Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Gfj5FTuiNbZK_LFiwayrYNtrPKI.roa
File: Gfj5FTuiNbZK_LFiwayrYNtrPKI.roa (raw, json)
Hash identifier: 5/J7SijVXoYCPcKb9w9CxjJi4R/OPRBRVizngGE4OAM=
Subject key identifier: 19:F8:F9:15:3B:A2:35:B6:4A:FC:B1:62:C1:AC:AB:60:DB:6B:3C:A2
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274853F3850489996EC6A57BAC53523F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Gfj5FTuiNbZK_LFiwayrYNtrPKI.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42201
IP address blocks: 192.121.245.0/24 maxlen: 24
192.121.246.0/24 maxlen: 24
193.181.35.0/24 maxlen: 24
194.132.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:53:f3:85:04:89:99:6e:c6:a5:7b:ac:53:52:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19f8f9153ba235b64afcb162c1acab60db6b3ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:20:61:2b:6c:5f:6e:88:95:54:79:7b:3f:
5d:9d:39:f9:f9:e5:e5:c5:5e:52:f0:3a:f5:ab:7d:
46:fa:57:48:75:8b:0f:17:63:07:f8:ba:25:1f:1f:
ba:66:97:2d:59:07:d2:ea:6f:54:9a:10:23:12:4b:
f1:d0:66:4f:4d:7c:65:80:78:6c:f7:77:47:0b:fe:
d8:1d:32:b0:ee:c6:29:c5:bc:35:67:14:09:86:28:
5d:1d:39:76:f2:31:fa:e1:0d:2e:ba:eb:d7:74:5b:
1f:a2:80:b4:81:4e:e4:37:a4:09:7f:3e:9d:6a:3d:
79:0b:5c:6f:81:b4:b3:00:7b:cf:0f:70:76:79:f5:
e5:d5:35:8b:e1:31:b4:c7:a6:84:3c:d2:83:a9:21:
a6:94:51:18:1f:04:0e:6c:66:dc:49:5a:97:04:f5:
5c:d9:c7:95:0b:a5:64:d3:7c:5e:fc:4f:93:61:0f:
29:ef:25:d9:71:84:3c:04:e0:5c:f9:03:41:49:91:
10:26:ef:54:e9:f7:da:41:7c:ef:fb:ed:f9:d4:d7:
08:5d:0a:1b:ca:37:4f:e5:d2:4e:8e:24:36:70:a0:
36:6f:bf:ee:53:dd:74:83:a4:0a:61:0b:58:19:3b:
29:e7:56:ff:dc:c9:48:1b:0a:ff:80:22:96:f1:cf:
5c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F8:F9:15:3B:A2:35:B6:4A:FC:B1:62:C1:AC:AB:60:DB:6B:3C:A2
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Gfj5FTuiNbZK_LFiwayrYNtrPKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.245.0-192.121.246.255
193.181.35.0/24
194.132.123.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:11:f1:ca:bd:9d:6b:89:28:84:25:56:06:d3:2b:60:82:69:
54:ec:d5:80:d0:a0:11:fa:c8:6a:cf:1b:6f:79:10:0e:f4:1e:
15:ac:24:68:17:5c:60:f0:ef:3e:2d:5c:c7:a6:72:84:ef:ac:
35:2b:63:9e:9e:2a:2c:8a:1e:88:28:ed:0c:78:a9:11:9e:b5:
ad:b1:72:a9:c2:0e:cd:53:b7:ad:90:23:ad:b3:9e:b5:80:d5:
c1:c1:41:8c:87:32:87:e1:ca:24:72:ee:42:12:c7:7a:6a:59:
b5:e6:4b:9f:11:52:e7:0e:b7:cc:7e:5c:72:05:c8:db:bb:87:
ef:45:f1:e8:2e:0b:7e:89:c5:0d:37:21:cf:86:10:6f:28:2a:
e9:b4:09:86:45:40:c6:29:90:f7:36:21:b6:3a:de:9d:ee:4d:
9d:b7:b5:bd:e6:4c:be:d5:2d:56:f0:b2:41:c7:85:34:85:98:
e5:8c:68:30:34:00:a4:9e:cf:d3:ff:a5:2c:70:38:a5:c5:bc:
b8:c4:f6:7c:79:d3:bf:b7:91:29:b1:c7:83:ff:8a:cb:78:62:
8e:1e:c5:eb:b8:65:b1:42:ca:78:bd:52:0a:32:37:6d:25:2c:
f2:75:e0:4c:55:91:75:09:75:60:7d:b7:d1:af:e7:61:8d:d9:
70:d5:82:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:05 2025 by rpki-client