Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/GiC40GdnPgHbIqIbDNeP-spJi-M.roa
File: GiC40GdnPgHbIqIbDNeP-spJi-M.roa (raw, json)
Hash identifier: Xd4LHWf6P2V0nuixtM1f8JXOI9EnPVM3k32pXeFOXiw=
Subject key identifier: 1A:20:B8:D0:67:67:3E:01:DB:22:A2:1B:0C:D7:8F:FA:CA:49:8B:E3
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 0194C21F6B0BF5FF3351A12CA459822A3D52
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/GiC40GdnPgHbIqIbDNeP-spJi-M.roa
Signing time: Sat 01 Feb 2025 15:27:06 +0000
ROA not before: Sat 01 Feb 2025 15:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200195
IP address blocks: 45.80.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c2:1f:6b:0b:f5:ff:33:51:a1:2c:a4:59:82:2a:3d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Feb 1 15:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a20b8d067673e01db22a21b0cd78ffaca498be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:99:76:40:27:09:6d:bd:38:cc:08:50:93:
9a:19:47:db:e8:6d:c9:f0:78:58:84:de:9d:34:5e:
7e:59:37:b6:c0:ce:3a:a4:54:50:5c:9c:be:53:fa:
90:94:27:03:17:b2:66:a8:b4:7f:55:99:27:1e:b9:
e6:8c:f8:2b:1f:c0:a7:96:50:bb:96:84:62:76:54:
67:21:12:1a:96:eb:30:7c:16:92:4e:1a:93:19:de:
c2:67:9f:cd:1b:5e:ec:2c:e4:6c:5b:e5:7d:a6:3a:
59:10:49:f7:c7:39:d8:ac:ba:44:9e:c0:e6:06:9d:
15:ad:aa:b9:94:de:8f:d9:16:18:fe:60:8b:81:e6:
aa:a2:4d:b1:24:19:38:d2:85:ef:f2:e9:01:ac:92:
c9:d3:dc:78:a4:6b:ac:3f:d8:f8:59:a4:8b:33:78:
99:08:89:7a:a5:6b:d5:ac:c2:82:50:01:68:eb:8b:
18:bb:d6:35:2a:8e:53:58:0a:ca:d9:ea:f9:fc:c3:
93:9f:66:d3:7d:65:86:03:15:79:4a:77:90:5e:69:
4f:fb:17:61:5e:09:fb:f3:7c:f2:06:39:e1:a7:6a:
56:bd:94:6b:71:7b:82:ac:07:51:4c:0c:bc:e4:4f:
a6:e6:d4:98:05:e4:fa:69:ca:8c:88:77:05:48:50:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:20:B8:D0:67:67:3E:01:DB:22:A2:1B:0C:D7:8F:FA:CA:49:8B:E3
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/GiC40GdnPgHbIqIbDNeP-spJi-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.36.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:9a:b9:a1:31:75:d4:bb:c0:c6:10:4a:84:1c:ca:2a:08:0b:
02:a3:bb:64:c7:89:28:bb:30:72:b5:0e:7f:dd:d1:73:b3:d2:
b3:7b:0d:2a:36:15:99:c9:99:2c:93:27:e4:ab:d8:a4:94:1c:
a0:de:ad:4e:ba:5c:e2:5e:d6:07:aa:43:98:54:9e:87:8d:d9:
a8:47:31:22:6e:9f:1f:8d:63:43:87:73:29:ac:14:7f:35:02:
ba:90:18:d4:88:6a:8e:ed:49:4b:0a:2a:20:39:44:4f:16:39:
bd:79:7f:f4:69:47:fb:e2:f5:c2:05:a7:0f:f9:39:31:db:46:
3a:67:73:c5:fa:6f:73:31:fb:73:cb:20:11:da:86:6f:60:cb:
3c:98:35:db:5f:fd:88:4b:e5:c8:53:50:18:6f:60:7e:4b:6e:
1a:bc:9f:86:df:fb:ff:5c:f2:8a:a6:28:b5:2d:6d:d1:87:56:
a1:75:d3:8d:fd:ba:b5:05:18:cf:ed:ab:f2:e2:62:70:b4:7c:
a0:96:bb:21:5a:b7:c6:54:72:a5:d6:2c:78:5d:17:77:bc:1a:
38:d6:58:38:ae:9d:99:e0:7d:35:44:f0:68:e7:6f:66:69:f7:
15:01:19:88:22:ef:82:73:f3:90:5a:71:ed:18:20:bc:50:8f:
f1:c6:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:15:21 2025 by rpki-client