Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/gLpL93_717seB53wtn-PIYRSJpQ.roa
File: gLpL93_717seB53wtn-PIYRSJpQ.roa (raw, json)
Hash identifier: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=
Subject key identifier: 80:BA:4B:F7:7F:FB:D7:BB:1E:07:9D:F0:B6:7F:8F:21:84:52:26:94
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01942067B83336129ED8B6970EA5B087D575
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/gLpL93_717seB53wtn-PIYRSJpQ.roa
Signing time: Wed 01 Jan 2025 05:47:35 +0000
ROA not before: Wed 01 Jan 2025 05:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 185.255.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b8:33:36:12:9e:d8:b6:97:0e:a5:b0:87:d5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 05:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80ba4bf77ffbd7bb1e079df0b67f8f2184522694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:d8:0e:62:1b:82:cd:97:15:17:f9:9e:70:
77:3a:d4:c7:e2:c3:b5:56:51:4b:a5:10:86:87:54:
16:da:f4:94:66:d8:80:2f:1b:eb:df:ad:e4:4d:8e:
7a:33:84:dd:b8:fc:c1:3f:a7:c5:b9:59:ab:50:39:
44:3e:bf:e1:cb:86:d8:eb:10:a2:c3:ba:8c:a8:e5:
c7:ea:46:59:9c:a6:d9:3a:92:7a:f4:56:b5:40:9e:
c4:5a:e1:ec:fa:86:4e:e2:c0:2d:40:27:e6:5e:fd:
81:9d:9f:13:66:23:8d:65:d9:06:58:03:bf:78:9f:
e5:88:79:38:34:76:e2:2f:6c:c0:2d:77:8d:8e:a7:
65:e2:74:b3:55:57:76:29:1b:83:f3:ef:09:65:88:
d9:47:23:92:f6:ca:78:0c:e6:b1:76:cc:f1:06:33:
32:71:a0:9c:f5:72:a6:4a:94:26:92:6f:a9:20:8a:
d2:7c:fe:ba:c6:9d:e0:b0:77:3e:d8:b8:f3:a6:db:
3b:72:94:fc:7e:73:38:07:3a:84:4d:1b:76:4a:a6:
14:42:b2:13:a2:72:37:9d:b5:16:b3:49:36:95:99:
14:03:c8:b9:1e:23:23:a0:68:5a:48:88:06:14:79:
86:75:55:36:f3:60:89:74:cb:a7:3d:47:f1:ce:bf:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:4B:F7:7F:FB:D7:BB:1E:07:9D:F0:B6:7F:8F:21:84:52:26:94
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/gLpL93_717seB53wtn-PIYRSJpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.5.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0b:80:ee:61:56:ee:bb:26:69:f2:44:29:38:5a:ad:61:02:
40:37:fe:7b:2b:a3:8b:4e:db:9b:3c:27:8e:c5:0f:01:dc:d3:
d9:b1:1d:60:13:75:a4:69:be:22:4e:2f:ea:b0:a5:3d:ce:a2:
44:9f:cf:09:33:5c:2c:bc:b7:71:2f:d2:e3:48:72:de:7d:9d:
fe:8a:c5:88:ca:9d:5f:e3:ea:02:70:80:e0:4a:df:3f:03:0e:
e7:ad:5b:f5:d5:63:01:92:ac:9b:9e:22:7b:6a:4d:a5:b3:be:
c1:9b:10:c8:a1:b1:57:7d:9d:d5:d3:70:13:b2:95:d9:7a:4e:
3c:3f:bf:bb:1c:00:14:ba:bf:00:ed:b7:d5:39:e8:c2:38:51:
02:1d:0d:50:5b:4b:08:8e:57:39:da:ab:a1:ea:ed:70:b3:10:
c8:21:1a:c5:95:31:89:cb:05:98:8f:cd:40:16:70:b2:37:d0:
31:0d:f1:77:85:f7:dc:2b:06:e4:74:e2:5c:37:61:7a:fc:ad:
11:74:38:d1:d2:de:2a:cd:d5:e3:95:e5:1f:64:2e:0c:3b:84:
23:07:f3:fe:c2:94:65:c7:2f:7a:66:ef:7b:51:6a:df:d1:e3:
8e:1c:8d:e1:2e:01:a9:c6:4b:65:ac:49:ea:64:bb:46:fc:78:
40:9f:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:50 2025 by rpki-client