbpn5730w15nHy84AldxyEdZxgOEY=
Subject key identifier: 82:0F:9E:9A:7C:09:20:67:41:9A:91:07:62:1E:4E:16:F8:E7:7E:67
Certificate issuer: /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial: 01942444A208C12940494B330515FB4DFCE1
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/gg-emnwJIGdBmpEHYh5OFvjnfmc.roa
Signing time: Wed 01 Jan 2025 23:47:45 +0000
ROA not before: Wed 01 Jan 2025 23:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212031
IP address blocks: 193.163.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a2:08:c1:29:40:49:4b:33:05:15:fb:4d:fc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Validity
Not Before: Jan 1 23:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=820f9e9a7c092067419a9107621e4e16f8e77e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7a:7d:46:95:9e:08:4c:11:19:cc:59:fe:34:
45:37:f4:dc:97:c7:07:cf:ff:85:da:34:ad:72:bf:
a4:b4:4f:7a:80:cd:06:41:ea:e5:96:08:06:9f:44:
77:28:45:c9:ef:f2:4b:72:d0:de:67:c2:d3:05:40:
a1:df:a3:e9:87:01:01:2a:21:70:cc:4b:70:20:3b:
d7:5c:41:ae:47:ea:f9:2c:88:29:ab:ee:d3:f7:db:
0e:27:29:b2:8b:0e:7d:9e:24:53:73:c3:77:da:6b:
f3:ca:bd:89:d6:21:74:ac:03:af:56:ad:af:e4:11:
5e:11:ea:5d:6a:7d:5e:fc:40:b6:93:c2:38:a3:5f:
c1:fb:90:e1:bf:3e:2c:9e:7c:4d:4f:6c:6f:53:2f:
9d:17:b4:07:ab:ee:77:4d:9b:36:b6:64:68:54:17:
d5:79:7f:bf:9e:05:e3:51:08:f2:bd:8c:1d:27:1e:
25:71:39:ad:da:8b:8a:76:13:67:9f:27:88:36:07:
e1:fb:1a:98:d9:e8:92:37:5b:d3:d1:ea:4a:97:3b:
33:05:de:66:9e:2f:44:68:90:5c:d1:ab:db:cf:c1:
d0:84:9e:c6:ea:39:6c:6f:3f:d0:4b:eb:70:a1:ba:
f4:c4:cb:d9:7a:13:c6:e8:07:0f:04:77:36:49:ef:
18:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0F:9E:9A:7C:09:20:67:41:9A:91:07:62:1E:4E:16:F8:E7:7E:67
X509v3 Authority Key Identifier:
keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/gg-emnwJIGdBmpEHYh5OFvjnfmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.145.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d4:1d:26:58:d3:42:57:92:6c:6a:83:6c:79:b0:a5:f4:b2:
73:e5:a9:00:4b:b0:98:30:37:3d:73:9b:fe:42:6e:fe:19:31:
4b:56:b3:62:f5:9e:3e:32:86:87:e2:cf:0c:e5:39:fd:cb:5a:
fd:af:47:76:4a:6b:6f:80:6f:5c:f0:75:91:2e:d3:35:91:17:
18:69:0b:d9:6a:f0:01:5e:50:a7:76:19:b9:d7:e7:10:b1:a0:
38:bf:b1:d5:8e:e2:49:39:27:88:70:92:72:20:4c:86:01:a4:
b9:0a:9c:48:01:7d:72:b2:d2:6d:05:04:0a:4c:9e:b6:8b:93:
55:12:c7:c5:c6:08:64:12:af:84:d5:5d:32:68:af:03:3b:b3:
0a:ff:91:46:25:51:62:f7:ee:6a:e6:9e:18:13:46:b8:b8:d3:
f3:73:34:b6:89:6b:06:e2:6c:5d:a7:71:c0:93:ff:20:12:13:
b4:af:6c:64:9d:bd:57:1a:4d:19:1c:10:d5:d6:0a:71:8a:12:
28:0c:5f:5b:63:8f:20:6b:e1:b0:87:de:17:93:81:9c:ce:88:
02:76:c3:6f:e8:44:b7:85:c1:2f:8c:51:ad:7c:4e:64:0b:e6:
ba:e4:32:8c:d1:50:67:f8:3d:88:a6:d9:1d:c1:b5:8e:36:04:
d4:0e:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:21:34 2025 by rpki-client