Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/G6ic6W0BHNuP7UsFCmcXQxnHbOE.roa
File: G6ic6W0BHNuP7UsFCmcXQxnHbOE.roa (raw, json)
Hash identifier: urkDD5tS7pzpIXK6z2KzGTQaim24QD6PvD18Pzu9Zz8=
Subject key identifier: 1B:A8:9C:E9:6D:01:1C:DB:8F:ED:4B:05:0A:67:17:43:19:C7:6C:E1
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748516F2D913AC78C828927A0798320
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/G6ic6W0BHNuP7UsFCmcXQxnHbOE.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39326
IP address blocks: 192.121.112.0/24 maxlen: 24
192.121.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:51:6f:2d:91:3a:c7:8c:82:89:27:a0:79:83:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ba89ce96d011cdb8fed4b050a67174319c76ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:6f:9a:56:93:f8:4c:d8:d7:f1:0b:4c:cf:
76:94:f7:14:a1:ca:bf:7f:81:b3:e8:3f:37:02:ee:
a1:c0:ad:63:19:30:95:f4:1b:fc:4a:8c:8e:66:86:
e4:c2:2e:c9:2b:54:28:62:be:9f:b2:d9:21:6f:33:
3b:96:5f:01:88:01:03:3a:2e:42:e7:0e:35:81:21:
2d:b6:ea:38:70:72:a3:df:f9:a0:f4:13:f4:65:2e:
e9:c3:b6:22:ce:d5:d1:c2:1b:ec:06:2f:0e:8f:cf:
74:8f:de:05:85:09:9b:6c:da:ea:c8:8d:5c:0f:73:
71:6a:42:d4:d5:18:cc:99:89:65:d0:02:5b:69:19:
5d:93:8b:db:0b:50:06:0d:c2:01:06:21:b5:6e:77:
fd:fe:69:fc:0b:11:c8:be:dd:88:3b:36:c1:11:51:
51:45:47:07:a8:16:46:da:55:6c:bb:5b:a9:ec:f4:
92:e8:d8:31:3c:37:a1:15:95:53:55:b8:05:5e:98:
96:31:13:85:ab:f5:ee:0c:18:04:c8:51:d5:0b:b9:
6e:27:21:0a:cc:c7:05:6a:53:d8:94:81:bb:82:59:
45:c2:51:62:cd:75:5a:a7:39:b0:13:24:dc:de:56:
f6:a8:ef:d0:88:e3:76:3e:c3:18:4a:f1:b4:64:dd:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:9C:E9:6D:01:1C:DB:8F:ED:4B:05:0A:67:17:43:19:C7:6C:E1
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/G6ic6W0BHNuP7UsFCmcXQxnHbOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.112.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:32:a8:2e:3e:0b:f2:6f:06:ab:8b:39:92:ce:a6:d3:29:7b:
f3:ed:59:3b:d9:25:6c:45:cf:b4:cb:3d:bf:a1:ab:82:52:2d:
f2:2d:ac:00:03:e9:66:34:61:c3:fa:29:a5:21:cf:a0:ab:26:
b4:28:77:86:dd:c6:fc:ca:7d:27:6e:14:4a:c1:09:52:f8:4a:
aa:86:66:d5:a7:8b:ad:31:0d:2a:98:08:33:28:32:1d:79:f9:
2a:fe:a8:a2:1d:ea:21:7b:5d:5c:69:81:02:c5:d2:33:de:6a:
78:8c:f4:b4:05:50:6a:06:07:ed:78:68:99:4f:0b:18:93:3e:
c3:8f:89:84:bf:d5:1a:fa:f7:3c:f5:0a:3c:11:36:24:e2:41:
a3:08:f8:e5:2a:3e:3b:fd:74:80:f7:24:74:5a:31:51:55:ff:
52:e6:95:0f:80:dc:ab:0d:e3:f2:2b:18:dd:17:80:89:be:4f:
58:ff:d9:28:14:8d:17:68:95:c6:cc:42:47:6e:72:ac:13:da:
b2:f2:a3:63:47:16:15:61:35:6c:dd:59:c7:6e:ff:38:47:36:
ec:e8:18:47:78:fd:a9:99:37:2c:f6:db:8d:8f:6d:4d:f6:1c:
c8:ec:43:83:c4:c5:05:0a:e3:94:de:15:b3:89:11:cf:39:44:
ca:c8:22:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:23:47 2025 by rpki-client